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", 0x1000}, {&(0x7f0000004240)="15112461a317c820c9ffd74d64c5c6551564856c26b10ee4c5b462d81eeb3aeb83c7d6b0e064220fb2d2ea40ed985c497c19e5dbcc91d2916453b3808ecf485b2e853d2a8f90fd7213538fda874f9ad1cc96fcba3a06fc499e7d516f1a0793ae166128ebcc27fdd4d1315e3d04017b6056a0adb827680f5d25584b55748554b8ca174a38fc3dfb42a5a9502c40a9116ad12c1822b9f1d776f6a2f14857ac6b3cb501312633800fe8a85a8143880bb8b5859824853246e61f08de2db4d9b4f9bf1b8afe15df495e81cb4a50ffbce1fc29f6d40fb9c037414c2fe94ef50bfcc3fce8bc2e3b132ab66a", 0xe8}, {&(0x7f0000004340)="7db8f3409a75affdd5b1ddcef98450aa3346def27cbbc94cdc77bd6dbe1e3943a6737e5a2101bef0600e71cf08cde0472193d179f294aba95013df8becc17dcbdf41d9c39cc968fe0b4a8c9e346faa55800311ac16913a1991502759f5db0a67f55461ce275a77880d8384dc9bff046841633e499a12ef1886566ae1ea7c8e3f152ce889b86bd540ab81581cc100f342a1342d8f953b59f940ea49f1d7ec8584b10794f55d647993887e42d8e15a2c8166fc23641f27fc62c1dee6d21ccbff6dc7ae84ce2b71d1e24d68caca3efec6e5ffd7b662cb830009ee31f6db330c2be6c0d4d6308959f51003c93c7768b9079a8ec61020", 0xf4}, {&(0x7f0000004440)="fbcd0386ad05ea61955b50d7512f2c7de071e613e1a77283934936fa4dde083b6d1d52fde61debbf435e2c0e6436398a5bd5e8158003e2c9856263e6a509aff5b114d7e8a4051e79dce0712e0e60b37162ed151ed69721c1e3a06fc2db4826dc38412472be8d5d5b8e3ce1d1fef33b1a82efd92f1790a5c912910d9149e4397ed92b244ba5a59ad752cd0729935ffe985b", 0x91}, {&(0x7f0000004500)="4fa69fde675e0166d40d804185210fa468ce93ea342f3991760bae2135c5d1bdda552aa00513814ff024e3a1a323197bb5ec35e90709b696f531b524b69cc7db2f719a1c6f87ce4233e48c9abdaf75659e9b705d04ea015217b96b30b930574053008c5880", 0x65}, {&(0x7f0000004580)="8efba1a42d0c41c57e1c120933db37d87bf2560db3b4bfdafda3a8dba9ed07bc1407305da314f1f6", 0x28}, {&(0x7f00000045c0)="f3", 0x1}, {&(0x7f0000004600)}, {&(0x7f0000004640)="772dc0a063381deffc18741c1325ce7fc137a03a1e46964c4e32c942435f109bddbeaf724b1935d3ee6d6fe8dc342af71de2ac7617cc881060153e9b93b05d50f824b2e91ff36c43de078ed51ad34eb9bc88f6faac47ed36cae96f850f67b24ba22adee89df3547286e2f8e59f801c280ba8e96f1ec35110246abda838c4039e767e4dcfadadd8d779e96b3740e5a70846c8b286ed2ab3b65f92955a7450774a9c6baf26a7f517b4f09d2b6a4800310720ceaa0d07a8c5acffd9329b6f58fb9fbacd453e0891279e8fb3fe381790e853136471", 0xd3}], 0xa}}], 0x4, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:26 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000480000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:26 executing program 1: bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3094.989044][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.000654][T27657] 9pnet_fd: Insufficient options for proto=fd 00:20:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x19]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x2}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:26 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = syz_io_uring_setup(0x3c73, &(0x7f0000000080)={0x0, 0x8ead, 0x2000, 0x1, 0x202}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @private=0xa010102}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (rerun: 64) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r6, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) io_uring_enter(r3, 0x597c, 0x691b, 0x2, &(0x7f0000001580)={[0x7a]}, 0x8) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg(r5, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)="53a6df61c00b4f37b780f3e87b2502f1ad44935d2db3010ed753b813eeb65eb0c6b805adf5f36b95ae6b9512b4ce05d9e335a4f089b1d878b7ff355f35789df7347dd5219043192e56c82087f18f9099dbb46406475708efafdd67c3a892079e3ab575ed3d3749326a3e8e37c92a1f922266867512662ddf94265bc5b4fdaecac21489b953a2e3f45e3dea6ceb7116a582aed48f203791a4157f281871eadd444af50623e52e06ef6af115928d38157993816208e911ec8c7b4606c10a5f65426be8555b76137b20f0f05689ccb17f16462342959d195c6677dca68084afb956573d629b08", 0xe5}, {&(0x7f0000000480)="f822159dc9a8f21152e9363d9cb94274b0acc14993fc2865988289185724041b5691e178fa2e748235fa7a602e821d35e218ef36997142a57fbbeb80b2d1731fb50562d46c810b183f739c65711a5c5b17b2c0c2c3439ee9577208c9ee7f877339deeada907ed0dd0c02d9df4417277e9f66bad660c31ee717719aca559a102784471c812df61674b2738334372c7e43b8de6c0dbfd10f1e15af948e055b8a48ab058ab15c96792c6945e29fb07c33c49c828c27fe039466edb0912f913692268a98a59c7d7a25a404f9b98c702cf56b4649151d6f4f0ab97efa4b86a6662b8c6470", 0xe2}, {&(0x7f0000000280)="d4a76389ef550ef456b3a4347aa983d8edf2a399e62f32623c0a73d4d0ffd4b177061502ccd639b4897594ef25f29951236231986217743d596fc4f9112b65c78bac846d37cd18228ca2fd181b0e1d0ea864f86b758279c64c1d72ef75dab5d39c2cf2f3124691874bff71410ad8510864", 0x71}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)}], 0x5}}, {{&(0x7f0000001640)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000002800)=[{&(0x7f00000016c0)="c0bd24054e3aa80765bffbacb3f815f3f83b0d0d353ec22b46e8cdd4d0daf25d8b55f278fa50a8b528cd16ee3cfbff957bcf3506915e1b5e814a5b9c28a51c5bd23ac867af0f38552d7fcd851f2478b88980020364e9c2d6d80232775cbac4649f975b766540a0b7a815368fb16d937b2f3b3d9de1da74f58ddd44d683b6bfbb7643de804b6f8f770086f7dc21cddf439867bcf3e0f792e2e652940dde88dfb2961e5f67733017071e5052b2", 0xac}, {&(0x7f0000001780)="3e3607c1935320a44cb989a0d41f2e58a692609c4f8121afaa439bf8f3694561380ad305f89f39c495c5cc4c4ae2d78eb9323d0f", 0x34}, {&(0x7f00000017c0)="f4b0020819", 0x5}, {&(0x7f0000001800)="77aed2c7541cc03a31c71b01a9bcde757a5c441d760897e3c0fbd75a49939e578f03f34256a81dd0fb846bd3eb9c365b63caee79dece3b0ecf2ca20dcc43805b7f7e6f8fa321a84ffb5b4b1a5f5c9248324096d91924e063a25615c229698d86b5ea49a54744a9f21145df3b735920d5b0c88d5bd3582c404deb9f4370db6ea1945662ebdbc1ec52cccef5b360ccb3b064fc0638a50a30102ba984b86e280ba83082b066777cf1600a8204363477397ec28e202480e0580acc4464425fce8a1a1fc4670bc4de9fcc5e8442cbf1878f3922f8b603f514fac3d3602b6958ebba22c222226c4b5ea56d435f66f0562662ba589e2dc2756aba51a15e2c7f033cd6f42ab1e40416eef081c33bb3d5ca81ee6b98862200f1bf4360e7606dd2ac9d785c541645e8f2f6f1fc93f681aebb3aedb78211538fe9ea114f5937d4dae2ecb9d9c6b2b0692282fd9ca88f11125062ef972d45241ffc60b56d381d2270ae87979e4cedd305278f9cf8faf9abff22ecc27a3276a86eaa967f52fa7605dbe7265136c8a8049a680997ee6c93d46c1841b561fe1fac5464d6119508f59b0ba19dc7b346dfcb3b3e36684b6eadf4e05596cd280403bd78cd278b2ab63701d1bb549bb2374b0f2328e5c91ae1a44797b9bc884f7fbf5bc2812a1e4084069a795aa3f422b55134f3a0d7ef6fb8603e703fdba179dd396600ed96ce34e444e65dcd77f342fef105e9b655614c3387b1c08ce2c5b6a7c1cf446c891f0889e28c0688d2b023a9cf8ee49444e0e7aca1ea0da7cccbd002e676e1377418a0a6d79179a2257f4eef8ce458888824d5e41e032125c5c34892f9efc00e8c88f14caa982aa5ee086746000c783cbd9ae735531fcc2c8dfd11fb900b4a0ebf735cf3d153f593c044517e26b9fe17c8667ad7664af0771d81b500b722e269a417661b0ea0a0af989d35e06eaf4f760c250cf1530ffb6834e5faf3dcb9e5601f9a0aa284701d49e31d83134ea905bd771a9d709672742bdc294b7ac4a6e37c5426160680e7b873285d1ca5e1ab36836e7deb0e79bafb460e53581ebb89d9fdd1e71a183c19ac984b84d2fc8d9fdd7cdff7d8b6e97a1ad407f6b5d01f1686ca0e602e9198c9108e17fce47a0fcc94220b567d8dcbad7e8d170cd21b5fd284f88e07b348d80a43f861ef8ef32453c23fdde15bff0dc8e89f05e0d8ed1d4e5ac242d9c534109e075dfcbaedf977fd05aeff0d4c2c008062ac9359a0ee6900fd387f1d8248a226cb69a4e951284078fe40ffbb0653747f0f2f8078c663d1b6a2e82817c0b1ac402ddc30f64867b02044656640c0f62c21f1039f2fca7b048eacaf2b795e2a13c3be8200d232e8c6e1e174fc1794044e83920a0b5d50f9bbbc539b3cca141475715a9a7d12f2f47e5f0fec134392aadbedfffa28895c3c51360f0c950485e0aa855b980dc29a38eaf7c810651c56c80d1d6e43657388d5ba066d040809ae0fb8bb366f6fb92d01df433e6b942942d2d82f83cc17667ba4d5d14ebf414cdb84274508218139c1244f53735be7fdc01387484a1f9adbccc8592441580d11c69fe66b955f9347dec9f20705af248e0d4de6d12ae922b262afc9bc6a8fce08962eb90608355cb7026f7c4d94421867ca2333b0cd983575ec389f22b073589f62dee5ee2234afcf6852472a3e2a0dfefcdfb5cd65f29f79894157712fd1ee578d6a8e57c6df0c0675ca877cca694a13afb149e0f04c8012cec2f410efa0e8590a65574317524e5ddb76b2b9d41c02b7a17a5e65e8771c3313a91661c8b4047a5ea14b7b9d97975e69cbeca1ac1b32a2f5d9f0a5ee907e08b576f2cf57e7aa70bfda382b665161e987d67ebfc4e41ea57945822ce61299bb34f1a7c2bf9291ab2fc2ba91a2ab2a340c5d4f0c55bd3c2d5b553e228b1775da577dad295144430216fd2c34e095a36cd75a6837a12050e6c8af1a00409d564917fedf79d11310531fa517f75f42e6062c717c5ede76e64b9562dc389420412fd262420146234acbb0a22e76a92f87c469108c61618d54b49f70a6cd8e271487bc85a1a1ed8104d3330d7dbd2a61ac8d73003f5d202edf3b848debf1035a38adf4dfcb85b54a87cc5b51d815499536d23b0e3bf251ee5ceeac7fe5677397ca14c0ad2d55a2fd34c3694dbb8b42196e649ac4ca5bc72ef5c4708bc23c7f3cc761d96d599850d89490cc099caf28ef63b0f07c57d34454fe3f740d5eca3571afb1e24293d25b00af33baefb7dcc763258bafb250b7afd3d624550aafb98bcb3587705e935e18ebc2c10e05da9aba99d90f1341747539b7619aca241a9b7746092c429161d53ba92afff5816a5070b056834af7411de4663d5225f8d59bc476a962ab0243ca1d20c2c1cfbca8e45a1659035322b6b55c2d210adf37eb7895430a548cc335cdba6f9f1b5485db3c2d216ef251af8ca651121012201adea8a74c140e3c3dbca9edee3776693e94f42660113b1c712c5fc8cdb252f08e02a5ae7f0b220ada30ec65aa8ebfcc916e079b2367326708d76c80b0fb31a21e1b207ee192f8a6f235f92cb686822ffee3891b8b433d2c61ea24029aeb444215ea8dfba9013173e48d47732cad09a4cc51761d83cf8b2895fc68ef5eb850ad1955a054e3963835c614196cb34d34c6a1864c51222a9e525dff3f794b8db89afeabc92a38a28f860511cc5ce4272075034f80edd92f9103c15125ba5a4fa44478ad5163096b8a75f2ba01b076116c15df897847efabb5bffa0e9988594e1d160edf34fccff1b180004b07f9a03038070c6bcc0e39b0e1aff4fad7ed0a5568ca6e861cd9836a86f130285eba616530b737113eeb8d534180b99b9b1fd339ccd945762914678fe49d5f727282129862f51e05abd435437432973b9279ba5e2e2f735ffc2fafaa23b809aac4ed84832f3e20dc45822a6f05f9e55055280cf10a101aefe7e35439381cf7e7a06f8a6747961a2b3322327b3c40aed7de36d01b5a898a33c40de8988f3855ea9f652321219e68a497b9c34831fc0021db486178bdc089dd06891884030cacf550170edc5ac137add3b88de9920bded856205b239b2dd4cd85f29c8a12d39793ac26698d0a93fb5474b489951b3dc6aa6ad4879b6677c59915447c761b14525927844a1b5c23f1a899ced5df04f2f47685be5b3afa5c21a7e3121866f37310ca3680170a4be935bff7cc3007b47e324e0dc4f7b48a288dd3d6b594effe43c384b9bce2940989822ad03f6d6be3065314cfa0a31d789ae0979befde8acf376864f50219d5b3b30baf8c1d9ea2fcd344affbd7fd96a3491dc983929639ac42b68f3d4360825a48a50e1647f48f56a94857b06d21dc57d598c0d9b22d548617709a3d88c58fe8ecf791cee7741a00980fc16a4f6154c440b98922794cbbee2432f94e92cee4a7bca312f992cc55b165f7d0f7ea02521e70abc4a97cbabe5c7799254c83ce65c8677e4aea09c127b2a7d0ff820adeba3b23e89ca9584bc2cbe152e0161d22bc6108fe11ea386e1bc9781392d2731202b65bcebad3d27064650904c1d369e67baffdaca294bc42a969b4c4358490d0bc4ec39786230138bb7da63834ff83d564c96ab2051ac5604aaff9525d0c130b00aa1768b626a0311eebe4525b0e6fd0dc248405aca6d5a0c039c4313f51005782a0223a27890f8824932dfca26a5d3c2d4edb5a5cb411e6d7ba65de52af107c2d5ca0bfce227ed7d92db51cbbdac20684d276db44940ff6a2871d520314f7e7f3be5b4bf4c17e9298d20942d4aeefd39093e51cff0b4de852b5d37487225a83d8f5c1ac8bf64dcb0571a84d973f81524ae9389bdfe7dcf8f7fe0a4e775c1c9f28ee529b4357d2a1515f08927065a62cff59a3c87f556ca07dbfcb032e287796df7ceae5059b02bc7228756e63aae14f6cc4ed09a27360bc037043e25be12e8c82a883cb31943147547d0147715bee1edb4f4a180b3bac9654f84350a208861e3cdc8e04c749963c7c5e02527ae2572f67239bc00285fc803511e05ad71a69aacb38452be8bfbe3b93334a8e68c0690aa36bd5e231f4b9173ca2c67b09676111c756dbae31124801e51b7ee9980e91a486b6decb900e90e9bae081c9eb5c7ddf7e1eb20d77337399c5d9ef8148052dcd9ba6ca0bd7115f208e6b17b93dabac8576dab1aea091a28794946b63b1ca82ddde209acfc2d2eadd21afba00fd05615ea92081f8749215307e0e6fa58c0021ab8715e6e4692bcceda2e96fc9fcc0c7fbf140122deaf8a2288ea1f1c551c0f65c3d9c20fddf9868586ed82045664ead346ddd70b2b31f2d1f187a09692edeb09354ea27ceb63a5658f9fc4d00ca7b39a859fe37e6c164876e62364b2367c02a428044daa0eeffb8b205f5719525edf459e5c2f15693d5f661e63f16a12e4000e55ac9e4e7c0a50167a547f77f13f891255967025c05322d7494e3dbfa7b8d3cc5db3108e1c9f67292b0de6edbf6ab1a924f9d1f95f2303faed49e32dcd85b2c5a0403235fb34cd333d38a0b2fd3495daf6dbde0f294e79a83b4bb68ba239be7dad452350d62b1787a41fa73bd12c147b0397ee068f241aac40ad7cb76dabf0ce5301ffbc58d8388b7b79c6173b983e8146ae360daa5e7bd65c0ab2c4478ec93578ed65c123938e1f4dd621578e8ac43ce51ff49abf32d636dc91725b885e8a0f71da6784f9a8f17251e22c981c54a7dd982a6856a2589dca8b8018ebe6671a83902fdc6b73c2e04042d2d39794bde560abf6a2ae03bf1bc2ada7a63d53f063c611ed3cc93c9f391f9d22a2171835ccd828dde94157cf1ec56e5a68f68db02176c75a47f0e98b1c9826cd8347d0302ac78a16935d02b6032eff0b231e8bd4ddb81b5eb5e221aeeb174c0b4f909f64205f8924a2e0c1f728766671d1873ef3d54001b439f12e74dfed6267a37712184acaf31b0016620abb25d96bfe30bcca466cd66174a7077822a64a48ca1b6d2589f8a03e32d72f9011d4e91a71da979e75183bb35ee38ec04084cd0d8646aef25720a324084fca4dbbf758948c5c7436b8921efebcf0b7ede0b851c841722bde6464a179f9fede2afbf96338ec85681e7f605ee688bef95f2767e9128cb8b7e2d6c9979142ab1b0de5692a61ef38b39423b94a7e0680978a4492a03fbc0ca24ec3aa93e8e857fb2f713aa74db934f5033f0226db4ac4b50d24ae65232a65ae414ab706aad8b4173201f2bb8b8fc9b3e2e452cbc7c0924d0e41238e4624856d5b2a7c044a641f1f8104f97b3d756274af7275fc17732efb221d92cae5f9c2c6c8163ad681ea0a54415c193ba0175b3fe5e4988e03991ca5d923e623b049bdab7e636b56b86ad3ca0b631ff03d6687912ffb2a48d2743e1bfcd35f0d89cd6f1f2d696be419c27821f8688bc0838928705d7ff465d674de7ae1c56016ffc05d8898b1bc3a0cf54c14d28a2155ce8faf1e2c9cb776a12652d706b667732940181d96afb61e84f4330d75357372abe6c43771185fb70d62763e991d333f5bc97db387d108c93f08b5b37dc11134128b345b2c4e35850b7de1f0eca1c31cd3e5d5999ce0d73c9f21fd2d42c7a03e7e0f10dcb8d4ead6e3165c86f77254d58f231487a94380497e75c45158c0fedb34838875d1213c693103a0be5890a21c2d448d984187ab53d568daee19e77bed23dc7782e84edd952e82d39560d972e6bee7f78b5aad6ebf1160abd2a90822f156dec58289268eca1c9a8c72b522bf1b4fde05fbc17f744eebc34625347339c0ef110c62f46d7b202e1ae0ecf1e5dae3740aa", 0x1000}], 0x4, &(0x7f0000002840)=[{0x100, 0x104, 0x5, "c15308d27def5982dbeb3fcb43788d46a2fe9ecc498154cf5a97855e2e8ebaf81e503e7a682bedb696d7872f35df9f280f8e285c69e91cb73bf4d3cb3fa9075c7bbb83db46c19e007862fc0a3942622e97584a712cf90ffbf7efa4c1cfcd604fc09594df4090d4fcdb54e1b4c44bab0c2bb36b703a3827c8c299e215a7c60acb6c4c7d6b8ab528e0e4fff0d5ea5eb712e873135c7397bc5254198fec02f8337ffd5624990d753ae76aeaa1dd812c84c9f17997ac8dd9f55886de29a05976384fe66789bda6fbd79367fb3bdaa13dc867915dc3c20acf53ad92e3bba0d87beadec90a242b57e377b9bb20ace6"}, {0x50, 0x119, 0xdb, "d0a286f22491b117b0acf4a912563a676a88292a00d1c3b5f05c2dc0b8b4a5c4088827e0817577911d0a77b1ccfb25e2f69d78442b637f9295f5413151ffea"}, {0x28, 0x1, 0x80000000, "2e33682f791e89dc81e895ab775981930c6662853fcf"}, {0x60, 0x116, 0x8, "2c3bf770790d5c1c152c364492e4c1166e493cf1bc4b1f85b8071c82d5ca97f6e381bf33979ee9fdcca77af9ff870427b5e89a42bcd0705a28b1fc71f83a9cb9c52157ef0c0933399e"}, {0x18, 0x109, 0x200, "d989bc"}, {0x50, 0x3a, 0x4, "db866389eba699177ec3914117b00452dfff6e7ac4415066b02a7bb0cae521d41e95e6becceea02ae39dacb312e3a943d198b51048ce8d85fbec"}, {0x38, 0x115, 0x3, "fddbddffbbbf1d062f25aa54e9412c7e744654ba8300d823ddb4555221a0468eb1505333ad672c"}], 0x278}}, {{&(0x7f0000002ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x47, 0x1, {0xa, 0x4e23, 0x7ed, @empty, 0x1}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002b40)="c7ca1193ba4ba3e62e63e2233c7f9937f28893d24fba98a7449264f3f460cc9e776f8c71b53c76aed775ba0bdf6e77879abb1ecc7a936b142a0951840de5be3052e7fcadf4086b176eea96513af04e3c16c458bb3d81c0b5085b1f1553c19b61a349fc6c014e60214930ddbf823aba7bbfe46d6b992baf1dc213efc32658b89170eaff4eb9f1985e629a02d7abf11e", 0x8f}, {&(0x7f0000002c00)="9fb1", 0x2}, {&(0x7f0000002c40)="09c4ddc0b670b025f78df226519d3553380ba68590edcba52b7ca928b94fe79283ea9236e6a0bf25a5cf3329495229ce1d8c3036b328c117407dfb344b1083f9ff41fc38a12402046d68828f96f3f1ba772b1d81ddb56a791b2204af0217f841a41872c8f8220dc6a284ece952f01add39523f0535662a8ed472bd688ad8e6af2279c35824548e7e83664546ed790578354fa6357a2127c8fc1795f868f29ed1212530f74e1746d0fdc66a884316ad6fc4d3419a9bb148dd2ea9", 0xba}, {&(0x7f0000002d00)="c2213eb0a953acacc0832c40f961e3dd74459d438ad3f316f9", 0x19}, {&(0x7f0000002d40)="f84232f938a8c95921d13405756bd5fc379054c8944b272116fcafa88847b0a89d791e38ec7010c35f1ff5b295140b0681928b5c27304cea766ec14719aa8bac5a17decdebb5b317c94dbe35943faba49af76e690ab598bdfe9a5c1b0875debb8c8d0018ea7c0c6bc93f421a5c6c93aff58d4403d9967ee54660c05bed263770b4907f6b73f3ac7a94314da6870953bb47a079f556d17b417d3b4f7d4e742e66e9129d39a523c74465e13d70682feecee811e868566445afb0fd691396cdb73070764613163f19e50a39b28c9e02e2", 0xcf}], 0x5, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x1d0}}, {{&(0x7f00000030c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x5d7, @loopback, 0x1ff}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000003140)="c52f66f90e20378e6b35abe76c448cb34e0aefb0326a812db14c4a764f329e704ad364a5dfc8496a635bf55315d33729878d9f9d3f81e98d03cd76a20e342e8e128b1b5d4aca9c312ac3397e9a7f48982edb4d97aa2391ed51f54c753a9807eaf1a2e57b1027c579865b5e6d64128b085ff948aa5460444beb5d82c38bbe3192df1170dc58d1184f3bec1cbe4943cd8b6eededd7b8e04fcffb5d025eef1f24435d82c3892510876be08575d5ab90206e9eb4024858ac2cf6b30f0751d93d262e4128fa3ef0d70620b299f42fff2c20915238", 0xd2}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000004240)="15112461a317c820c9ffd74d64c5c6551564856c26b10ee4c5b462d81eeb3aeb83c7d6b0e064220fb2d2ea40ed985c497c19e5dbcc91d2916453b3808ecf485b2e853d2a8f90fd7213538fda874f9ad1cc96fcba3a06fc499e7d516f1a0793ae166128ebcc27fdd4d1315e3d04017b6056a0adb827680f5d25584b55748554b8ca174a38fc3dfb42a5a9502c40a9116ad12c1822b9f1d776f6a2f14857ac6b3cb501312633800fe8a85a8143880bb8b5859824853246e61f08de2db4d9b4f9bf1b8afe15df495e81cb4a50ffbce1fc29f6d40fb9c037414c2fe94ef50bfcc3fce8bc2e3b132ab66a", 0xe8}, {&(0x7f0000004340)="7db8f3409a75affdd5b1ddcef98450aa3346def27cbbc94cdc77bd6dbe1e3943a6737e5a2101bef0600e71cf08cde0472193d179f294aba95013df8becc17dcbdf41d9c39cc968fe0b4a8c9e346faa55800311ac16913a1991502759f5db0a67f55461ce275a77880d8384dc9bff046841633e499a12ef1886566ae1ea7c8e3f152ce889b86bd540ab81581cc100f342a1342d8f953b59f940ea49f1d7ec8584b10794f55d647993887e42d8e15a2c8166fc23641f27fc62c1dee6d21ccbff6dc7ae84ce2b71d1e24d68caca3efec6e5ffd7b662cb830009ee31f6db330c2be6c0d4d6308959f51003c93c7768b9079a8ec61020", 0xf4}, {&(0x7f0000004440)="fbcd0386ad05ea61955b50d7512f2c7de071e613e1a77283934936fa4dde083b6d1d52fde61debbf435e2c0e6436398a5bd5e8158003e2c9856263e6a509aff5b114d7e8a4051e79dce0712e0e60b37162ed151ed69721c1e3a06fc2db4826dc38412472be8d5d5b8e3ce1d1fef33b1a82efd92f1790a5c912910d9149e4397ed92b244ba5a59ad752cd0729935ffe985b", 0x91}, {&(0x7f0000004500)="4fa69fde675e0166d40d804185210fa468ce93ea342f3991760bae2135c5d1bdda552aa00513814ff024e3a1a323197bb5ec35e90709b696f531b524b69cc7db2f719a1c6f87ce4233e48c9abdaf75659e9b705d04ea015217b96b30b930574053008c5880", 0x65}, {&(0x7f0000004580)="8efba1a42d0c41c57e1c120933db37d87bf2560db3b4bfdafda3a8dba9ed07bc1407305da314f1f6", 0x28}, {&(0x7f00000045c0)="f3", 0x1}, {&(0x7f0000004600)}, {&(0x7f0000004640)="772dc0a063381deffc18741c1325ce7fc137a03a1e46964c4e32c942435f109bddbeaf724b1935d3ee6d6fe8dc342af71de2ac7617cc881060153e9b93b05d50f824b2e91ff36c43de078ed51ad34eb9bc88f6faac47ed36cae96f850f67b24ba22adee89df3547286e2f8e59f801c280ba8e96f1ec35110246abda838c4039e767e4dcfadadd8d779e96b3740e5a70846c8b286ed2ab3b65f92955a7450774a9c6baf26a7f517b4f09d2b6a4800310720ceaa0d07a8c5acffd9329b6f58fb9fbacd453e0891279e8fb3fe381790e853136471", 0xd3}], 0xa}}], 0x4, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:26 executing program 1: bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 00:20:26 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe880000000000000000004c0000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3095.075106][T27666] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:26 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) io_uring_enter(r4, 0x84d, 0x23a4, 0x0, &(0x7f0000000500)={[0x6]}, 0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000240)=0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r10, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000540)={r7, 0x7ff, 0x2, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000240)=0x10) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000240)=0x10) sendmsg$inet_sctp(r3, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="c26a14ade1d0996e95ff8df55a73d2080b2d6b130d297aafc071426c3b363207254c093ed8e322c8b88cb505bb597f7123a2ebbd34b0c87597d3724c9bb18b436a3294db60309f7c0de272574f648a6738330244667be03fee54e27060ba89c3e237", 0x62}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000084000000070000006401010100000000180000000000000084000000070000000a0101010000000030000000000000008400000001000000030002000900000007000000450900001f0000000900000000000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000aa30000000000000008400000001000000800005000280000009000000000000000100008009da00001f000000", @ANYRES32=r14, @ANYBLOB="180000000000000084000000050000000000000021ef0000"], 0x110, 0x24881}, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:26 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000600000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:26 executing program 1: bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3095.203411][T27681] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.272510][T27688] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.917543][T27667] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3095.931356][T27667] CPU: 1 PID: 27667 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3095.941788][T27667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3095.951937][T27667] Call Trace: [ 3095.955223][T27667] [ 3095.958205][T27667] dump_stack_lvl+0xda/0x130 [ 3095.962923][T27667] dump_stack+0x15/0x20 [ 3095.967190][T27667] dump_header+0x82/0x2d0 [ 3095.971688][T27667] oom_kill_process+0x33a/0x4c0 [ 3095.976828][T27667] out_of_memory+0x9ca/0xbf0 [ 3095.981694][T27667] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3095.987845][T27667] mem_cgroup_out_of_memory+0x139/0x190 [ 3095.993601][T27667] try_charge_memcg+0x75c/0xd30 [ 3095.998535][T27667] obj_cgroup_charge_pages+0xab/0x130 [ 3096.003999][T27667] __memcg_kmem_charge_page+0x9c/0x170 [ 3096.009522][T27667] __alloc_pages+0x1bb/0x340 [ 3096.014174][T27667] alloc_pages_mpol+0xb1/0x1d0 [ 3096.018998][T27667] alloc_pages+0xe0/0x100 [ 3096.023438][T27667] __vmalloc_node_range+0x6d2/0xea0 [ 3096.028868][T27667] kvmalloc_node+0x121/0x160 [ 3096.033468][T27667] ? xt_alloc_table_info+0x3d/0x80 [ 3096.038987][T27667] xt_alloc_table_info+0x3d/0x80 [ 3096.044016][T27667] do_arpt_set_ctl+0x634/0x13b0 [ 3096.048957][T27667] ? __futex_wait+0x227/0x280 [ 3096.053649][T27667] ? __futex_wake_mark+0x70/0x70 [ 3096.058637][T27667] ? tcp_release_cb+0xfe/0x370 [ 3096.063465][T27667] ? _raw_spin_unlock_bh+0x36/0x40 [ 3096.068620][T27667] nf_setsockopt+0x18d/0x1b0 [ 3096.073294][T27667] ip_setsockopt+0xe6/0x100 [ 3096.077879][T27667] tcp_setsockopt+0x90/0xa0 [ 3096.082413][T27667] sock_common_setsockopt+0x61/0x70 [ 3096.087620][T27667] ? sock_common_recvmsg+0xe0/0xe0 [ 3096.092786][T27667] __sys_setsockopt+0x1d4/0x240 [ 3096.097700][T27667] __x64_sys_setsockopt+0x66/0x80 [ 3096.102745][T27667] do_syscall_64+0x44/0x110 [ 3096.107361][T27667] ? syscall_exit_to_user_mode+0x38/0x140 [ 3096.113228][T27667] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3096.119306][T27667] RIP: 0033:0x7f2cd3f63ae9 [ 3096.123725][T27667] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3096.143349][T27667] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3096.151761][T27667] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3096.159720][T27667] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 00:20:27 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000680000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:27 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async, rerun: 64) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (rerun: 64) io_uring_enter(r4, 0x84d, 0x23a4, 0x0, &(0x7f0000000500)={[0x6]}, 0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000240)=0x10) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r10, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000540)={r7, 0x7ff, 0x2, 0x2}, 0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000240)=0x10) (async, rerun: 32) r12 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000240)=0x10) sendmsg$inet_sctp(r3, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="c26a14ade1d0996e95ff8df55a73d2080b2d6b130d297aafc071426c3b363207254c093ed8e322c8b88cb505bb597f7123a2ebbd34b0c87597d3724c9bb18b436a3294db60309f7c0de272574f648a6738330244667be03fee54e27060ba89c3e237", 0x62}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000084000000070000006401010100000000180000000000000084000000070000000a0101010000000030000000000000008400000001000000030002000900000007000000450900001f0000000900000000000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000aa30000000000000008400000001000000800005000280000009000000000000000100008009da00001f000000", @ANYRES32=r14, @ANYBLOB="180000000000000084000000050000000000000021ef0000"], 0x110, 0x24881}, 0x1) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:27 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) openat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x80, 0x70) 00:20:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3096.167680][T27667] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3096.175639][T27667] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3096.183709][T27667] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3096.191755][T27667] [ 3096.194965][T27667] memory: usage 307200kB, limit 307200kB, failcnt 158267 [ 3096.202002][T27667] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3096.209993][T27667] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3096.217352][T27667] Memory cgroup stats for /syz2: [ 3096.217614][T27667] cache 0 [ 3096.221062][T27695] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3096.222610][T27667] rss 0 [ 3096.237645][T27667] shmem 0 [ 3096.240617][T27667] mapped_file 0 [ 3096.244109][T27667] dirty 0 [ 3096.247190][T27667] writeback 0 [ 3096.250563][T27667] workingset_refault_anon 109104 [ 3096.255698][T27667] workingset_refault_file 41 [ 3096.260435][T27667] swap 229376 [ 3096.263745][T27667] swapcached 8192 [ 3096.267411][T27667] pgpgin 203931 [ 3096.270870][T27667] pgpgout 203929 [ 3096.274423][T27667] pgfault 411812 [ 3096.278136][T27667] pgmajfault 45909 [ 3096.281866][T27667] inactive_anon 8192 [ 3096.285870][T27667] active_anon 0 [ 3096.289444][T27667] inactive_file 0 [ 3096.293095][T27667] active_file 0 [ 3096.296694][T27667] unevictable 0 [ 3096.300175][T27667] hierarchical_memory_limit 314572800 [ 3096.305597][T27667] hierarchical_memsw_limit 9223372036854771712 [ 3096.311860][T27667] total_cache 0 [ 3096.315355][T27667] total_rss 0 [ 3096.318639][T27667] total_shmem 0 [ 3096.322107][T27667] total_mapped_file 0 [ 3096.326187][T27667] total_dirty 0 [ 3096.329706][T27667] total_writeback 0 [ 3096.333522][T27667] total_workingset_refault_anon 109104 [ 3096.339145][T27667] total_workingset_refault_file 41 [ 3096.344254][T27667] total_swap 229376 [ 3096.348137][T27667] total_swapcached 8192 [ 3096.352290][T27667] total_pgpgin 203931 [ 3096.356369][T27667] total_pgpgout 203929 [ 3096.360450][T27667] total_pgfault 411812 [ 3096.364580][T27667] total_pgmajfault 45909 [ 3096.368915][T27667] total_inactive_anon 8192 [ 3096.373405][T27667] total_active_anon 0 [ 3096.377414][T27667] total_inactive_file 0 [ 3096.381640][T27667] total_active_file 0 [ 3096.385714][T27667] total_unevictable 0 [ 3096.389687][T27667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27665,uid=0 [ 3096.405095][T27667] Memory cgroup out of memory: Killed process 27665 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3096.422522][T27674] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3096.434002][T27674] CPU: 0 PID: 27674 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3096.444463][T27674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3096.454526][T27674] Call Trace: [ 3096.457890][T27674] [ 3096.460828][T27674] dump_stack_lvl+0xda/0x130 [ 3096.465422][T27674] dump_stack+0x15/0x20 [ 3096.469579][T27674] dump_header+0x82/0x2d0 [ 3096.473966][T27674] oom_kill_process+0x33a/0x4c0 [ 3096.478818][T27674] out_of_memory+0x9ca/0xbf0 [ 3096.483491][T27674] mem_cgroup_out_of_memory+0x139/0x190 [ 3096.489061][T27674] try_charge_memcg+0x75c/0xd30 [ 3096.493961][T27674] ? __swap_duplicate+0x29b/0x2b0 [ 3096.498981][T27674] ? radix_tree_lookup+0xf9/0x150 [ 3096.504037][T27674] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3096.510113][T27674] __read_swap_cache_async+0x2f6/0x550 [ 3096.515567][T27674] swap_cluster_readahead+0x27c/0x4c0 [ 3096.520965][T27674] swapin_readahead+0xe9/0x7f0 [ 3096.525734][T27674] ? __filemap_get_folio+0x41a/0x5a0 [ 3096.531097][T27674] ? swap_cache_get_folio+0x6e/0x200 [ 3096.536472][T27674] do_swap_page+0x4a0/0x1670 [ 3096.541152][T27674] ? asm_exc_page_fault+0x26/0x30 [ 3096.546219][T27674] ? __rcu_read_lock+0x35/0x50 [ 3096.550978][T27674] ? pte_offset_map_nolock+0x124/0x1d0 [ 3096.556508][T27674] handle_mm_fault+0xa36/0x2dd0 [ 3096.561373][T27674] exc_page_fault+0x3ff/0x6c0 [ 3096.566535][T27674] asm_exc_page_fault+0x26/0x30 [ 3096.571379][T27674] RIP: 0033:0x7f6f320edc72 [ 3096.575784][T27674] Code: ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 80 3d 9e e4 13 00 00 <48> 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 00 00 eb bd 48 89 f1 [ 3096.595412][T27674] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3096.601682][T27674] RAX: 0000000000000001 RBX: 00007f6f32252f80 RCX: 00000000002f39d8 [ 3096.609797][T27674] RDX: 000000000000039b RSI: 00007fff79885180 RDI: 00007f6f32252f80 [ 3096.617799][T27674] RBP: 00007f6f32254980 R08: 0000000000000010 R09: 00007fff798f70b0 [ 3096.625883][T27674] R10: 00007fff798f7080 R11: 0000000000090f4e R12: 00000000002f3d72 [ 3096.633942][T27674] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002f3a31 [ 3096.641987][T27674] [ 3096.645107][T27674] memory: usage 307200kB, limit 307200kB, failcnt 80369 [ 3096.652071][T27674] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3096.659966][T27674] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3096.667356][T27674] Memory cgroup stats for /syz3: [ 3096.689035][T27674] cache 0 [ 3096.697091][T27674] rss 8192 [ 3096.700144][T27674] shmem 0 [ 3096.703069][T27674] mapped_file 0 [ 3096.706684][T27674] dirty 0 [ 3096.709620][T27674] writeback 0 [ 3096.712890][T27674] workingset_refault_anon 71489 [ 3096.717754][T27674] workingset_refault_file 64 [ 3096.722372][T27674] swap 299008 [ 3096.725752][T27674] swapcached 8192 [ 3096.729382][T27674] pgpgin 474605 [ 3096.732899][T27674] pgpgout 474603 [ 3096.736572][T27674] pgfault 897917 [ 3096.740114][T27674] pgmajfault 30118 [ 3096.743826][T27674] inactive_anon 8192 [ 3096.747831][T27674] active_anon 0 [ 3096.751347][T27674] inactive_file 0 [ 3096.754997][T27674] active_file 0 [ 3096.758451][T27674] unevictable 0 [ 3096.761908][T27674] hierarchical_memory_limit 314572800 [ 3096.767314][T27674] hierarchical_memsw_limit 9223372036854771712 [ 3096.773457][T27674] total_cache 0 [ 3096.776945][T27674] total_rss 8192 [ 3096.780489][T27674] total_shmem 0 [ 3096.784035][T27674] total_mapped_file 0 [ 3096.788116][T27674] total_dirty 0 [ 3096.791565][T27674] total_writeback 0 [ 3096.795417][T27674] total_workingset_refault_anon 71489 [ 3096.800787][T27674] total_workingset_refault_file 64 [ 3096.806070][T27674] total_swap 299008 [ 3096.809899][T27674] total_swapcached 8192 [ 3096.814050][T27674] total_pgpgin 474605 [ 3096.818080][T27674] total_pgpgout 474603 [ 3096.822217][T27674] total_pgfault 897917 [ 3096.826333][T27674] total_pgmajfault 30118 [ 3096.830570][T27674] total_inactive_anon 8192 [ 3096.835010][T27674] total_active_anon 0 [ 3096.839016][T27674] total_inactive_file 0 [ 3096.843338][T27674] total_active_file 0 [ 3096.847346][T27674] total_unevictable 0 [ 3096.851397][T27674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27674,uid=0 [ 3096.866752][T27674] Memory cgroup out of memory: Killed process 27674 (syz-executor.3) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1a]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe880000000000000000006c0000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:28 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) openat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x80, 0x70) 00:20:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x3}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:28 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) io_uring_enter(r4, 0x84d, 0x23a4, 0x0, &(0x7f0000000500)={[0x6]}, 0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000240)=0x10) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (rerun: 32) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r10, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000540)={r7, 0x7ff, 0x2, 0x2}, 0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000240)=0x10) (async, rerun: 32) r12 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000240)=0x10) (async, rerun: 64) sendmsg$inet_sctp(r3, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="c26a14ade1d0996e95ff8df55a73d2080b2d6b130d297aafc071426c3b363207254c093ed8e322c8b88cb505bb597f7123a2ebbd34b0c87597d3724c9bb18b436a3294db60309f7c0de272574f648a6738330244667be03fee54e27060ba89c3e237", 0x62}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000084000000070000006401010100000000180000000000000084000000070000000a0101010000000030000000000000008400000001000000030002000900000007000000450900001f0000000900000000000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000aa30000000000000008400000001000000800005000280000009000000000000000100008009da00001f000000", @ANYRES32=r14, @ANYBLOB="180000000000000084000000050000000000000021ef0000"], 0x110, 0x24881}, 0x1) (rerun: 64) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:28 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x82942) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x400042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000040000000000000000300000018400000fcffffff00000000000000007f0405000500000006511f0007000000186700000b000000000000004501000018160000", @ANYRES32=0x1, @ANYBLOB="00000000f6ffff000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x8, 0x77, &(0x7f0000000380)=""/119, 0x41000, 0x50, '\x00', 0x0, 0x28, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x1, 0x81}, 0x10, 0x0, r2, 0x5, 0x0, &(0x7f0000000580)=[{0x5, 0x1, 0xf, 0xa}, {0x1, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x4, 0x8}, {0x7, 0x3, 0x6}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0xffffffdd}, 0x90) r3 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xb1, 0xe0, 0x9, 0x0, @loopback, @remote, 0x20, 0x8000, 0x4, 0x20}}) r9 = openat2(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={0x40, 0x6, 0x4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x101, 0x0, r7, 0x9, '\x00', r8, r9, 0x2, 0x3, 0x4}, 0x48) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:28 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) openat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x80, 0x70) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) dup(r0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) openat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x80, 0x70) (async) 00:20:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000740000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3097.232179][T27718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:28 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfTno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 00:20:28 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x82942) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x400042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000040000000000000000300000018400000fcffffff00000000000000007f0405000500000006511f0007000000186700000b000000000000004501000018160000", @ANYRES32=0x1, @ANYBLOB="00000000f6ffff000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x8, 0x77, &(0x7f0000000380)=""/119, 0x41000, 0x50, '\x00', 0x0, 0x28, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x1, 0x81}, 0x10, 0x0, r2, 0x5, 0x0, &(0x7f0000000580)=[{0x5, 0x1, 0xf, 0xa}, {0x1, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x4, 0x8}, {0x7, 0x3, 0x6}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0xffffffdd}, 0x90) r3 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xb1, 0xe0, 0x9, 0x0, @loopback, @remote, 0x20, 0x8000, 0x4, 0x20}}) r9 = openat2(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={0x40, 0x6, 0x4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x101, 0x0, r7, 0x9, '\x00', r8, r9, 0x2, 0x3, 0x4}, 0x48) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x82942) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x400042, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000040000000000000000300000018400000fcffffff00000000000000007f0405000500000006511f0007000000186700000b000000000000004501000018160000", @ANYRES32=0x1, @ANYBLOB="00000000f6ffff000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x8, 0x77, &(0x7f0000000380)=""/119, 0x41000, 0x50, '\x00', 0x0, 0x28, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x1, 0x81}, 0x10, 0x0, r2, 0x5, 0x0, &(0x7f0000000580)=[{0x5, 0x1, 0xf, 0xa}, {0x1, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x4, 0x8}, {0x7, 0x3, 0x6}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0xffffffdd}, 0x90) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xb1, 0xe0, 0x9, 0x0, @loopback, @remote, 0x20, 0x8000, 0x4, 0x20}}) (async) openat2(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={0x40, 0x6, 0x4}, 0x18) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x101, 0x0, r7, 0x9, '\x00', r8, r9, 0x2, 0x3, 0x4}, 0x48) (async) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe880000000000000000007a0000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3097.387240][T27738] 9pnet_fd: Insufficient options for proto=fd 00:20:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1b]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:29 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000e318f98b0000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:29 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfTno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 3098.171276][T27745] 9pnet_fd: Insufficient options for proto=fd 00:20:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x4}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x82942) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x400042, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x400042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000040000000000000000300000018400000fcffffff00000000000000007f0405000500000006511f0007000000186700000b000000000000004501000018160000", @ANYRES32=0x1, @ANYBLOB="00000000f6ffff000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x8, 0x77, &(0x7f0000000380)=""/119, 0x41000, 0x50, '\x00', 0x0, 0x28, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x1, 0x81}, 0x10, 0x0, r2, 0x5, 0x0, &(0x7f0000000580)=[{0x5, 0x1, 0xf, 0xa}, {0x1, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x4, 0x8}, {0x7, 0x3, 0x6}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0xffffffdd}, 0x90) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) r3 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xb1, 0xe0, 0x9, 0x0, @loopback, @remote, 0x20, 0x8000, 0x4, 0x20}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xb1, 0xe0, 0x9, 0x0, @loopback, @remote, 0x20, 0x8000, 0x4, 0x20}}) openat2(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={0x40, 0x6, 0x4}, 0x18) (async) r9 = openat2(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={0x40, 0x6, 0x4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x101, 0x0, r7, 0x9, '\x00', r8, r9, 0x2, 0x3, 0x4}, 0x48) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:29 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfTno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 00:20:29 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe880000000000008bf918e30000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './bus\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0xfffff7fe, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="ff", 0x1}, {&(0x7f0000000280)="a67de356c4de3c0d07f1d91ca35a23d0af8fd08e0410795770bd709625678ad7d383096006eb1ea853f3a641d8bc8b67478935cfee4d5acd0d0e9f02ab601c42211be5", 0x43}, {&(0x7f0000000400)="4c6e2e67b48843489ec492d7c05ea6ebc69987ea8091c0cdaaddb032902efc157eda5c78453807684e6e0ef35e12c9c457174499fb504a0fa07ada692b50512bfe75447813ef95ee2b36c7be673bf6d143aed567fcacd9", 0x57}], 0x3, 0x5405, 0xfffffffc, 0xc) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r1) write$cgroup_int(r6, &(0x7f0000000100)=0x4, 0x12) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, 0x8) 00:20:29 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe880000000000000000f9e30000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './bus\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) (async) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0xfffff7fe, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="ff", 0x1}, {&(0x7f0000000280)="a67de356c4de3c0d07f1d91ca35a23d0af8fd08e0410795770bd709625678ad7d383096006eb1ea853f3a641d8bc8b67478935cfee4d5acd0d0e9f02ab601c42211be5", 0x43}, {&(0x7f0000000400)="4c6e2e67b48843489ec492d7c05ea6ebc69987ea8091c0cdaaddb032902efc157eda5c78453807684e6e0ef35e12c9c457174499fb504a0fa07ada692b50512bfe75447813ef95ee2b36c7be673bf6d143aed567fcacd9", 0x57}], 0x3, 0x5405, 0xfffffffc, 0xc) (async) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (rerun: 32) r6 = fcntl$dupfd(r5, 0x406, r1) write$cgroup_int(r6, &(0x7f0000000100)=0x4, 0x12) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r8) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, 0x8) 00:20:29 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000000000), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) fcntl$getown(r2, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) statx(r3, &(0x7f0000000100)='./bus\x00', 0x0, 0x20, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3098.446581][T27763] 9pnet_fd: Insufficient options for proto=fd [ 3098.546673][T27775] 9pnet_fd: Insufficient options for proto=fd [ 3099.021510][ T3115] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3099.032672][ T3115] CPU: 1 PID: 3115 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3099.043009][ T3115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3099.053070][ T3115] Call Trace: [ 3099.056399][ T3115] [ 3099.059340][ T3115] dump_stack_lvl+0xda/0x130 [ 3099.064082][ T3115] dump_stack+0x15/0x20 [ 3099.068249][ T3115] dump_header+0x82/0x2d0 [ 3099.072663][ T3115] oom_kill_process+0x33a/0x4c0 [ 3099.077521][ T3115] out_of_memory+0x9ca/0xbf0 [ 3099.082125][ T3115] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3099.088277][ T3115] mem_cgroup_out_of_memory+0x139/0x190 [ 3099.093841][ T3115] try_charge_memcg+0x75c/0xd30 [ 3099.098790][ T3115] ? __swap_duplicate+0x29b/0x2b0 [ 3099.104256][ T3115] ? radix_tree_lookup+0xf9/0x150 [ 3099.109302][ T3115] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3099.115554][ T3115] __read_swap_cache_async+0x2f6/0x550 [ 3099.121027][ T3115] swap_cluster_readahead+0x27c/0x4c0 [ 3099.126470][ T3115] swapin_readahead+0xe9/0x7f0 [ 3099.131314][ T3115] ? __filemap_get_folio+0x41a/0x5a0 [ 3099.136608][ T3115] ? __switch_to+0x44d/0x9c0 [ 3099.141207][ T3115] ? _raw_spin_unlock+0x26/0x40 [ 3099.146134][ T3115] ? swap_cache_get_folio+0x6e/0x200 [ 3099.151443][ T3115] do_swap_page+0x4a0/0x1670 [ 3099.156040][ T3115] ? __rcu_read_lock+0x35/0x50 [ 3099.160813][ T3115] ? pte_offset_map_nolock+0x124/0x1d0 [ 3099.166277][ T3115] handle_mm_fault+0xa36/0x2dd0 [ 3099.171149][ T3115] exc_page_fault+0x3ff/0x6c0 [ 3099.175931][ T3115] asm_exc_page_fault+0x26/0x30 [ 3099.180800][ T3115] RIP: 0033:0x7f6f3215eeb5 [ 3099.185263][ T3115] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 4e 40 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 3099.204983][ T3115] RSP: 002b:00007fff79885388 EFLAGS: 00010246 [ 3099.211062][ T3115] RAX: 0000000000000000 RBX: 0000000000002f0c RCX: 00007f6f3215eeb3 [ 3099.219175][ T3115] RDX: 00007fff798853a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3099.227153][ T3115] RBP: 00007fff7988542c R08: 0000000000000010 R09: 00007fff798f70b0 [ 3099.235193][ T3115] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 3099.243167][ T3115] R13: 00000000002f466e R14: 00000000002f4629 R15: 0000000000000008 [ 3099.251147][ T3115] [ 3099.254300][ T3115] memory: usage 307200kB, limit 307200kB, failcnt 80834 [ 3099.261345][ T3115] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 3099.269275][ T3115] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 3099.276687][ T3115] Memory cgroup stats for /syz3: [ 3099.276859][ T3115] cache 0 [ 3099.284755][ T3115] rss 0 [ 3099.287598][ T3115] shmem 0 [ 3099.290550][ T3115] mapped_file 0 [ 3099.294052][ T3115] dirty 0 [ 3099.297017][ T3115] writeback 0 [ 3099.300377][ T3115] workingset_refault_anon 71563 [ 3099.305246][ T3115] workingset_refault_file 64 [ 3099.309825][ T3115] swap 376832 [ 3099.313099][ T3115] swapcached 0 [ 3099.316499][ T3115] pgpgin 474727 [ 3099.320020][ T3115] pgpgout 474727 [ 3099.323599][ T3115] pgfault 898206 [ 3099.327183][ T3115] pgmajfault 30152 [ 3099.330967][ T3115] inactive_anon 0 [ 3099.334615][ T3115] active_anon 0 [ 3099.338117][ T3115] inactive_file 0 [ 3099.341746][ T3115] active_file 0 [ 3099.345241][ T3115] unevictable 0 [ 3099.348739][ T3115] hierarchical_memory_limit 314572800 [ 3099.354149][ T3115] hierarchical_memsw_limit 9223372036854771712 [ 3099.360325][ T3115] total_cache 0 [ 3099.363820][ T3115] total_rss 0 [ 3099.367185][ T3115] total_shmem 0 [ 3099.370701][ T3115] total_mapped_file 0 [ 3099.374676][ T3115] total_dirty 0 [ 3099.378152][ T3115] total_writeback 0 [ 3099.381970][ T3115] total_workingset_refault_anon 71563 [ 3099.387378][ T3115] total_workingset_refault_file 64 [ 3099.392490][ T3115] total_swap 376832 [ 3099.396435][ T3115] total_swapcached 0 [ 3099.400321][ T3115] total_pgpgin 474727 [ 3099.404370][ T3115] total_pgpgout 474727 [ 3099.408455][ T3115] total_pgfault 898206 [ 3099.412541][ T3115] total_pgmajfault 30152 [ 3099.416836][ T3115] total_inactive_anon 0 [ 3099.420980][ T3115] total_active_anon 0 [ 3099.424985][ T3115] total_inactive_file 0 [ 3099.429136][ T3115] total_active_file 0 [ 3099.433119][ T3115] total_unevictable 0 [ 3099.437121][ T3115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27747,uid=0 [ 3099.452536][ T3115] Memory cgroup out of memory: Killed process 27747 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3099.469933][T27765] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3099.483541][T27765] CPU: 0 PID: 27765 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3099.494014][T27765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3099.504089][T27765] Call Trace: [ 3099.507369][T27765] [ 3099.510372][T27765] dump_stack_lvl+0xda/0x130 [ 3099.514990][T27765] dump_stack+0x15/0x20 [ 3099.519147][T27765] dump_header+0x82/0x2d0 [ 3099.523530][T27765] oom_kill_process+0x33a/0x4c0 [ 3099.528379][T27765] out_of_memory+0x9ca/0xbf0 [ 3099.532968][T27765] mem_cgroup_out_of_memory+0x139/0x190 [ 3099.538526][T27765] try_charge_memcg+0x75c/0xd30 [ 3099.543581][T27765] obj_cgroup_charge_pages+0xab/0x130 [ 3099.549058][T27765] __memcg_kmem_charge_page+0x9c/0x170 [ 3099.554585][T27765] __alloc_pages+0x1bb/0x340 [ 3099.559230][T27765] alloc_pages_mpol+0xb1/0x1d0 [ 3099.563995][T27765] alloc_pages+0xe0/0x100 [ 3099.568325][T27765] __vmalloc_node_range+0x6d2/0xea0 [ 3099.573528][T27765] kvmalloc_node+0x121/0x160 [ 3099.578131][T27765] ? xt_alloc_table_info+0x3d/0x80 [ 3099.583251][T27765] xt_alloc_table_info+0x3d/0x80 [ 3099.588253][T27765] do_arpt_set_ctl+0x634/0x13b0 [ 3099.593112][T27765] ? __futex_wait+0x227/0x280 [ 3099.597863][T27765] ? __futex_wake_mark+0x70/0x70 [ 3099.602864][T27765] ? tcp_release_cb+0xfe/0x370 [ 3099.607641][T27765] ? _raw_spin_unlock_bh+0x36/0x40 [ 3099.612775][T27765] nf_setsockopt+0x18d/0x1b0 [ 3099.617389][T27765] ip_setsockopt+0xe6/0x100 [ 3099.621927][T27765] tcp_setsockopt+0x90/0xa0 [ 3099.626500][T27765] sock_common_setsockopt+0x61/0x70 [ 3099.631777][T27765] ? sock_common_recvmsg+0xe0/0xe0 [ 3099.636913][T27765] __sys_setsockopt+0x1d4/0x240 [ 3099.641784][T27765] __x64_sys_setsockopt+0x66/0x80 [ 3099.646885][T27765] do_syscall_64+0x44/0x110 [ 3099.651405][T27765] ? syscall_exit_to_user_mode+0x38/0x140 [ 3099.657134][T27765] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3099.663176][T27765] RIP: 0033:0x7f0beb3a7ae9 [ 3099.667589][T27765] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3099.687203][T27765] RSP: 002b:00007f0bea72a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3099.695788][T27765] RAX: ffffffffffffffda RBX: 00007f0beb4c6f80 RCX: 00007f0beb3a7ae9 [ 3099.703920][T27765] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3099.711886][T27765] RBP: 00007f0beb3f347a R08: 0000000000000438 R09: 0000000000000000 [ 3099.720025][T27765] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3099.728040][T27765] R13: 000000000000000b R14: 00007f0beb4c6f80 R15: 00007ffe134d2ca8 [ 3099.736021][T27765] [ 3099.739164][T27765] memory: usage 307200kB, limit 307200kB, failcnt 167381 [ 3099.746229][T27765] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 3099.754198][T27765] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3099.761656][T27765] Memory cgroup stats for /syz5: [ 3099.761881][T27765] cache 0 [ 3099.769855][T27765] rss 12288 [ 3099.772979][T27765] shmem 0 [ 3099.775922][T27765] mapped_file 0 [ 3099.779374][T27765] dirty 0 [ 3099.782305][T27765] writeback 0 [ 3099.785594][T27765] workingset_refault_anon 109186 [ 3099.790600][T27765] workingset_refault_file 28 [ 3099.795192][T27765] swap 241664 [ 3099.798519][T27765] swapcached 16384 [ 3099.802233][T27765] pgpgin 187008 [ 3099.805793][T27765] pgpgout 187004 [ 3099.809332][T27765] pgfault 378703 [ 3099.812872][T27765] pgmajfault 48597 [ 3099.816610][T27765] inactive_anon 16384 [ 3099.820594][T27765] active_anon 0 [ 3099.824054][T27765] inactive_file 0 [ 3099.827805][T27765] active_file 0 [ 3099.831328][T27765] unevictable 0 [ 3099.834791][T27765] hierarchical_memory_limit 314572800 [ 3099.840224][T27765] hierarchical_memsw_limit 9223372036854771712 [ 3099.846399][T27765] total_cache 0 [ 3099.849852][T27765] total_rss 12288 [ 3099.853516][T27765] total_shmem 0 [ 3099.857044][T27765] total_mapped_file 0 [ 3099.861085][T27765] total_dirty 0 [ 3099.864546][T27765] total_writeback 0 [ 3099.868398][T27765] total_workingset_refault_anon 109186 [ 3099.873915][T27765] total_workingset_refault_file 28 [ 3099.879072][T27765] total_swap 241664 [ 3099.882970][T27765] total_swapcached 16384 [ 3099.887255][T27765] total_pgpgin 187008 [ 3099.891234][T27765] total_pgpgout 187004 [ 3099.895346][T27765] total_pgfault 378703 [ 3099.899416][T27765] total_pgmajfault 48597 [ 3099.903652][T27765] total_inactive_anon 16384 [ 3099.908178][T27765] total_active_anon 0 [ 3099.912224][T27765] total_inactive_file 0 [ 3099.916464][T27765] total_active_file 0 [ 3099.920599][T27765] total_unevictable 0 [ 3099.924648][T27765] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27764,uid=0 [ 3099.940117][T27765] Memory cgroup out of memory: Killed process 27764 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x22]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:31 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000fffffff00000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:31 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './bus\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0xfffff7fe, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) (async) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="ff", 0x1}, {&(0x7f0000000280)="a67de356c4de3c0d07f1d91ca35a23d0af8fd08e0410795770bd709625678ad7d383096006eb1ea853f3a641d8bc8b67478935cfee4d5acd0d0e9f02ab601c42211be5", 0x43}, {&(0x7f0000000400)="4c6e2e67b48843489ec492d7c05ea6ebc69987ea8091c0cdaaddb032902efc157eda5c78453807684e6e0ef35e12c9c457174499fb504a0fa07ada692b50512bfe75447813ef95ee2b36c7be673bf6d143aed567fcacd9", 0x57}], 0x3, 0x5405, 0xfffffffc, 0xc) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r1) write$cgroup_int(r6, &(0x7f0000000100)=0x4, 0x12) (async) write$cgroup_int(r6, &(0x7f0000000100)=0x4, 0x12) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r8) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, 0x8) 00:20:31 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000000000), &(0x7f0000000140)) r1 = dup(r0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) fcntl$getown(r2, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) statx(r3, &(0x7f0000000100)='./bus\x00', 0x0, 0x20, &(0x7f0000000180)) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 00:20:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x5}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) [ 3100.058272][T27787] __nla_validate_parse: 5 callbacks suppressed [ 3100.058287][T27787] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:31 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000000000), &(0x7f0000000140)) dup(r0) (async) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) fcntl$getown(r2, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) statx(r3, &(0x7f0000000100)='./bus\x00', 0x0, 0x20, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 00:20:31 executing program 0: r0 = syz_io_uring_setup(0x1d20, &(0x7f0000000200)={0x0, 0xdfa5, 0x10100, 0x2, 0x32d}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r3, 0x8000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x28, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000380)="c58c084f15e4c8ca439ed1edc805ce1d3cdef888ce3d89c6f14c6096eabef1641f1bebaacd9c004cdb150f27acbb374c04203c083235fd194949e8840d23ec01baab0ec0d16e0a0fd0931ab545fd18f364d38cce1e0d5ba287bc19dbf19a7a60efd0c506ca0027071b792e610e005350c88fa8cbb3356ac607dbe01b595ad23d72f7e46993ff83aef6a4446890b87004a4f5ca2e63361b0e522b621105567c6d227d19cefc199402cd588a158485f6e6bec503aca1ae0db469dfd3622a750a5c2d6af9dd745f35084f4537cd67a6f2d8432d0155ec27c571eb12f333bdb05e18b8d0ca6c42fecd6bcb", 0xe9}, {&(0x7f0000000280)="c6c41502c21a19f2387fbd4bc5bf8c4dfb6e83c274204b06384c4a059fa204b9b55c8a40847f9fa85feb7d9567f5ed2b26c2bf00eb50ef1a6b244c9891ebe361a6aa62201c2e63ebf503f0f4a46c1619b22764299bbed145ba07", 0x5a}, {&(0x7f0000000480)="40dbbcf6c42bfd6d7f916127c238694940d1536eb46a66241759703a6f601afa2ada3adec9f21ddc106de5462397f3f1eb572dbde5c8ff3e1bd2c2bf30844edbe4d1619cfe6b5847e7e43ad63cdd03bff00dda607823828723d78096611800338632d3af5caa2cc95ca2ad8042e9d11a4f2d12e0e45a", 0x76}, {&(0x7f0000000140)="5ea1dd8d5dd8f1d1fe56039775c90f75db9e8bdde889b8eba06645d5ba4e438d9dbc2555", 0x24}], 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) creat(&(0x7f00000000c0)='./bus\x00', 0x108) 00:20:31 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe880000000000007fffffff0000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:31 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000f0ffffff0000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:31 executing program 0: r0 = syz_io_uring_setup(0x1d20, &(0x7f0000000200)={0x0, 0xdfa5, 0x10100, 0x2, 0x32d}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r3, 0x8000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x28, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x28, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000380)="c58c084f15e4c8ca439ed1edc805ce1d3cdef888ce3d89c6f14c6096eabef1641f1bebaacd9c004cdb150f27acbb374c04203c083235fd194949e8840d23ec01baab0ec0d16e0a0fd0931ab545fd18f364d38cce1e0d5ba287bc19dbf19a7a60efd0c506ca0027071b792e610e005350c88fa8cbb3356ac607dbe01b595ad23d72f7e46993ff83aef6a4446890b87004a4f5ca2e63361b0e522b621105567c6d227d19cefc199402cd588a158485f6e6bec503aca1ae0db469dfd3622a750a5c2d6af9dd745f35084f4537cd67a6f2d8432d0155ec27c571eb12f333bdb05e18b8d0ca6c42fecd6bcb", 0xe9}, {&(0x7f0000000280)="c6c41502c21a19f2387fbd4bc5bf8c4dfb6e83c274204b06384c4a059fa204b9b55c8a40847f9fa85feb7d9567f5ed2b26c2bf00eb50ef1a6b244c9891ebe361a6aa62201c2e63ebf503f0f4a46c1619b22764299bbed145ba07", 0x5a}, {&(0x7f0000000480)="40dbbcf6c42bfd6d7f916127c238694940d1536eb46a66241759703a6f601afa2ada3adec9f21ddc106de5462397f3f1eb572dbde5c8ff3e1bd2c2bf30844edbe4d1619cfe6b5847e7e43ad63cdd03bff00dda607823828723d78096611800338632d3af5caa2cc95ca2ad8042e9d11a4f2d12e0e45a", 0x76}, {&(0x7f0000000140)="5ea1dd8d5dd8f1d1fe56039775c90f75db9e8bdde889b8eba06645d5ba4e438d9dbc2555", 0x24}], 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) creat(&(0x7f00000000c0)='./bus\x00', 0x108) [ 3100.325850][T27795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3100.362818][T27798] 9pnet_fd: Insufficient options for proto=fd 00:20:31 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r0, 0x7ade, 0xbb10, 0x3, &(0x7f0000000000)={[0x115a]}, 0x8) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3100.387414][T27803] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3100.831690][T27789] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3100.843101][T27789] CPU: 1 PID: 27789 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3100.853598][T27789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3100.863653][T27789] Call Trace: [ 3100.866936][T27789] [ 3100.869888][T27789] dump_stack_lvl+0xda/0x130 [ 3100.874532][T27789] dump_stack+0x15/0x20 [ 3100.878700][T27789] dump_header+0x82/0x2d0 [ 3100.883041][T27789] oom_kill_process+0x33a/0x4c0 [ 3100.887901][T27789] out_of_memory+0x9ca/0xbf0 [ 3100.892527][T27789] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3100.898602][T27789] mem_cgroup_out_of_memory+0x139/0x190 [ 3100.904230][T27789] try_charge_memcg+0x75c/0xd30 [ 3100.909323][T27789] ? __swap_duplicate+0x29b/0x2b0 [ 3100.914452][T27789] ? radix_tree_lookup+0xf9/0x150 [ 3100.919487][T27789] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3100.925595][T27789] __read_swap_cache_async+0x2f6/0x550 [ 3100.931082][T27789] swap_cluster_readahead+0x27c/0x4c0 [ 3100.936537][T27789] swapin_readahead+0xe9/0x7f0 [ 3100.941311][T27789] ? __filemap_get_folio+0x41a/0x5a0 [ 3100.946698][T27789] ? __perf_event_task_sched_in+0x769/0x790 [ 3100.952670][T27789] ? swap_cache_get_folio+0x6e/0x200 [ 3100.957965][T27789] do_swap_page+0x4a0/0x1670 [ 3100.962600][T27789] ? __rcu_read_lock+0x35/0x50 [ 3100.967390][T27789] ? pte_offset_map_nolock+0x124/0x1d0 [ 3100.972877][T27789] handle_mm_fault+0xa36/0x2dd0 [ 3100.977743][T27789] ? mt_find+0x1d9/0x310 [ 3100.982052][T27789] exc_page_fault+0x2f7/0x6c0 [ 3100.986756][T27789] asm_exc_page_fault+0x26/0x30 [ 3100.991670][T27789] RIP: 0010:__get_user_8+0x11/0x20 [ 3100.996791][T27789] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 3101.016450][T27789] RSP: 0018:ffffc90000ac7e38 EFLAGS: 00050202 [ 3101.022660][T27789] RAX: 0000555555ea7da8 RBX: ffffc90000ac7e40 RCX: ffffffff814442c3 [ 3101.030631][T27789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881a87a3a90 [ 3101.038597][T27789] RBP: ffffc90000ac7ef8 R08: 00018881a87a3a97 R09: 0000000000000000 [ 3101.046753][T27789] R10: 0001ffffffffffff R11: 00018881a87a3750 R12: ffff8881a87a30c0 [ 3101.054785][T27789] R13: ffff8881a87a3a90 R14: ffffc90000ac7f58 R15: ffffc90000ac7fd8 [ 3101.062822][T27789] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 3101.068755][T27789] __rseq_handle_notify_resume+0xc7/0xbf0 [ 3101.074538][T27789] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 3101.080499][T27789] exit_to_user_mode_loop+0xcc/0xe0 [ 3101.085770][T27789] exit_to_user_mode_prepare+0x6c/0xb0 [ 3101.091343][T27789] irqentry_exit_to_user_mode+0x9/0x20 [ 3101.096819][T27789] irqentry_exit+0x12/0x40 [ 3101.101369][T27789] asm_exc_page_fault+0x26/0x30 [ 3101.106282][T27789] RIP: 0033:0x7f6f320edae4 [ 3101.110693][T27789] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3101.130378][T27789] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3101.136460][T27789] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3101.144461][T27789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3101.152518][T27789] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3101.160526][T27789] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f50ce [ 3101.168510][T27789] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002f4d8d [ 3101.176576][T27789] [ 3101.179750][T27789] memory: usage 307200kB, limit 307200kB, failcnt 81219 [ 3101.186776][T27789] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0 [ 3101.194736][T27789] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3101.202066][T27789] Memory cgroup stats for /syz3: [ 3101.203173][T27789] cache 0 [ 3101.211247][T27789] rss 8192 [ 3101.214265][T27789] shmem 0 [ 3101.217225][T27789] mapped_file 0 [ 3101.220781][T27789] dirty 0 [ 3101.223795][T27789] writeback 8192 [ 3101.227529][T27789] workingset_refault_anon 71666 [ 3101.232425][T27789] workingset_refault_file 64 [ 3101.237085][T27789] swap 311296 [ 3101.240366][T27789] swapcached 8192 [ 3101.243987][T27789] pgpgin 474854 [ 3101.247500][T27789] pgpgout 474852 [ 3101.251077][T27789] pgfault 898375 [ 3101.254665][T27789] pgmajfault 30185 [ 3101.258517][T27789] inactive_anon 0 [ 3101.262148][T27789] active_anon 0 [ 3101.265620][T27789] inactive_file 0 [ 3101.269348][T27789] active_file 0 [ 3101.272782][T27789] unevictable 0 [ 3101.276251][T27789] hierarchical_memory_limit 314572800 [ 3101.281642][T27789] hierarchical_memsw_limit 9223372036854771712 [ 3101.287797][T27789] total_cache 0 [ 3101.291237][T27789] total_rss 8192 [ 3101.294760][T27789] total_shmem 0 [ 3101.298253][T27789] total_mapped_file 0 [ 3101.302259][T27789] total_dirty 0 [ 3101.305729][T27789] total_writeback 8192 [ 3101.309792][T27789] total_workingset_refault_anon 71666 [ 3101.315196][T27789] total_workingset_refault_file 64 [ 3101.320318][T27789] total_swap 311296 [ 3101.324201][T27789] total_swapcached 8192 [ 3101.328356][T27789] total_pgpgin 474854 [ 3101.332323][T27789] total_pgpgout 474852 [ 3101.336407][T27789] total_pgfault 898375 [ 3101.340462][T27789] total_pgmajfault 30185 [ 3101.344704][T27789] total_inactive_anon 0 [ 3101.348902][T27789] total_active_anon 0 [ 3101.352944][T27789] total_inactive_file 0 [ 3101.357130][T27789] total_active_file 0 [ 3101.361098][T27789] total_unevictable 0 [ 3101.365087][T27789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27789,uid=0 [ 3101.380352][T27789] Memory cgroup out of memory: Killed process 27789 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3101.398400][T27778] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3101.409985][T27778] CPU: 1 PID: 27778 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3101.420429][T27778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3101.430535][T27778] Call Trace: [ 3101.433839][T27778] [ 3101.436843][T27778] dump_stack_lvl+0xda/0x130 [ 3101.441701][T27778] dump_stack+0x15/0x20 [ 3101.445857][T27778] dump_header+0x82/0x2d0 [ 3101.450177][T27778] oom_kill_process+0x33a/0x4c0 [ 3101.455012][T27778] out_of_memory+0x9ca/0xbf0 [ 3101.459620][T27778] mem_cgroup_out_of_memory+0x139/0x190 [ 3101.465244][T27778] try_charge_memcg+0x75c/0xd30 [ 3101.470114][T27778] ? __swap_duplicate+0x29b/0x2b0 [ 3101.475387][T27778] ? radix_tree_lookup+0xf9/0x150 [ 3101.480489][T27778] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3101.486587][T27778] __read_swap_cache_async+0x2f6/0x550 [ 3101.492089][T27778] swap_cluster_readahead+0x27c/0x4c0 [ 3101.497458][T27778] swapin_readahead+0xe9/0x7f0 [ 3101.502220][T27778] ? __filemap_get_folio+0x41a/0x5a0 [ 3101.507495][T27778] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3101.513206][T27778] ? swap_cache_get_folio+0x6e/0x200 [ 3101.518484][T27778] do_swap_page+0x4a0/0x1670 [ 3101.523150][T27778] ? __rcu_read_lock+0x35/0x50 [ 3101.527907][T27778] ? pte_offset_map_nolock+0x124/0x1d0 [ 3101.533711][T27778] handle_mm_fault+0xa36/0x2dd0 [ 3101.538577][T27778] ? mt_find+0x1d9/0x310 [ 3101.542811][T27778] exc_page_fault+0x2f7/0x6c0 [ 3101.547535][T27778] asm_exc_page_fault+0x26/0x30 [ 3101.552367][T27778] RIP: 0010:__get_user_8+0x11/0x20 [ 3101.557473][T27778] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 3101.577126][T27778] RSP: 0018:ffffc90000997e38 EFLAGS: 00050202 [ 3101.583271][T27778] RAX: 0000555556726da8 RBX: ffffc90000997e40 RCX: ffffffff814442c3 [ 3101.591401][T27778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88819ff75b10 [ 3101.599354][T27778] RBP: ffffc90000997ef8 R08: 000188819ff75b17 R09: 0000000000000000 [ 3101.607445][T27778] R10: 0001ffffffffffff R11: 00000000000020ee R12: ffff88819ff75140 [ 3101.615448][T27778] R13: ffff88819ff75b10 R14: ffffc90000997f58 R15: ffffc90000997fd8 [ 3101.623412][T27778] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 3101.629374][T27778] ? _raw_spin_unlock+0x26/0x40 [ 3101.634352][T27778] __rseq_handle_notify_resume+0xc7/0xbf0 [ 3101.640112][T27778] ? finish_task_switch+0xb4/0x2a0 [ 3101.645244][T27778] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 3101.651216][T27778] exit_to_user_mode_loop+0xcc/0xe0 [ 3101.656650][T27778] exit_to_user_mode_prepare+0x6c/0xb0 [ 3101.662102][T27778] irqentry_exit_to_user_mode+0x9/0x20 [ 3101.667587][T27778] irqentry_exit+0x12/0x40 [ 3101.671990][T27778] asm_exc_page_fault+0x26/0x30 [ 3101.676823][T27778] RIP: 0033:0x7f2cd3f0e226 [ 3101.681251][T27778] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 3101.700877][T27778] RSP: 002b:00007ffcf5b11348 EFLAGS: 00010287 [ 3101.707010][T27778] RAX: 0000001b2cc22244 RBX: 0000000000000001 RCX: 0000001b2cc20000 [ 3101.714991][T27778] RDX: 0000001b2cc22248 RSI: 0000000000000000 RDI: 000000000badf00d [ 3101.723049][T27778] RBP: 00000000000003e7 R08: 0000001b2d020000 R09: 00007ffcf5b320b0 [ 3101.731080][T27778] R10: 00007ffcf5b32080 R11: 00000000000912ce R12: 00000000002f50b2 [ 3101.739116][T27778] R13: 00007f2cd4082f80 R14: 00007f2cd3ae7000 R15: 00000000002f4d71 [ 3101.747161][T27778] [ 3101.750241][T27778] memory: usage 307200kB, limit 307200kB, failcnt 158523 [ 3101.757461][T27778] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3101.765485][T27778] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3101.772880][T27778] Memory cgroup stats for /syz2: [ 3101.774104][T27778] cache 0 [ 3101.782068][T27778] rss 8192 [ 3101.785271][T27778] shmem 0 [ 3101.788274][T27778] mapped_file 0 [ 3101.791725][T27778] dirty 0 [ 3101.794649][T27778] writeback 0 [ 3101.798008][T27778] workingset_refault_anon 109260 [ 3101.802973][T27778] workingset_refault_file 41 [ 3101.807677][T27778] swap 229376 [ 3101.810985][T27778] swapcached 8192 [ 3101.814608][T27778] pgpgin 204159 [ 3101.818227][T27778] pgpgout 204157 [ 3101.821783][T27778] pgfault 412257 [ 3101.825515][T27778] pgmajfault 45981 [ 3101.829227][T27778] inactive_anon 8192 [ 3101.833106][T27778] active_anon 0 [ 3101.836577][T27778] inactive_file 0 [ 3101.840198][T27778] active_file 0 [ 3101.843641][T27778] unevictable 0 [ 3101.847204][T27778] hierarchical_memory_limit 314572800 [ 3101.852665][T27778] hierarchical_memsw_limit 9223372036854771712 [ 3101.858917][T27778] total_cache 0 [ 3101.862368][T27778] total_rss 8192 [ 3101.865922][T27778] total_shmem 0 [ 3101.869401][T27778] total_mapped_file 0 [ 3101.873377][T27778] total_dirty 0 [ 3101.876911][T27778] total_writeback 0 [ 3101.880704][T27778] total_workingset_refault_anon 109260 [ 3101.886201][T27778] total_workingset_refault_file 41 [ 3101.891303][T27778] total_swap 229376 [ 3101.895122][T27778] total_swapcached 8192 [ 3101.899314][T27778] total_pgpgin 204159 [ 3101.903282][T27778] total_pgpgout 204157 [ 3101.907730][T27778] total_pgfault 412257 [ 3101.911785][T27778] total_pgmajfault 45981 [ 3101.916091][T27778] total_inactive_anon 8192 [ 3101.920531][T27778] total_active_anon 0 [ 3101.924527][T27778] total_inactive_file 0 [ 3101.928719][T27778] total_active_file 0 [ 3101.932691][T27778] total_unevictable 0 [ 3101.936691][T27778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27778,uid=0 [ 3101.951982][T27778] Memory cgroup out of memory: Killed process 27778 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3101.981190][T27800] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3101.992547][T27800] CPU: 1 PID: 27800 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3102.003089][T27800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3102.013132][T27800] Call Trace: [ 3102.016405][T27800] [ 3102.019383][T27800] dump_stack_lvl+0xda/0x130 [ 3102.024033][T27800] dump_stack+0x15/0x20 [ 3102.028245][T27800] dump_header+0x82/0x2d0 [ 3102.032577][T27800] oom_kill_process+0x33a/0x4c0 [ 3102.037511][T27800] out_of_memory+0x9ca/0xbf0 [ 3102.042184][T27800] mem_cgroup_out_of_memory+0x139/0x190 [ 3102.047763][T27800] try_charge_memcg+0x75c/0xd30 [ 3102.052815][T27800] ? __swap_duplicate+0x29b/0x2b0 [ 3102.057857][T27800] ? radix_tree_lookup+0xf9/0x150 [ 3102.062966][T27800] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3102.069029][T27800] __read_swap_cache_async+0x2f6/0x550 [ 3102.074544][T27800] swap_cluster_readahead+0x27c/0x4c0 [ 3102.079950][T27800] swapin_readahead+0xe9/0x7f0 [ 3102.084858][T27800] ? __filemap_get_folio+0x41a/0x5a0 [ 3102.090237][T27800] ? swap_cache_get_folio+0x6e/0x200 [ 3102.095518][T27800] do_swap_page+0x4a0/0x1670 [ 3102.100110][T27800] ? asm_exc_page_fault+0x26/0x30 [ 3102.105386][T27800] ? __rcu_read_lock+0x35/0x50 [ 3102.110321][T27800] ? pte_offset_map_nolock+0x124/0x1d0 [ 3102.115876][T27800] handle_mm_fault+0xa36/0x2dd0 [ 3102.120777][T27800] exc_page_fault+0x3ff/0x6c0 [ 3102.125461][T27800] asm_exc_page_fault+0x26/0x30 [ 3102.130304][T27800] RIP: 0033:0x7f0beb36379c [ 3102.134713][T27800] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 15 f9 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 3102.155874][T27800] RSP: 002b:00007ffe134d2cf0 EFLAGS: 00010286 [ 3102.161958][T27800] RAX: ffffffff83b11324 RBX: 00007f0beb4c7018 RCX: 0000000000000001 [ 3102.169969][T27800] RDX: ffffffff83b110f4 RSI: 00007f0bead2b008 RDI: 0000000000018151 [ 3102.178005][T27800] RBP: 0000000083b11000 R08: 0000001b2da20000 R09: 0000000000001a4e [ 3102.185979][T27800] R10: 0000000083b11a52 R11: 00000000000912de R12: 0000000000000001 [ 3102.193960][T27800] R13: 0000000000000001 R14: 00007f0beb4bb000 R15: ffffffff83b110f4 [ 3102.201923][T27800] ? __sys_setsockopt+0x24/0x240 [ 3102.206863][T27800] ? __x64_sys_setsockopt+0x14/0x80 [ 3102.212074][T27800] ? __sys_setsockopt+0x24/0x240 [ 3102.217003][T27800] [ 3102.220175][T27800] memory: usage 307200kB, limit 307200kB, failcnt 167579 [ 3102.227294][T27800] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0 [ 3102.235317][T27800] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 3102.242691][T27800] Memory cgroup stats for /syz5: [ 3102.243660][T27800] cache 0 [ 3102.251571][T27800] rss 12288 [ 3102.254770][T27800] shmem 0 [ 3102.257928][T27800] mapped_file 0 [ 3102.261572][T27800] dirty 0 [ 3102.264515][T27800] writeback 4096 [ 3102.268068][T27800] workingset_refault_anon 109242 [ 3102.272997][T27800] workingset_refault_file 28 [ 3102.277934][T27800] swap 327680 [ 3102.281207][T27800] swapcached 16384 [ 3102.284924][T27800] pgpgin 187088 [ 3102.288428][T27800] pgpgout 187084 [ 3102.291965][T27800] pgfault 378863 [ 3102.295536][T27800] pgmajfault 48620 [ 3102.299247][T27800] inactive_anon 0 [ 3102.302950][T27800] active_anon 0 [ 3102.306436][T27800] inactive_file 0 [ 3102.310166][T27800] active_file 0 [ 3102.313615][T27800] unevictable 0 [ 3102.317097][T27800] hierarchical_memory_limit 314572800 [ 3102.322530][T27800] hierarchical_memsw_limit 9223372036854771712 [ 3102.328832][T27800] total_cache 0 [ 3102.332407][T27800] total_rss 12288 [ 3102.336075][T27800] total_shmem 0 [ 3102.339561][T27800] total_mapped_file 0 [ 3102.343574][T27800] total_dirty 0 [ 3102.347063][T27800] total_writeback 4096 [ 3102.351139][T27800] total_workingset_refault_anon 109242 [ 3102.356648][T27800] total_workingset_refault_file 28 [ 3102.361747][T27800] total_swap 327680 [ 3102.365582][T27800] total_swapcached 16384 [ 3102.370047][T27800] total_pgpgin 187088 [ 3102.374126][T27800] total_pgpgout 187084 [ 3102.378266][T27800] total_pgfault 378863 [ 3102.382328][T27800] total_pgmajfault 48620 [ 3102.386589][T27800] total_inactive_anon 0 [ 3102.390743][T27800] total_active_anon 0 [ 3102.394834][T27800] total_inactive_file 0 [ 3102.399338][T27800] total_active_file 0 [ 3102.403319][T27800] total_unevictable 0 [ 3102.407313][T27800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27800,uid=0 00:20:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x29]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:33 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000204000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:33 executing program 0: r0 = syz_io_uring_setup(0x1d20, &(0x7f0000000200)={0x0, 0xdfa5, 0x10100, 0x2, 0x32d}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r3, 0x8000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x28, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) (async) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000380)="c58c084f15e4c8ca439ed1edc805ce1d3cdef888ce3d89c6f14c6096eabef1641f1bebaacd9c004cdb150f27acbb374c04203c083235fd194949e8840d23ec01baab0ec0d16e0a0fd0931ab545fd18f364d38cce1e0d5ba287bc19dbf19a7a60efd0c506ca0027071b792e610e005350c88fa8cbb3356ac607dbe01b595ad23d72f7e46993ff83aef6a4446890b87004a4f5ca2e63361b0e522b621105567c6d227d19cefc199402cd588a158485f6e6bec503aca1ae0db469dfd3622a750a5c2d6af9dd745f35084f4537cd67a6f2d8432d0155ec27c571eb12f333bdb05e18b8d0ca6c42fecd6bcb", 0xe9}, {&(0x7f0000000280)="c6c41502c21a19f2387fbd4bc5bf8c4dfb6e83c274204b06384c4a059fa204b9b55c8a40847f9fa85feb7d9567f5ed2b26c2bf00eb50ef1a6b244c9891ebe361a6aa62201c2e63ebf503f0f4a46c1619b22764299bbed145ba07", 0x5a}, {&(0x7f0000000480)="40dbbcf6c42bfd6d7f916127c238694940d1536eb46a66241759703a6f601afa2ada3adec9f21ddc106de5462397f3f1eb572dbde5c8ff3e1bd2c2bf30844edbe4d1619cfe6b5847e7e43ad63cdd03bff00dda607823828723d78096611800338632d3af5caa2cc95ca2ad8042e9d11a4f2d12e0e45a", 0x76}, {&(0x7f0000000140)="5ea1dd8d5dd8f1d1fe56039775c90f75db9e8bdde889b8eba06645d5ba4e438d9dbc2555", 0x24}], 0x4) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x108) 00:20:33 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r0, 0x7ade, 0xbb10, 0x3, &(0x7f0000000000)={[0x115a]}, 0x8) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) io_uring_enter(r0, 0x7ade, 0xbb10, 0x3, &(0x7f0000000000)={[0x115a]}, 0x8) (async) dup(r0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) 00:20:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x6}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) [ 3102.422667][T27800] Memory cgroup out of memory: Killed process 27800 (syz-executor.5) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3102.494609][T27817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:33 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000304000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:33 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r0, 0x7ade, 0xbb10, 0x3, &(0x7f0000000000)={[0x115a]}, 0x8) (async) io_uring_enter(r0, 0x7ade, 0xbb10, 0x3, &(0x7f0000000000)={[0x115a]}, 0x8) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 00:20:33 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x28010, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r8}}) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)={r5, r6+60000000}, 0x1, 0x1, 0x1, {0x0, r8}}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:33 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x28010, r0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)={r5, r6+60000000}, 0x1, 0x1, 0x1, {0x0, r8}}) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:33 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000904000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:33 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x4, 0x9e, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000140)) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0xc000, 0x4) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000002c0)={0x4000000d}) cachestat(r4, &(0x7f0000000180)={0xffff, 0x2}, &(0x7f0000000200), 0x0) renameat2(r4, &(0x7f00000001c0)='./bus/../file0\x00', r3, &(0x7f0000000280)='./bus\x00', 0xce2a6b2266ca39f3) r6 = openat(r3, &(0x7f0000000000)='./bus\x00', 0x200000, 0x80) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) [ 3102.771116][T27835] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3102.812727][T27840] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3102.886634][T27845] 9pnet_fd: Insufficient options for proto=fd 00:20:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:34 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x28010, r0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)={r5, r6+60000000}, 0x1, 0x1, 0x1, {0x0, r8}}) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:34 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000c04000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:34 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x4, 0x9e, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000140)) r2 = dup(r1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0xc000, 0x4) (async, rerun: 64) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async, rerun: 64) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async, rerun: 64) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000002c0)={0x4000000d}) cachestat(r4, &(0x7f0000000180)={0xffff, 0x2}, &(0x7f0000000200), 0x0) (async) renameat2(r4, &(0x7f00000001c0)='./bus/../file0\x00', r3, &(0x7f0000000280)='./bus\x00', 0xce2a6b2266ca39f3) (async) r6 = openat(r3, &(0x7f0000000000)='./bus\x00', 0x200000, 0x80) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) 00:20:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x7}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) [ 3103.584791][T27859] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:35 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x4, 0x9e, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000140)) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0xc000, 0x4) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000002c0)={0x4000000d}) cachestat(r4, &(0x7f0000000180)={0xffff, 0x2}, &(0x7f0000000200), 0x0) renameat2(r4, &(0x7f00000001c0)='./bus/../file0\x00', r3, &(0x7f0000000280)='./bus\x00', 0xce2a6b2266ca39f3) r6 = openat(r3, &(0x7f0000000000)='./bus\x00', 0x200000, 0x80) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x4, 0x9e, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000140)) (async) dup(r1) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0xc000, 0x4) (async) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000002c0)={0x4000000d}) (async) cachestat(r4, &(0x7f0000000180)={0xffff, 0x2}, &(0x7f0000000200), 0x0) (async) renameat2(r4, &(0x7f00000001c0)='./bus/../file0\x00', r3, &(0x7f0000000280)='./bus\x00', 0xce2a6b2266ca39f3) (async) openat(r3, &(0x7f0000000000)='./bus\x00', 0x200000, 0x80) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) (async) 00:20:35 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000001004000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:35 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x4010, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x64}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r6, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) io_uring_enter(r7, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:35 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000002504000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3103.892342][T27871] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:35 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000007ffffff204000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:35 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x4010, 0xffffffffffffffff, 0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x64}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r6, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (rerun: 32) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 64) io_uring_enter(r7, 0x291c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3103.951602][T27875] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3103.977228][T27877] 9pnet_fd: Insufficient options for proto=fd [ 3104.043550][T27891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x3e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:35 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="746e6171733d66642c7266646e1904", @ANYRESHEX=r2, @ANYBLOB="2c7666646ed9754f48cf5c51ede26f2d6f3d28dc401d37ac45c5cd8b7445906f47ea8722b6251c203d404d7fe6cd3bbd9e54a1a45932298e63bde707e86baf63d4aa44d91c3b4c6d8f6fefa9dcaa479af1d3ba98d3e9bd4cb2a962c824c04dc488c2a6ad70c32b34a96ec913a5ac5aa25cb182423ad1372720ec94f0e572c0bb3fe150fcbf217bffa6307bdfb07fe055aa7d95183b0cd02d931568501d7915bda2e98e8a6ced7c74d6986327a476282f54a0693a02959a12cb1578643bd2de52d60b2513ea3c3412411685e1969c333a175f7f62f78e205c9d2d18", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) recvfrom(r3, &(0x7f0000000000)=""/6, 0x6, 0x2040, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0x8, 0x2}, 0x80) 00:20:35 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000007ffffff804000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:35 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x4010, 0xffffffffffffffff, 0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x64}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r6, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (rerun: 64) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) io_uring_enter(r7, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x8}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) [ 3104.742393][T27872] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3104.753763][T27872] CPU: 0 PID: 27872 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3104.764267][T27872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3104.774333][T27872] Call Trace: [ 3104.777759][T27872] [ 3104.780704][T27872] dump_stack_lvl+0xda/0x130 [ 3104.785330][T27872] dump_stack+0x15/0x20 [ 3104.789581][T27872] dump_header+0x82/0x2d0 [ 3104.793929][T27872] oom_kill_process+0x33a/0x4c0 [ 3104.798786][T27872] out_of_memory+0x9ca/0xbf0 [ 3104.803381][T27872] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3104.809530][T27872] mem_cgroup_out_of_memory+0x139/0x190 [ 3104.815129][T27872] try_charge_memcg+0x75c/0xd30 [ 3104.820017][T27872] ? __swap_duplicate+0x29b/0x2b0 [ 3104.825059][T27872] ? radix_tree_lookup+0xf9/0x150 [ 3104.830109][T27872] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3104.836178][T27872] __read_swap_cache_async+0x2f6/0x550 [ 3104.841635][T27872] swap_cluster_readahead+0x27c/0x4c0 [ 3104.847205][T27872] swapin_readahead+0xe9/0x7f0 [ 3104.852039][T27872] ? __filemap_get_folio+0x41a/0x5a0 [ 3104.857316][T27872] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3104.863009][T27872] ? swap_cache_get_folio+0x6e/0x200 [ 3104.868287][T27872] do_swap_page+0x4a0/0x1670 [ 3104.873055][T27872] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3104.878628][T27872] ? __rcu_read_lock+0x35/0x50 [ 3104.883448][T27872] ? pte_offset_map_nolock+0x124/0x1d0 [ 3104.888926][T27872] handle_mm_fault+0xa36/0x2dd0 [ 3104.893874][T27872] exc_page_fault+0x3ff/0x6c0 [ 3104.898612][T27872] asm_exc_page_fault+0x26/0x30 [ 3104.903455][T27872] RIP: 0033:0x7f0beb361ae4 [ 3104.907993][T27872] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3104.927783][T27872] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010206 [ 3104.933927][T27872] RAX: 0000000000000000 RBX: 00007f0beb4c6f80 RCX: 0000000000000000 [ 3104.941887][T27872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555fc5788 [ 3104.949906][T27872] RBP: 00007f0beb4c8980 R08: 0000000000000000 R09: 00007ffe135670b0 [ 3104.957867][T27872] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f5fe1 [ 3104.965862][T27872] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000002f5ca0 [ 3104.973824][T27872] [ 3104.976934][T27872] memory: usage 307200kB, limit 307200kB, failcnt 167757 [ 3104.983965][T27872] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 3104.991960][T27872] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3104.999251][T27872] Memory cgroup stats for /syz5: [ 3105.001788][T27872] cache 0 [ 3105.009699][T27872] rss 12288 [ 3105.012807][T27872] shmem 0 [ 3105.015756][T27872] mapped_file 0 [ 3105.019206][T27872] dirty 0 [ 3105.022145][T27872] writeback 12288 [ 3105.025783][T27872] workingset_refault_anon 109323 [ 3105.030709][T27872] workingset_refault_file 28 [ 3105.035322][T27872] swap 241664 [ 3105.038632][T27872] swapcached 16384 [ 3105.042357][T27872] pgpgin 187217 [ 3105.045823][T27872] pgpgout 187213 [ 3105.049420][T27872] pgfault 379154 [ 3105.052953][T27872] pgmajfault 48666 [ 3105.056687][T27872] inactive_anon 0 [ 3105.060309][T27872] active_anon 0 [ 3105.063758][T27872] inactive_file 0 [ 3105.067393][T27872] active_file 0 [ 3105.070858][T27872] unevictable 0 [ 3105.074308][T27872] hierarchical_memory_limit 314572800 [ 3105.079676][T27872] hierarchical_memsw_limit 9223372036854771712 [ 3105.085871][T27872] total_cache 0 [ 3105.089443][T27872] total_rss 12288 [ 3105.093076][T27872] total_shmem 0 [ 3105.096594][T27872] total_mapped_file 0 [ 3105.100590][T27872] total_dirty 0 [ 3105.104178][T27872] total_writeback 12288 [ 3105.108366][T27872] total_workingset_refault_anon 109323 [ 3105.113821][T27872] total_workingset_refault_file 28 [ 3105.119011][T27872] total_swap 241664 [ 3105.122876][T27872] total_swapcached 16384 [ 3105.128175][T27872] total_pgpgin 187217 [ 3105.132168][T27872] total_pgpgout 187213 [ 3105.136327][T27872] total_pgfault 379154 [ 3105.140402][T27872] total_pgmajfault 48666 [ 3105.144642][T27872] total_inactive_anon 0 [ 3105.148814][T27872] total_active_anon 0 [ 3105.152791][T27872] total_inactive_file 0 [ 3105.157107][T27872] total_active_file 0 [ 3105.161430][T27872] total_unevictable 0 [ 3105.165431][T27872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27872,uid=0 [ 3105.180754][T27872] Memory cgroup out of memory: Killed process 27872 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:36 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000007ffffff904000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:36 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) dup(r0) (async) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="746e6171733d66642c7266646e1904", @ANYRESHEX=r2, @ANYBLOB="2c7666646ed9754f48cf5c51ede26f2d6f3d28dc401d37ac45c5cd8b7445906f47ea8722b6251c203d404d7fe6cd3bbd9e54a1a45932298e63bde707e86baf63d4aa44d91c3b4c6d8f6fefa9dcaa479af1d3ba98d3e9bd4cb2a962c824c04dc488c2a6ad70c32b34a96ec913a5ac5aa25cb182423ad1372720ec94f0e572c0bb3fe150fcbf217bffa6307bdfb07fe055aa7d95183b0cd02d931568501d7915bda2e98e8a6ced7c74d6986327a476282f54a0693a02959a12cb1578643bd2de52d60b2513ea3c3412411685e1969c333a175f7f62f78e205c9d2d18", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="746e6171733d66642c7266646e1904", @ANYRESHEX=r2, @ANYBLOB="2c7666646ed9754f48cf5c51ede26f2d6f3d28dc401d37ac45c5cd8b7445906f47ea8722b6251c203d404d7fe6cd3bbd9e54a1a45932298e63bde707e86baf63d4aa44d91c3b4c6d8f6fefa9dcaa479af1d3ba98d3e9bd4cb2a962c824c04dc488c2a6ad70c32b34a96ec913a5ac5aa25cb182423ad1372720ec94f0e572c0bb3fe150fcbf217bffa6307bdfb07fe055aa7d95183b0cd02d931568501d7915bda2e98e8a6ced7c74d6986327a476282f54a0693a02959a12cb1578643bd2de52d60b2513ea3c3412411685e1969c333a175f7f62f78e205c9d2d18", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) recvfrom(r3, &(0x7f0000000000)=""/6, 0x6, 0x2040, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0x8, 0x2}, 0x80) 00:20:36 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x146c, &(0x7f0000000280)={0x0, 0xc7e9, 0x40, 0x3, 0x1e2, 0x0, r0}, &(0x7f0000000040), &(0x7f0000002400)) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="7f159397285c05f92045f077e88fbef1b6ddd7554c114b516b843685262f5697c31fd3148d2c174cfefc783ab278f6c1988bd163584f546ee97eb05ca0c52d74504f3221e686bcf0d7c70fb0dd1e56ed2a305c4e5c27297b3a5509c57d5d4f3e4baa6e210e970563d77121efb4f9a78936a51f0456577d9cf9f0a73dc3097db3da20b284719f3538db1e5e132afcbea2ea7ee0a1476e1347c13f3069e55ea6060dd5802b01f50c62143efc2f72ff257f5b9bbebbc0dd918dacce9151b0e92c1cf7150ccb40820caa8a5f9a5ec1def59553f3405baacd6b6040abe851cfcc61f63ee190a7e3f7b6fe8520e426048e133a1379a96daa700f14a0ad1860b0fcebf68afd3ab0be6ed1c1b0d1ece569bd89ae6799210922fb340f9a324f898b93998260b5dbf47c38da1cd763e77018e85c2bdc54eb5ac794590dfe2fb7ef908c2d10e0f6c1bb7fb428b9abd9278c8e032b9f18312bc0cc950953913b77a1ec0cb221851a0b465b8431fef2e74509922669ca9710bc05833dda09f70219f1510d8bb96ae235644524575768d25fb87cc349c7df5250ba5bf27593ce2fda0de656716a98df14a6601d4528c2019f39575c52db60acd9997c96711833f6cf491b502d29078fd7ef15077dd04385344ea74ae72a2cfb7f77cbb10340fe63c3def06a091ff5c43ac1e17f12ba17b3b1fb6530790ab8a300bb382207730f720f548bfdc00e38d2c520d98e473e3694297bbb2b739a3d50d2338f1db4c201fe3c3cf22a4371189700008810c3ac03023d488472c105520491fe196482a7d2e26ea8fe8e86828894853bfad96d630cbd33903a88f8a65ed3832f3b2279ff4f5f2212570b9cabb4abc8531cd28e2a9981b25f30aafd68ff5d6f5758a7d69d83296c6c39e9be2de96a254a319a89d906703ccc6a48ce24453c458eb49a9340d5192f007ea9379a161274374017e24d5bdddfb82c3d439b9af42e70ce8a98807eccc71c96a79a9d86cecee83082f9498955e58442c3d963cf26932d4692a377c0ebc2f75824fec14bde80f11600eadf5f5c77eedaaf0df39ed6668230f4c6d3f9471c975a0c3787df38ce02b045841bb20ba28153b07c1caaf68d86fd6b1cf30dc8e5da65e8476bb0491c12b59bc73e219b5dfd1be8bf966459f3abcef4710358eb540d14e669ffe6e3ac74f6cf6207c7b608723612c99afb31022fab0aee0d10251ee38d267e83a39983419d0de429d13b458ccfe0b90344d5b4ea4f50e1285ce90b3ef3ca2d5e1eda51ec9032c4ad006b99855495149a81d4c5ecde8ba78808be5fcd589758af1b06f7c443dc543f19fda5bd04aa4850cb42d241cc4a6b7388d37fcbc4de5fc9b5a63a8af5ff888b67c3d55942007132ae42d451250b8bf14ca3463791cd7d4445058bd9529dea0c4920a43fbba2ecde139c99dbe38c94b80e396a5d444c19a5d2b27cc79f761d88d5988174f3ace79833b9d14b98225eb8118255bed281da83ab81e6a38d7a3b607842178d254c12746630c1e7c4b8dcc6a2e57a4d682408b55b9f1bd42ae0ae88b609e7b93e8ef022a2e79ee597fd43727ad70b9370f621016cc151dbbef24924a13aa0d90f00c0bbd476cc125f51cfe5280e7837b61252d29b44d63dfb13fde52b9a3190b0b4cf7f62afd96b5013d996906f139813da179d2f060fbfc54befb4463b4f9a55513eb7829e3633e7bcdca39e3c0ffcc8a055fdfb9496ef135b7505f53b33af76c2465e2725fe9231cc9c0cb4d42f0e43002d5b9dd38d05ecafe49261896fb18060f2c2808a933f74e6dec025782022e8f33c02f088d3daf2c5d9f096edf1969b88e8b49a01234a5138f69b549cb4171b8e4a6d6602a102cd916ce80ef7069781ace4a9aa3eaf2c3531f1fc4b3b3a6fb2230d5e53e621d8e8ae973b2319d355fc7517a68cc1224bc9f0b4a7d0d3a042c57515cf5b70e94f2a1c19f57d1c595e44ed12cbf8fa484f47dbe656ec871406c1576b7005f08981ad2790f181860c931f76a9b72c8eefa4316d1755d080a746771ab3b6620e23cf3bb31aa14c98e149aadd7513ce3136bbcab35900d9641fdcc0d3d4e15005e0d340cbe6aedfe3c9dfdd82a499d3b07fe53ff484d2ee0179267aa321643978118fc5f5799d774d5983a3589bae2f62bf6c919338ec50c156c748d80f0dc9774ed61cc825f8bdca3525cc31430845c3c9a0245e3962c315b9b674fa529e5bd58b184adac45e5e2af6f7188dc0f8b03a53c70d5883b88b542f9765fef029ae361802ca203e3b1df07af6129e0221faecc205647c66a5758d7617a1161bea590989c2c1e6798940514794efad0e49882dbb817189d52b77d3db2be01e71be4dde9dd5c9833b5e9903153952d4cbd2a1c7d74d3a8aed32d6fcd374b7272c045747631a84dff6ce5eb839e5d5673d559e01f3bbcc7e259578572c5240ccdee2d4200df4ad13d8fb3a7a3d2edd818fa8571d173f250fb10fbd571b80f22f553fdda9ed7bf93cd9b06c20922adb4a23831412e462a29e8b0a0d8ae66d5ebbf5cbb53f2285b881477e28a05cab18878f91abffab3693f96bc435cdc7fec5212e3f9cdbb2dcfc9a632f9ef6c53079bb5979c35968bce4e7e679338e393af845e85dcb3e403f77f2ebe441fb05aff857c070b442768ce8a8e063b33e1262e94fa1f2aacec6b4cb3e6dfc93662411a089cbb5ec7c53dafab882ce26f56962223a1b754b2a2f8813dd71e3237e6a5cd7c4c71bfdfc0ad307bb7f879ad473c75d60321eb8c29fc0fbd2c5114ba951d0eacfceb8c679922c0a3886c7a1fffbff5bea3798c687501ed7e674a3b2d1b6703f5397d6dc1c6f54cf9469c5834f80ff8548f29598e09fc567b5013295c9ea3af79ce781cdcd4d1ee81092aa30136709458f00869238e21f16bd40d8a2efd4904ad3cec4fcebfaec39118121e2477c1c7fed69e0978cd2eb0179a84ba7feada4816aba02f01cc0f2d1806c5231181d3fd49a2093f2d5e92db15e855dc78c11dd9293f418bf8baad2d3afde3ba697c24e8807648ae8031893540da19e2ee963df942d57e6b5746eeb1305a030124d1d990cf227278b77959eb4bf17e1f81dec81f0e232cbb09ff13de19696fc375316cf5bc7ee765115fed5f345f69c7715ca86655f822c0b7ac8033d62783a9ec2c1f3e705ba28c14f3b541384c2c719e893eaac6933bfc58209c2a7ac11ec768dfd968fb011e4b57af239d70bf303c99889d3d3511b935c702ed95055e7d72f693da26123a03ec930e7d2fedfdef0636af93c7082e49e8886f3ae9e3c52b830cf41145d29b5a3e409e0a8ff120cbc9c2076599e0e95c1fdafccf7fab28865a2c27e9fd4d6a998acde97b92fab31d872c343f889f81d34a6d6388bcc3d6892e8adfa7098875eaa58e11162541b2d07dc0243dbd6189910899339ab8dc0d1d66bf6e82901c26df4c168506a8576343f26d77d9654666beb80f33479859b384a6f3258e5c7d840fe09f1df6930cc7bd7f73d030e271c38a2b8c8a1e67ed4a9aadb8a78b3d506522dfad22f9341aa5f0ba1c3d4617db3bba6a5152a360c9552e9bc824bb624c7de7eeaf50a1c9f188f356ae1ead55b57cc0ee1bf4dfaf457938dd73d5fe7340670d355fb302aac15663281813a287130dc67b75b5df20a85a67ff05e695427a81bab26d8a4ca9513df048ae73f8068f40092bf545eaf3d69d8900c1c1ffca290a32ea29d7533adfbe51d2f8cfd753bbb587766fafd80cac15662ecd9cd88878a7eb06c88f54e480c160b81bc3e4444664c5b9553cd4b73d53c104f581fc2c83ff8319c5c7e3b25350b79d5199a6a93bbc55d10825a22ebf1c866574316513075f95dc06a21e6d80bf900d6810fea78bcf1ff8ab3c3b2180f08216fba8c8b168ba621a5d15bf6f31f72d8933e6a0ce12ded07a169bd4398e2da7158be5ce054a5da471e3ab3dff523764b07a9043b9857938e1ddc33ecb33615c78880b0459c49cd1e24df954140eaf40ba2a1c3c546b6327b4e1eff6e8d245005f54374212e2c589eb7f3af7077cc4cbf68834915bd5a68e02d2f9b4c76a7ff5691887ece317ad9b50cb28d36bb306ca12895f0f34dbd23ff9ed077c58894d315876d2f5f99dcfa21a74eccfb5fa8b2b9cce5163d0b6c2907365f37948a9ac546dac2d19b6efa09306576fccc5d8092d831c5b2bdd15e00f6e0695479edae9bae3b54b96f413c54713ba83c89cd1dca3b299b3ca0494eaa9f33f8f5ee23409de1add0f1a772d76649e19b1617cd4616e424b39662a3af9c30b5de7de8b7c5f6dece7c676bce4f21ae70f1d443b9cd220148d655b146bf905b3a52b4397a2e6de57d5f8ecc14d9559c7ffd4563b82f0e0d058b8fd862d5eb86e6c5c61315ea94cf961a5599cc98e32d4d7eb14118ec30f2c8c9a5f1d4ead2fdb4e229bc05c9b50942b3396edd9cd952d5384c3a6406dc6a377b5dd925fd89ba755aac818d4fbd43de877c24f9bd9179fbcffa23dbefc75496c195a18f7644b17d0441d6800528a21835393de626174fdfda2acca76a9f502e1a4339906e8cc984c325393535119ef551c2554d748ca293569c0175d3cbca3a39caf52b99b3bb6b3928064a237fb615f624c32ac8fe162729473dfa3a4b1f9eec15360ebe33fc9caee68aed0957653d43765fa19ce1398c341aa21dc23ecbf769e6fa2794ac3230ca13c035823379455f288627401d51c55c388c44732f44678d49078805d8e05043af5e72c1517ec89217a56409f7915841bcba3288c2280d002737c6b9a084970bc14924f35e89b125a9f996ae31f13768c11fdf7b15bcb247efd2c5702bf72e092400717ace65ebe8c1fa23f31bad9a0a9cec6c815a60e5a24dc3db2c39e097fa3d88472bf4bc980ae2c3cde714fca42d75b8a3cdc59026614bf7984e07457f7a26a173a7c130d8ace974b46924997c12f9e169a2d73933e5440f1270742a720b1b259648e85337699863d225bb5b0a383487affcdc4b9c2c342f2f53cf34765ebed2d8c08026e26f88833018ef9872987b430b7fe2882bf00047bda293c2a2e0ae0750b9707a1fb0d828377c06e8da6c53e0dd00be5d1481ff72d4d1df514aba4a5ccce255dc155934bcdfef4fba7b665b7da589a675315ef4ba550039ac70d529737f286691a5756bf686e86710766b4f7b1646f5a75f06d7f0b927096b43eba23c4e4d61931c411303ab1b0daaf4746ddd2f7f88d3f07ac023cf0e7a0173601db2d60050f07b3b3b195cbe5a875e483c5675781dbd863dfcb7ada0e4c9decee97a8259d6074460cf289471a0dd7eccb58ba75012f8ac35860f713d2499f42893873027e6b5c1b00a3ecda4e96ffa6d2ef6155e9d7e14cc0b27da16d639604b0fb48cd79ff581d6691b5647a3af0fa02b653d7710af4025a918f2bde2745c98d1b1791c1dd8d9ed454ebb494427183ee223db1c83abb3e9a503c1eb37712102739e045db6d35438442a3ad3e8077a91f845961801f3c92b8f437b12eceb6961f14887fcefe3b9a8be96573639c5e18a774735bdf35dfa8c70928a321a98db8a2b84fe4abf3a07888cfe30d678cfc87b77e7b07d92c82066499c0984fb5deea4d2df9f81fd50650720242cc79fd2432f1a503a99295ef0a27202d2fc43f1922092604ad301cfe22f369366de911c31a0eec9f69816894f34329598bf69cfe6a2cc270675b5fee06d2fa9028deabea49115ff088b87cb580e74e56a0784816a38f57622091b3589f790d80fee137b66d504b2815268c556ccce01695d8c232a36419e0dfea8e85c29995d8216575e", 0x1000}], 0x1, &(0x7f0000001380)=[{0x1010, 0x113, 0x1c51d32b, "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"}, {0x40, 0x104, 0xf2a, "7acff9e3a814d3b2b1cececbc57113675debaa139267b376e89f1dc767bda99515ca153efdeec868e3aa21"}, {0x10, 0x107, 0x2f}], 0x1060}, 0x0, 0x40, 0x1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x9}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:36 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x146c, &(0x7f0000000280)={0x0, 0xc7e9, 0x40, 0x3, 0x1e2, 0x0, r0}, &(0x7f0000000040), &(0x7f0000002400)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000001380)=[{0x1010, 0x113, 0x1c51d32b, "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"}, {0x40, 0x104, 0xf2a, "7acff9e3a814d3b2b1cececbc57113675debaa139267b376e89f1dc767bda99515ca153efdeec868e3aa21"}, {0x10, 0x107, 0x2f}], 0x1060}, 0x0, 0x40, 0x1}) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:36 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000007ffffffe04000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3105.582828][T27919] __nla_validate_parse: 1 callbacks suppressed [ 3105.582841][T27919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3105.691452][T27927] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:36 executing program 1: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="746e6171733d66642c7266646e1904", @ANYRESHEX=r2, @ANYBLOB="2c7666646ed9754f48cf5c51ede26f2d6f3d28dc401d37ac45c5cd8b7445906f47ea8722b6251c203d404d7fe6cd3bbd9e54a1a45932298e63bde707e86baf63d4aa44d91c3b4c6d8f6fefa9dcaa479af1d3ba98d3e9bd4cb2a962c824c04dc488c2a6ad70c32b34a96ec913a5ac5aa25cb182423ad1372720ec94f0e572c0bb3fe150fcbf217bffa6307bdfb07fe055aa7d95183b0cd02d931568501d7915bda2e98e8a6ced7c74d6986327a476282f54a0693a02959a12cb1578643bd2de52d60b2513ea3c3412411685e1969c333a175f7f62f78e205c9d2d18", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) recvfrom(r3, &(0x7f0000000000)=""/6, 0x6, 0x2040, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0x8, 0x2}, 0x80) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) dup(r0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="746e6171733d66642c7266646e1904", @ANYRESHEX=r2, @ANYBLOB="2c7666646ed9754f48cf5c51ede26f2d6f3d28dc401d37ac45c5cd8b7445906f47ea8722b6251c203d404d7fe6cd3bbd9e54a1a45932298e63bde707e86baf63d4aa44d91c3b4c6d8f6fefa9dcaa479af1d3ba98d3e9bd4cb2a962c824c04dc488c2a6ad70c32b34a96ec913a5ac5aa25cb182423ad1372720ec94f0e572c0bb3fe150fcbf217bffa6307bdfb07fe055aa7d95183b0cd02d931568501d7915bda2e98e8a6ced7c74d6986327a476282f54a0693a02959a12cb1578643bd2de52d60b2513ea3c3412411685e1969c333a175f7f62f78e205c9d2d18", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) recvfrom(r3, &(0x7f0000000000)=""/6, 0x6, 0x2040, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0x8, 0x2}, 0x80) (async) 00:20:36 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x146c, &(0x7f0000000280)={0x0, 0xc7e9, 0x40, 0x3, 0x1e2, 0x0, r0}, &(0x7f0000000040), &(0x7f0000002400)) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000001380)=[{0x1010, 0x113, 0x1c51d32b, "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"}, {0x40, 0x104, 0xf2a, "7acff9e3a814d3b2b1cececbc57113675debaa139267b376e89f1dc767bda99515ca153efdeec868e3aa21"}, {0x10, 0x107, 0x2f}], 0x1060}, 0x0, 0x40, 0x1}) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:36 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000007fffffff04000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x41]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:36 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x111e, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000000100), &(0x7f0000000280)=0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001"], 0x20}], 0x1}, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r7}) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x2004, @fd=r8, 0x8, 0x12d, 0x5, 0xb, 0x1, {0x1}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3105.845186][T27937] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:37 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x200100, 0x0) signalfd(r0, &(0x7f0000000000), 0x8) 00:20:37 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000200000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:37 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x111e, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000000100), &(0x7f0000000280)=0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001"], 0x20}], 0x1}, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r7}) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x2004, @fd=r8, 0x8, 0x12d, 0x5, 0xb, 0x1, {0x1}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_setup(0x111e, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000000100), &(0x7f0000000280)) (async) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001"], 0x20}], 0x1}, 0x0) (async) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r7}) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x2004, @fd=r8, 0x8, 0x12d, 0x5, 0xb, 0x1, {0x1}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0xa}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:37 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)='Q', 0x1}], 0x1}, 0x0) [ 3106.710251][T27956] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3106.733195][T27940] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3106.746839][T27940] CPU: 1 PID: 27940 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3106.757281][T27940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3106.767623][T27940] Call Trace: [ 3106.770916][T27940] [ 3106.773858][T27940] dump_stack_lvl+0xda/0x130 [ 3106.778487][T27940] dump_stack+0x15/0x20 [ 3106.782753][T27940] dump_header+0x82/0x2d0 [ 3106.787188][T27940] oom_kill_process+0x33a/0x4c0 [ 3106.792061][T27940] out_of_memory+0x9ca/0xbf0 [ 3106.796802][T27940] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3106.802896][T27940] mem_cgroup_out_of_memory+0x139/0x190 [ 3106.808520][T27940] try_charge_memcg+0x75c/0xd30 [ 3106.813715][T27940] obj_cgroup_charge_pages+0xab/0x130 [ 3106.819084][T27940] __memcg_kmem_charge_page+0x9c/0x170 [ 3106.824635][T27940] __alloc_pages+0x1bb/0x340 [ 3106.829276][T27940] alloc_pages_mpol+0xb1/0x1d0 [ 3106.834147][T27940] alloc_pages+0xe0/0x100 [ 3106.838479][T27940] __vmalloc_node_range+0x6d2/0xea0 [ 3106.843877][T27940] kvmalloc_node+0x121/0x160 [ 3106.848601][T27940] ? xt_alloc_table_info+0x3d/0x80 [ 3106.853985][T27940] xt_alloc_table_info+0x3d/0x80 [ 3106.858937][T27940] do_arpt_set_ctl+0x634/0x13b0 [ 3106.863797][T27940] ? __futex_wait+0x227/0x280 [ 3106.868510][T27940] ? __futex_wake_mark+0x70/0x70 [ 3106.873517][T27940] ? tcp_release_cb+0xfe/0x370 [ 3106.878282][T27940] ? _raw_spin_unlock_bh+0x36/0x40 [ 3106.883397][T27940] nf_setsockopt+0x18d/0x1b0 [ 3106.887987][T27940] ip_setsockopt+0xe6/0x100 [ 3106.892489][T27940] tcp_setsockopt+0x90/0xa0 [ 3106.897017][T27940] sock_common_setsockopt+0x61/0x70 [ 3106.902270][T27940] ? sock_common_recvmsg+0xe0/0xe0 [ 3106.907409][T27940] __sys_setsockopt+0x1d4/0x240 [ 3106.912272][T27940] __x64_sys_setsockopt+0x66/0x80 [ 3106.917288][T27940] do_syscall_64+0x44/0x110 [ 3106.921783][T27940] ? syscall_exit_to_user_mode+0x38/0x140 [ 3106.927504][T27940] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3106.933615][T27940] RIP: 0033:0x7f6f32133ae9 [ 3106.938095][T27940] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3106.957741][T27940] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3106.966164][T27940] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3106.974181][T27940] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3106.982244][T27940] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3106.990246][T27940] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3106.998288][T27940] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3107.006260][T27940] 00:20:38 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000300000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3107.009420][T27940] memory: usage 307200kB, limit 307200kB, failcnt 81694 [ 3107.016735][T27940] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 3107.024804][T27940] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3107.032363][T27940] Memory cgroup stats for /syz3: [ 3107.039084][T27940] cache 0 [ 3107.047121][T27940] rss 0 [ 3107.049891][T27940] shmem 0 [ 3107.052834][T27940] mapped_file 0 [ 3107.056342][T27940] dirty 0 00:20:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x10}, {0x10}, {0x10, 0x1}], 0x30}, 0x0) [ 3107.059276][T27940] writeback 8192 [ 3107.062836][T27940] workingset_refault_anon 71911 [ 3107.068004][T27940] workingset_refault_file 64 [ 3107.072602][T27940] swap 294912 [ 3107.075969][T27940] swapcached 12288 [ 3107.079786][T27940] pgpgin 475197 [ 3107.083326][T27940] pgpgout 475194 [ 3107.087048][T27940] pgfault 898950 [ 3107.090671][T27940] pgmajfault 30281 [ 3107.094500][T27940] inactive_anon 0 [ 3107.098429][T27940] active_anon 0 [ 3107.102126][T27940] inactive_file 0 [ 3107.105903][T27940] active_file 0 [ 3107.109533][T27940] unevictable 0 [ 3107.113168][T27940] hierarchical_memory_limit 314572800 [ 3107.118603][T27940] hierarchical_memsw_limit 9223372036854771712 [ 3107.124905][T27940] total_cache 0 [ 3107.128578][T27940] total_rss 0 [ 3107.132034][T27940] total_shmem 0 [ 3107.135663][T27940] total_mapped_file 0 [ 3107.139710][T27940] total_dirty 0 [ 3107.143245][T27940] total_writeback 8192 [ 3107.147456][T27940] total_workingset_refault_anon 71911 [ 3107.152919][T27940] total_workingset_refault_file 64 [ 3107.158202][T27940] total_swap 294912 [ 3107.162015][T27940] total_swapcached 12288 [ 3107.166300][T27940] total_pgpgin 475197 [ 3107.170282][T27940] total_pgpgout 475194 [ 3107.174348][T27940] total_pgfault 898950 [ 3107.178488][T27940] total_pgmajfault 30281 [ 3107.182794][T27940] total_inactive_anon 0 [ 3107.187090][T27940] total_active_anon 0 [ 3107.191196][T27940] total_inactive_file 0 [ 3107.195394][T27940] total_active_file 0 [ 3107.199400][T27940] total_unevictable 0 00:20:38 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (rerun: 32) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async, rerun: 64) cachestat(r3, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x111e, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000000100), &(0x7f0000000280)=0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001"], 0x20}], 0x1}, 0x0) (async, rerun: 64) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r7}) (async, rerun: 64) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x2004, @fd=r8, 0x8, 0x12d, 0x5, 0xb, 0x1, {0x1}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async, rerun: 64) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3107.203380][T27940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27939,uid=0 [ 3107.219051][T27940] Memory cgroup out of memory: Killed process 27939 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x0, 0x0, 0x20008}, 0x48) [ 3107.345598][T27975] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001640)={&(0x7f0000000180)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 00:20:38 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x6, 0x8, 0x2, 0x3, 0x3c, 0x6, 0x8f}, 0x9c) 00:20:38 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000400000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0xc}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x42]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:38 executing program 1: bpf$PROG_BIND_MAP(0x15, &(0x7f0000000040), 0xc) 00:20:38 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x6, 0x8, 0x2, 0x3, 0x3c, 0x6, 0x8f}, 0x9c) 00:20:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)="41b298e48ce566c2c0a3ad9371a2", 0xe}, {&(0x7f0000000100)="72d551511f89d8e00aba41b866bc1760d659227eefbe8dad43cebaf413ccfb1a128f39900d29365a3db706d8cea2a23f4639946166edb8213854a989884d817da7f7fa0471970977b68c39258023f1fe4dd9e1b9c9f18431cf1441535a970285e5180ec7a1a78d1ccc0e19868f2463edbfec4cdd8fbee4c7731eef6d3265d7034b1268a006a17bd42643ecfcfb", 0x8d}, {&(0x7f00000001c0)="745afdcea0a0c96b3e43ae71e4dbcd8893127771956fd076b0565096afdf798d9341f8963163d6d7ff256c6e947e", 0x2e}, {&(0x7f0000000200)="34390f808dcac6d092217d3d6aa228f61b5fe5878dc55192e17be46eb35d15e7759f0dbbf29decd1cd913674a0f716e044b8a10d78627d81b8793e5413a77a7857eb9bee05a8093565e2bdad7d4eacf34a9333909e7b44d927558b2a51a29357fcd6a1cfc8358c2f7f3a7f76017946302e4636ad4ff9586d7e8e86a3490debe8d322ae003e46a81d378ff989777a51842b03", 0x92}, {&(0x7f00000002c0)="ad26ce67ac473c0327d18c8947087c1477ca1039adefd629106cac70f93c9632997b567ea15217df57fb809c098503112de8ff0238f83ef701feff9dfea3e67dd1030ddfccf0de8be4b38f21b0dbd5f625d8fe46366ba04482d8b849389d03ea03fa613d52fbccaee3b38e3098afab485014e5", 0x73}, {&(0x7f0000000340)="41a49d76c9899fde4551a8475bc290ad420447407e0bfd57e7a3a870c23ea1ec66b738108dfce185034dda7b384a7623241b2466b4232773b14b2b2056536153440c1c522a7e0d0b6564ea327d0f2f7b441bab5a543dc7a5287897858c0640a00b91e1046fd956915d4a04da209a1d61cbe955d4e27ef7838e5a77c717863af448b28abf83cc5f0815c2ffea56b0a932e36f04ed26d67c23fed954b7e00f2012035363fe", 0xa4}, {&(0x7f0000000400)="36c60ac2ba98cb2d", 0x8}, {&(0x7f0000000440)="4323fce6010666cd8dd7335c5770f5b91f9e3514fe6f72bb32653ca98cc046c075a8f5f9a1703af0f4889046044d13d08a318c71da7acc5927f5ec409a9002a3c967f0c611da449107cf097bc3e11f2f9ca3a0da0e276e9010c432d449100918a8e8893129a57fc126cf8b47bf8cb5ff32bc9b7cda9df7b00ee7b371b085c7343fcc22056e77f4d3c48bd288e125029ea8b7a7adba58d787232b46c3c1f5d15e47ae87638e8d982f2bbbc59f8d6de6e743a175b3224e33edc9296708eaaf5469a6c9790ee61184fb37d5a7b1d09202c20036", 0xd2}, {&(0x7f0000000540)="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", 0xcb6}], 0x9, &(0x7f0000001780)=ANY=[@ANYBLOB='('], 0x28}, 0x4040011) 00:20:38 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000500000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3107.732248][T27990] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:38 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x6, 0x8, 0x2, 0x3, 0x3c, 0x6, 0x8f}, 0x9c) 00:20:38 executing program 1: syz_clone(0x1100, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="c2") 00:20:38 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) io_uring_setup(0x73e9, &(0x7f0000000080)={0x0, 0x193e, 0x50, 0x0, 0x139, 0x0, r0}) 00:20:38 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000600000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3107.829615][T28013] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:39 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@cgroup, 0xffffffffffffffff, 0x1c, 0x0, 0x0, @prog_id}, 0x20) [ 3107.882444][T28019] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:39 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000700000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:39 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) io_uring_setup(0x73e9, &(0x7f0000000080)={0x0, 0x193e, 0x50, 0x0, 0x139, 0x0, r0}) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) io_uring_setup(0x73e9, &(0x7f0000000080)={0x0, 0x193e, 0x50, 0x0, 0x139, 0x0, r0}) (async) 00:20:39 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000800000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xd6]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:39 executing program 1: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x0) syz_open_procfs$namespace(r0, &(0x7f00000004c0)='ns/pid_for_children\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 00:20:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0xd}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:39 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) io_uring_setup(0x73e9, &(0x7f0000000080)={0x0, 0x193e, 0x50, 0x0, 0x139, 0x0, r0}) (async) io_uring_setup(0x73e9, &(0x7f0000000080)={0x0, 0x193e, 0x50, 0x0, 0x139, 0x0, r0}) [ 3108.794012][T28026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:39 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x696802, 0x0) 00:20:39 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000900000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:40 executing program 0: r0 = syz_io_uring_setup(0x46bf, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3108.834165][T28038] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:40 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="5168dfe5bbdc7826d6db33cf72e43ea41bd882a15b8b0bf2100a", 0x1a}, {&(0x7f00000000c0)="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", 0xfe8}], 0x2, &(0x7f00000016c0)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11}}], 0x28}, 0x20000001) 00:20:40 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000a00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@rights={{0x10}}], 0x10}, 0x8015) 00:20:40 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000b00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3109.666176][T28031] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3109.677566][T28031] CPU: 0 PID: 28031 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3109.688064][T28031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3109.698118][T28031] Call Trace: [ 3109.701399][T28031] [ 3109.704327][T28031] dump_stack_lvl+0xda/0x130 [ 3109.708988][T28031] dump_stack+0x15/0x20 [ 3109.713203][T28031] dump_header+0x82/0x2d0 [ 3109.717645][T28031] oom_kill_process+0x33a/0x4c0 [ 3109.722591][T28031] out_of_memory+0x9ca/0xbf0 [ 3109.727193][T28031] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3109.733359][T28031] mem_cgroup_out_of_memory+0x139/0x190 [ 3109.739095][T28031] try_charge_memcg+0x75c/0xd30 [ 3109.743951][T28031] ? __swap_duplicate+0x29b/0x2b0 [ 3109.749073][T28031] ? radix_tree_lookup+0xf9/0x150 [ 3109.754275][T28031] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3109.760433][T28031] __read_swap_cache_async+0x2f6/0x550 [ 3109.765920][T28031] swap_cluster_readahead+0x27c/0x4c0 [ 3109.771318][T28031] swapin_readahead+0xe9/0x7f0 [ 3109.776128][T28031] ? __filemap_get_folio+0x41a/0x5a0 [ 3109.781442][T28031] ? swap_cache_get_folio+0x6e/0x200 [ 3109.786869][T28031] do_swap_page+0x4a0/0x1670 [ 3109.791467][T28031] ? __rcu_read_lock+0x35/0x50 [ 3109.796225][T28031] ? pte_offset_map_nolock+0x124/0x1d0 [ 3109.801702][T28031] handle_mm_fault+0xa36/0x2dd0 [ 3109.806555][T28031] ? mt_find+0x1d9/0x310 [ 3109.810954][T28031] exc_page_fault+0x2f7/0x6c0 [ 3109.815708][T28031] asm_exc_page_fault+0x26/0x30 [ 3109.820633][T28031] RIP: 0010:__get_user_8+0x11/0x20 [ 3109.825785][T28031] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 3109.845420][T28031] RSP: 0018:ffffc90000b7fe38 EFLAGS: 00050202 [ 3109.851549][T28031] RAX: 0000555555fc5da8 RBX: ffffc90000b7fe40 RCX: ffffffff814442c3 [ 3109.859578][T28031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888149b1eb50 [ 3109.867541][T28031] RBP: ffffc90000b7fef8 R08: 0001888149b1eb57 R09: 0000000000000000 [ 3109.876021][T28031] R10: 0001ffffffffffff R11: 0001888149b1e810 R12: ffff888149b1e180 [ 3109.883995][T28031] R13: ffff888149b1eb50 R14: ffffc90000b7ff58 R15: ffffc90000b7ffd8 [ 3109.891955][T28031] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 3109.897900][T28031] __rseq_handle_notify_resume+0xc7/0xbf0 [ 3109.903618][T28031] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 3109.909516][T28031] exit_to_user_mode_loop+0xcc/0xe0 [ 3109.914711][T28031] exit_to_user_mode_prepare+0x6c/0xb0 [ 3109.920164][T28031] irqentry_exit_to_user_mode+0x9/0x20 [ 3109.925755][T28031] irqentry_exit+0x12/0x40 [ 3109.930249][T28031] asm_exc_page_fault+0x26/0x30 [ 3109.935120][T28031] RIP: 0033:0x7f0beb361ae4 [ 3109.939641][T28031] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3109.959422][T28031] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010206 [ 3109.965473][T28031] RAX: 0000000000000000 RBX: 00007f0beb4c6f80 RCX: 0000000000000000 [ 3109.973516][T28031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555fc5788 [ 3109.981479][T28031] RBP: 00007f0beb4c8980 R08: 0000000000000000 R09: 00007ffe135670b0 [ 3109.989437][T28031] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f7307 [ 3109.997483][T28031] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000002f6fc6 [ 3110.006062][T28031] [ 3110.009123][T28031] memory: usage 307200kB, limit 307200kB, failcnt 168111 [ 3110.016157][T28031] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 3110.024120][T28031] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3110.031420][T28031] Memory cgroup stats for /syz5: [ 3110.031622][T28031] cache 0 [ 3110.039553][T28031] rss 12288 [ 3110.042648][T28031] shmem 0 [ 3110.045581][T28031] mapped_file 0 [ 3110.049035][T28031] dirty 0 [ 3110.051949][T28031] writeback 12288 [ 3110.055580][T28031] workingset_refault_anon 109527 [ 3110.060508][T28031] workingset_refault_file 28 [ 3110.065120][T28031] swap 237568 [ 3110.068393][T28031] swapcached 20480 [ 3110.072088][T28031] pgpgin 187517 [ 3110.075547][T28031] pgpgout 187512 [ 3110.079079][T28031] pgfault 379793 [ 3110.082601][T28031] pgmajfault 48764 [ 3110.086323][T28031] inactive_anon 0 [ 3110.089976][T28031] active_anon 0 [ 3110.093410][T28031] inactive_file 0 [ 3110.097080][T28031] active_file 0 [ 3110.100595][T28031] unevictable 0 [ 3110.104148][T28031] hierarchical_memory_limit 314572800 [ 3110.109519][T28031] hierarchical_memsw_limit 9223372036854771712 [ 3110.115750][T28031] total_cache 0 [ 3110.119545][T28031] total_rss 12288 [ 3110.123156][T28031] total_shmem 0 [ 3110.126702][T28031] total_mapped_file 0 [ 3110.130786][T28031] total_dirty 0 [ 3110.134232][T28031] total_writeback 12288 [ 3110.138389][T28031] total_workingset_refault_anon 109527 [ 3110.143902][T28031] total_workingset_refault_file 28 [ 3110.149039][T28031] total_swap 237568 [ 3110.152858][T28031] total_swapcached 20480 [ 3110.157145][T28031] total_pgpgin 187517 [ 3110.161119][T28031] total_pgpgout 187512 [ 3110.165249][T28031] total_pgfault 379793 [ 3110.169393][T28031] total_pgmajfault 48764 [ 3110.173714][T28031] total_inactive_anon 0 [ 3110.177869][T28031] total_active_anon 0 [ 3110.181836][T28031] total_inactive_file 0 [ 3110.186290][T28031] total_active_file 0 [ 3110.190409][T28031] total_unevictable 0 [ 3110.194369][T28031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28031,uid=0 [ 3110.209841][T28031] Memory cgroup out of memory: Killed process 28031 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3110.229775][T28042] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3110.241156][T28042] CPU: 0 PID: 28042 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3110.251577][T28042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3110.261630][T28042] Call Trace: [ 3110.264911][T28042] [ 3110.267893][T28042] dump_stack_lvl+0xda/0x130 [ 3110.272578][T28042] dump_stack+0x15/0x20 [ 3110.276826][T28042] dump_header+0x82/0x2d0 [ 3110.281172][T28042] oom_kill_process+0x33a/0x4c0 [ 3110.286058][T28042] out_of_memory+0x9ca/0xbf0 [ 3110.290694][T28042] mem_cgroup_out_of_memory+0x139/0x190 [ 3110.296239][T28042] try_charge_memcg+0x75c/0xd30 [ 3110.301104][T28042] ? __swap_duplicate+0x29b/0x2b0 [ 3110.306130][T28042] ? radix_tree_lookup+0xf9/0x150 [ 3110.311385][T28042] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3110.317461][T28042] __read_swap_cache_async+0x2f6/0x550 [ 3110.322933][T28042] swap_cluster_readahead+0x27c/0x4c0 [ 3110.328381][T28042] swapin_readahead+0xe9/0x7f0 [ 3110.333176][T28042] ? __filemap_get_folio+0x41a/0x5a0 [ 3110.338547][T28042] ? __switch_to+0x44d/0x9c0 [ 3110.343497][T28042] ? _raw_spin_unlock+0x26/0x40 [ 3110.348418][T28042] ? swap_cache_get_folio+0x6e/0x200 [ 3110.353704][T28042] do_swap_page+0x4a0/0x1670 [ 3110.358315][T28042] ? __rcu_read_lock+0x35/0x50 [ 3110.363121][T28042] ? pte_offset_map_nolock+0x124/0x1d0 [ 3110.368600][T28042] handle_mm_fault+0xa36/0x2dd0 [ 3110.373449][T28042] exc_page_fault+0x3ff/0x6c0 [ 3110.378205][T28042] asm_exc_page_fault+0x26/0x30 [ 3110.383087][T28042] RIP: 0033:0x7f6f320edae4 [ 3110.387493][T28042] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3110.407111][T28042] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3110.413165][T28042] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3110.421181][T28042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3110.429141][T28042] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3110.437182][T28042] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f7340 [ 3110.445199][T28042] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002f6fff [ 3110.453414][T28042] [ 3110.456508][T28042] memory: usage 307200kB, limit 307200kB, failcnt 82676 [ 3110.463443][T28042] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3110.471400][T28042] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3110.478701][T28042] Memory cgroup stats for /syz3: [ 3110.479681][T28042] cache 0 [ 3110.487654][T28042] rss 8192 [ 3110.490685][T28042] shmem 0 [ 3110.493631][T28042] mapped_file 0 [ 3110.497148][T28042] dirty 0 [ 3110.500136][T28042] writeback 0 [ 3110.503410][T28042] workingset_refault_anon 72051 [ 3110.508335][T28042] workingset_refault_file 64 [ 3110.513010][T28042] swap 299008 [ 3110.516317][T28042] swapcached 8192 [ 3110.519976][T28042] pgpgin 475385 [ 3110.523427][T28042] pgpgout 475383 [ 3110.526982][T28042] pgfault 899298 [ 3110.530522][T28042] pgmajfault 30328 [ 3110.534254][T28042] inactive_anon 8192 [ 3110.538144][T28042] active_anon 0 [ 3110.541666][T28042] inactive_file 0 [ 3110.545306][T28042] active_file 0 [ 3110.548759][T28042] unevictable 0 [ 3110.552219][T28042] hierarchical_memory_limit 314572800 [ 3110.557634][T28042] hierarchical_memsw_limit 9223372036854771712 [ 3110.563828][T28042] total_cache 0 [ 3110.567334][T28042] total_rss 8192 [ 3110.570873][T28042] total_shmem 0 [ 3110.574349][T28042] total_mapped_file 0 [ 3110.578337][T28042] total_dirty 0 [ 3110.581839][T28042] total_writeback 0 [ 3110.585669][T28042] total_workingset_refault_anon 72051 [ 3110.591037][T28042] total_workingset_refault_file 64 [ 3110.596154][T28042] total_swap 299008 [ 3110.599972][T28042] total_swapcached 8192 [ 3110.604177][T28042] total_pgpgin 475385 [ 3110.608211][T28042] total_pgpgout 475383 [ 3110.612280][T28042] total_pgfault 899298 00:20:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3110.616366][T28042] total_pgmajfault 30328 [ 3110.620732][T28042] total_inactive_anon 8192 [ 3110.625166][T28042] total_active_anon 0 [ 3110.629295][T28042] total_inactive_file 0 [ 3110.633449][T28042] total_active_file 0 [ 3110.637469][T28042] total_unevictable 0 [ 3110.641452][T28042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28042,uid=0 [ 3110.657140][T28042] Memory cgroup out of memory: Killed process 28042 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3110.674826][T28030] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3110.686253][T28030] CPU: 1 PID: 28030 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3110.696674][T28030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3110.706752][T28030] Call Trace: [ 3110.710033][T28030] [ 3110.713108][T28030] dump_stack_lvl+0xda/0x130 [ 3110.717786][T28030] dump_stack+0x15/0x20 [ 3110.721959][T28030] dump_header+0x82/0x2d0 [ 3110.726293][T28030] oom_kill_process+0x33a/0x4c0 [ 3110.731280][T28030] out_of_memory+0x9ca/0xbf0 [ 3110.735936][T28030] mem_cgroup_out_of_memory+0x139/0x190 [ 3110.741612][T28030] try_charge_memcg+0x75c/0xd30 [ 3110.746534][T28030] ? __swap_duplicate+0x29b/0x2b0 [ 3110.751601][T28030] ? radix_tree_lookup+0xf9/0x150 [ 3110.756706][T28030] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3110.762782][T28030] __read_swap_cache_async+0x2f6/0x550 [ 3110.768256][T28030] swap_cluster_readahead+0x27c/0x4c0 [ 3110.773684][T28030] swapin_readahead+0xe9/0x7f0 [ 3110.778506][T28030] ? __filemap_get_folio+0x41a/0x5a0 [ 3110.783829][T28030] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3110.789566][T28030] ? swap_cache_get_folio+0x6e/0x200 [ 3110.794884][T28030] do_swap_page+0x4a0/0x1670 [ 3110.799527][T28030] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3110.804957][T28030] ? __rcu_read_lock+0x35/0x50 [ 3110.809738][T28030] ? pte_offset_map_nolock+0x124/0x1d0 [ 3110.815218][T28030] handle_mm_fault+0xa36/0x2dd0 [ 3110.820310][T28030] exc_page_fault+0x3ff/0x6c0 [ 3110.825013][T28030] asm_exc_page_fault+0x26/0x30 [ 3110.829961][T28030] RIP: 0033:0x7f2cd3f1dae4 [ 3110.834390][T28030] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3110.854104][T28030] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010206 [ 3110.860162][T28030] RAX: 0000000000000000 RBX: 00007f2cd4082f80 RCX: 0000000000000000 [ 3110.868134][T28030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556726788 [ 3110.876619][T28030] RBP: 00007f2cd4084980 R08: 0000000000000000 R09: 00007ffcf5b320b0 [ 3110.884598][T28030] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f730a [ 3110.892574][T28030] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 00000000002f6fc9 [ 3110.900629][T28030] [ 3110.903711][T28030] memory: usage 307200kB, limit 307200kB, failcnt 158771 [ 3110.911360][T28030] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0 [ 3110.919388][T28030] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3110.926709][T28030] Memory cgroup stats for /syz2: [ 3110.928233][T28030] cache 0 [ 3110.936189][T28030] rss 8192 [ 3110.939206][T28030] shmem 0 [ 3110.942147][T28030] mapped_file 0 [ 3110.945614][T28030] dirty 0 [ 3110.948682][T28030] writeback 0 [ 3110.952081][T28030] workingset_refault_anon 109596 [ 3110.957315][T28030] workingset_refault_file 41 [ 3110.961999][T28030] swap 233472 [ 3110.965324][T28030] swapcached 8192 [ 3110.968998][T28030] pgpgin 204663 [ 3110.972600][T28030] pgpgout 204661 [ 3110.976157][T28030] pgfault 413375 [ 3110.979740][T28030] pgmajfault 46139 [ 3110.983455][T28030] inactive_anon 8192 [ 3110.987383][T28030] active_anon 0 [ 3110.991032][T28030] inactive_file 0 [ 3110.994661][T28030] active_file 0 [ 3110.998170][T28030] unevictable 0 [ 3111.001623][T28030] hierarchical_memory_limit 314572800 [ 3111.007090][T28030] hierarchical_memsw_limit 9223372036854771712 [ 3111.013317][T28030] total_cache 0 [ 3111.016940][T28030] total_rss 8192 [ 3111.020477][T28030] total_shmem 0 [ 3111.023926][T28030] total_mapped_file 0 [ 3111.027940][T28030] total_dirty 0 [ 3111.031396][T28030] total_writeback 0 [ 3111.035314][T28030] total_workingset_refault_anon 109596 [ 3111.040802][T28030] total_workingset_refault_file 41 [ 3111.045954][T28030] total_swap 233472 [ 3111.049747][T28030] total_swapcached 8192 [ 3111.053890][T28030] total_pgpgin 204663 [ 3111.057929][T28030] total_pgpgout 204661 [ 3111.062105][T28030] total_pgfault 413375 [ 3111.066193][T28030] total_pgmajfault 46139 [ 3111.070512][T28030] total_inactive_anon 8192 [ 3111.074989][T28030] total_active_anon 0 [ 3111.078966][T28030] total_inactive_file 0 [ 3111.083113][T28030] total_active_file 0 [ 3111.087117][T28030] total_unevictable 0 [ 3111.091094][T28030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28030,uid=0 [ 3111.106567][T28030] Memory cgroup out of memory: Killed process 28030 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:42 executing program 0: r0 = syz_io_uring_setup(0x46bf, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bf, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xd7]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0xe}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:42 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000c00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:42 executing program 0: r0 = syz_io_uring_setup(0x46bf, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bf, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:42 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000500), &(0x7f00000005c0)=0x8c) 00:20:42 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='dctcp\x00', 0x6) 00:20:42 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000d00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:42 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x9faf, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3111.443547][T28077] __nla_validate_parse: 3 callbacks suppressed [ 3111.443563][T28077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:42 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x9faf, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:42 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x9faf, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3111.533287][T28091] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:42 executing program 1: openat$ptmx(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) 00:20:42 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000e00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3111.782614][T28104] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3112.083960][T28070] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3112.095436][T28070] CPU: 1 PID: 28070 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3112.105850][T28070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3112.115902][T28070] Call Trace: [ 3112.119186][T28070] [ 3112.122121][T28070] dump_stack_lvl+0xda/0x130 [ 3112.126737][T28070] dump_stack+0x15/0x20 [ 3112.130898][T28070] dump_header+0x82/0x2d0 [ 3112.135241][T28070] oom_kill_process+0x33a/0x4c0 [ 3112.140195][T28070] out_of_memory+0x9ca/0xbf0 [ 3112.144887][T28070] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3112.150998][T28070] mem_cgroup_out_of_memory+0x139/0x190 [ 3112.156574][T28070] try_charge_memcg+0x75c/0xd30 [ 3112.161438][T28070] ? __swap_duplicate+0x29b/0x2b0 [ 3112.166466][T28070] ? radix_tree_lookup+0xf9/0x150 [ 3112.171531][T28070] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3112.177607][T28070] __read_swap_cache_async+0x2f6/0x550 [ 3112.183212][T28070] swap_cluster_readahead+0x27c/0x4c0 [ 3112.188572][T28070] swapin_readahead+0xe9/0x7f0 [ 3112.193329][T28070] ? __filemap_get_folio+0x41a/0x5a0 [ 3112.198660][T28070] ? __switch_to+0x44d/0x9c0 [ 3112.203323][T28070] ? _raw_spin_unlock+0x26/0x40 [ 3112.208288][T28070] ? swap_cache_get_folio+0x6e/0x200 [ 3112.213562][T28070] do_swap_page+0x4a0/0x1670 [ 3112.218191][T28070] ? __rcu_read_lock+0x35/0x50 [ 3112.223023][T28070] ? pte_offset_map_nolock+0x124/0x1d0 [ 3112.228540][T28070] handle_mm_fault+0xa36/0x2dd0 [ 3112.233526][T28070] exc_page_fault+0x3ff/0x6c0 [ 3112.238206][T28070] asm_exc_page_fault+0x26/0x30 [ 3112.243311][T28070] RIP: 0033:0x7f6f320edae4 [ 3112.247779][T28070] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3112.267781][T28070] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3112.273918][T28070] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3112.281966][T28070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3112.290029][T28070] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3112.298006][T28070] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f7ca1 [ 3112.306105][T28070] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002f7960 [ 3112.314100][T28070] [ 3112.317270][T28070] memory: usage 307200kB, limit 307200kB, failcnt 83136 [ 3112.324254][T28070] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0 [ 3112.332201][T28070] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3112.339526][T28070] Memory cgroup stats for /syz3: [ 3112.339729][T28070] cache 0 [ 3112.347615][T28070] rss 8192 [ 3112.350648][T28070] shmem 0 [ 3112.353679][T28070] mapped_file 0 [ 3112.357262][T28070] dirty 0 [ 3112.360190][T28070] writeback 16384 [ 3112.363824][T28070] workingset_refault_anon 72088 [ 3112.368702][T28070] workingset_refault_file 64 [ 3112.373311][T28070] swap 319488 [ 3112.376609][T28070] swapcached 16384 [ 3112.380322][T28070] pgpgin 475448 [ 3112.383812][T28070] pgpgout 475444 [ 3112.387358][T28070] pgfault 899419 [ 3112.390894][T28070] pgmajfault 30345 [ 3112.394617][T28070] inactive_anon 0 [ 3112.398273][T28070] active_anon 0 [ 3112.401720][T28070] inactive_file 0 [ 3112.405431][T28070] active_file 0 [ 3112.408899][T28070] unevictable 0 [ 3112.412344][T28070] hierarchical_memory_limit 314572800 [ 3112.417804][T28070] hierarchical_memsw_limit 9223372036854771712 [ 3112.424032][T28070] total_cache 0 [ 3112.427552][T28070] total_rss 8192 [ 3112.431090][T28070] total_shmem 0 [ 3112.434532][T28070] total_mapped_file 0 [ 3112.438597][T28070] total_dirty 0 [ 3112.442066][T28070] total_writeback 16384 [ 3112.446220][T28070] total_workingset_refault_anon 72088 [ 3112.451641][T28070] total_workingset_refault_file 64 [ 3112.456761][T28070] total_swap 319488 [ 3112.460549][T28070] total_swapcached 16384 [ 3112.464780][T28070] total_pgpgin 475448 [ 3112.468763][T28070] total_pgpgout 475444 [ 3112.472908][T28070] total_pgfault 899419 [ 3112.477026][T28070] total_pgmajfault 30345 [ 3112.481253][T28070] total_inactive_anon 0 [ 3112.485438][T28070] total_active_anon 0 [ 3112.489447][T28070] total_inactive_file 0 [ 3112.493605][T28070] total_active_file 0 [ 3112.497623][T28070] total_unevictable 0 [ 3112.501635][T28070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28070,uid=0 [ 3112.517053][T28070] Memory cgroup out of memory: Killed process 28070 (syz-executor.3) total-vm:46428kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3112.534879][T28084] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3112.546223][T28084] CPU: 0 PID: 28084 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3112.556710][T28084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3112.566763][T28084] Call Trace: [ 3112.570075][T28084] [ 3112.573015][T28084] dump_stack_lvl+0xda/0x130 [ 3112.577613][T28084] dump_stack+0x15/0x20 [ 3112.581861][T28084] dump_header+0x82/0x2d0 [ 3112.586225][T28084] oom_kill_process+0x33a/0x4c0 [ 3112.591172][T28084] out_of_memory+0x9ca/0xbf0 [ 3112.596252][T28084] ? mem_cgroup_out_of_memory+0xc2/0x190 [ 3112.601922][T28084] mem_cgroup_out_of_memory+0x139/0x190 [ 3112.607470][T28084] try_charge_memcg+0x75c/0xd30 [ 3112.612333][T28084] ? __swap_duplicate+0x29b/0x2b0 [ 3112.617401][T28084] ? radix_tree_lookup+0xf9/0x150 [ 3112.622506][T28084] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3112.628771][T28084] __read_swap_cache_async+0x2f6/0x550 [ 3112.634223][T28084] swap_cluster_readahead+0x27c/0x4c0 [ 3112.639589][T28084] swapin_readahead+0xe9/0x7f0 [ 3112.644354][T28084] ? __filemap_get_folio+0x41a/0x5a0 [ 3112.649633][T28084] ? swap_cache_get_folio+0x6e/0x200 [ 3112.655004][T28084] do_swap_page+0x4a0/0x1670 [ 3112.659593][T28084] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3112.665010][T28084] ? __rcu_read_lock+0x35/0x50 [ 3112.669815][T28084] ? pte_offset_map_nolock+0x124/0x1d0 [ 3112.675342][T28084] handle_mm_fault+0xa36/0x2dd0 [ 3112.680198][T28084] exc_page_fault+0x3ff/0x6c0 [ 3112.684971][T28084] asm_exc_page_fault+0x26/0x30 [ 3112.689872][T28084] RIP: 0033:0x7f2cd3f1dae4 [ 3112.694400][T28084] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3112.714161][T28084] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010283 [ 3112.720220][T28084] RAX: 0000000000000000 RBX: 00007f2cd4084090 RCX: 0000000000000000 [ 3112.728497][T28084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556726788 [ 3112.736525][T28084] RBP: 00007f2cd4084980 R08: 0000000000000000 R09: 00007ffcf5b320b0 [ 3112.744599][T28084] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f7d67 [ 3112.752624][T28084] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 00000000002f7a26 [ 3112.760591][T28084] [ 3112.763791][T28084] memory: usage 307200kB, limit 307200kB, failcnt 158869 [ 3112.770937][T28084] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3112.778839][T28084] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3112.786153][T28084] Memory cgroup stats for /syz2: [ 3112.787038][T28084] cache 0 [ 3112.794890][T28084] rss 8192 [ 3112.797915][T28084] shmem 0 [ 3112.800903][T28084] mapped_file 0 [ 3112.804370][T28084] dirty 0 [ 3112.807349][T28084] writeback 0 [ 3112.810621][T28084] workingset_refault_anon 109630 [ 3112.815580][T28084] workingset_refault_file 41 [ 3112.820164][T28084] swap 229376 [ 3112.823452][T28084] swapcached 8192 [ 3112.827095][T28084] pgpgin 204722 [ 3112.830818][T28084] pgpgout 204720 [ 3112.834359][T28084] pgfault 413514 [ 3112.838006][T28084] pgmajfault 46157 [ 3112.841725][T28084] inactive_anon 8192 [ 3112.845657][T28084] active_anon 0 [ 3112.849169][T28084] inactive_file 0 [ 3112.852799][T28084] active_file 0 [ 3112.856343][T28084] unevictable 0 [ 3112.859804][T28084] hierarchical_memory_limit 314572800 [ 3112.865192][T28084] hierarchical_memsw_limit 9223372036854771712 [ 3112.871393][T28084] total_cache 0 [ 3112.874847][T28084] total_rss 8192 [ 3112.878399][T28084] total_shmem 0 [ 3112.881848][T28084] total_mapped_file 0 [ 3112.885887][T28084] total_dirty 0 [ 3112.889507][T28084] total_writeback 0 [ 3112.893419][T28084] total_workingset_refault_anon 109630 [ 3112.898903][T28084] total_workingset_refault_file 41 [ 3112.904012][T28084] total_swap 229376 [ 3112.907905][T28084] total_swapcached 8192 [ 3112.912053][T28084] total_pgpgin 204722 [ 3112.916079][T28084] total_pgpgout 204720 [ 3112.920185][T28084] total_pgfault 413514 [ 3112.924282][T28084] total_pgmajfault 46157 [ 3112.928580][T28084] total_inactive_anon 8192 [ 3112.933043][T28084] total_active_anon 0 00:20:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xd8]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) [ 3112.937035][T28084] total_inactive_file 0 [ 3112.941179][T28084] total_active_file 0 [ 3112.945172][T28084] total_unevictable 0 [ 3112.949148][T28084] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28084,uid=0 [ 3112.964436][T28084] Memory cgroup out of memory: Killed process 28084 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x1, {{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0xa, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e24, @multicast1}}]}, 0x590) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:44 executing program 1: mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:20:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x12}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:44 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000f00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x1, {{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0xa, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e24, @multicast1}}]}, 0x590) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x1, {{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0xa, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e24, @multicast1}}]}, 0x590) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) [ 3113.163509][T28115] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x1, {{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0xa, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e24, @multicast1}}]}, 0x590) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x1, {{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0xa, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e24, @multicast1}}]}, 0x590) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:44 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000001000000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:44 executing program 1: mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:20:44 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:44 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000001100000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3113.323894][T28131] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3113.402041][T28139] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3113.687630][T28106] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3113.701213][T28106] CPU: 1 PID: 28106 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3113.711638][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3113.721698][T28106] Call Trace: [ 3113.724975][T28106] [ 3113.727904][T28106] dump_stack_lvl+0xda/0x130 [ 3113.732515][T28106] dump_stack+0x15/0x20 [ 3113.736677][T28106] dump_header+0x82/0x2d0 [ 3113.741055][T28106] oom_kill_process+0x33a/0x4c0 [ 3113.746078][T28106] out_of_memory+0x9ca/0xbf0 [ 3113.750765][T28106] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3113.756909][T28106] mem_cgroup_out_of_memory+0x139/0x190 [ 3113.762596][T28106] try_charge_memcg+0x75c/0xd30 [ 3113.768229][T28106] obj_cgroup_charge_pages+0xab/0x130 [ 3113.773715][T28106] __memcg_kmem_charge_page+0x9c/0x170 [ 3113.779176][T28106] __alloc_pages+0x1bb/0x340 [ 3113.783831][T28106] alloc_pages_mpol+0xb1/0x1d0 [ 3113.788697][T28106] alloc_pages+0xe0/0x100 [ 3113.793156][T28106] __vmalloc_node_range+0x6d2/0xea0 [ 3113.798366][T28106] kvmalloc_node+0x121/0x160 [ 3113.803054][T28106] ? xt_alloc_table_info+0x3d/0x80 [ 3113.808255][T28106] xt_alloc_table_info+0x3d/0x80 [ 3113.813215][T28106] do_arpt_set_ctl+0x634/0x13b0 [ 3113.818135][T28106] ? __futex_wait+0x227/0x280 [ 3113.822864][T28106] ? __futex_wake_mark+0x70/0x70 [ 3113.827811][T28106] ? tcp_release_cb+0xfe/0x370 [ 3113.832605][T28106] ? _raw_spin_unlock_bh+0x36/0x40 [ 3113.837844][T28106] nf_setsockopt+0x18d/0x1b0 [ 3113.842452][T28106] ip_setsockopt+0xe6/0x100 [ 3113.847016][T28106] tcp_setsockopt+0x90/0xa0 [ 3113.851810][T28106] sock_common_setsockopt+0x61/0x70 [ 3113.857083][T28106] ? sock_common_recvmsg+0xe0/0xe0 [ 3113.862312][T28106] __sys_setsockopt+0x1d4/0x240 [ 3113.867258][T28106] __x64_sys_setsockopt+0x66/0x80 [ 3113.872446][T28106] do_syscall_64+0x44/0x110 [ 3113.877010][T28106] ? syscall_exit_to_user_mode+0x38/0x140 [ 3113.882745][T28106] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3113.888824][T28106] RIP: 0033:0x7f6f32133ae9 [ 3113.893452][T28106] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3113.913357][T28106] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3113.921993][T28106] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3113.930105][T28106] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3113.938302][T28106] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3113.946403][T28106] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3113.954504][T28106] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3113.962491][T28106] [ 3113.965656][T28106] memory: usage 307200kB, limit 307200kB, failcnt 83385 [ 3113.972682][T28106] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0 [ 3113.980604][T28106] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 3113.987909][T28106] Memory cgroup stats for /syz3: [ 3113.996627][T28106] cache 0 [ 3114.004736][T28106] rss 0 [ 3114.007565][T28106] shmem 0 [ 3114.010498][T28106] mapped_file 0 [ 3114.014054][T28106] dirty 0 [ 3114.017011][T28106] writeback 0 [ 3114.020391][T28106] workingset_refault_anon 72137 [ 3114.025531][T28106] workingset_refault_file 64 [ 3114.030153][T28106] swap 331776 [ 3114.033433][T28106] swapcached 4096 [ 3114.037079][T28106] pgpgin 475522 [ 3114.040533][T28106] pgpgout 475521 [ 3114.044070][T28106] pgfault 899551 [ 3114.047695][T28106] pgmajfault 30369 [ 3114.051558][T28106] inactive_anon 4096 [ 3114.055576][T28106] active_anon 0 [ 3114.059114][T28106] inactive_file 0 [ 3114.062888][T28106] active_file 0 [ 3114.066496][T28106] unevictable 0 [ 3114.070041][T28106] hierarchical_memory_limit 314572800 [ 3114.075427][T28106] hierarchical_memsw_limit 9223372036854771712 [ 3114.081571][T28106] total_cache 0 [ 3114.085072][T28106] total_rss 0 [ 3114.088385][T28106] total_shmem 0 [ 3114.091869][T28106] total_mapped_file 0 [ 3114.095889][T28106] total_dirty 0 [ 3114.099344][T28106] total_writeback 0 [ 3114.103140][T28106] total_workingset_refault_anon 72137 [ 3114.108552][T28106] total_workingset_refault_file 64 [ 3114.113717][T28106] total_swap 331776 [ 3114.117649][T28106] total_swapcached 4096 [ 3114.121795][T28106] total_pgpgin 475522 [ 3114.125806][T28106] total_pgpgout 475521 [ 3114.129870][T28106] total_pgfault 899551 [ 3114.133930][T28106] total_pgmajfault 30369 [ 3114.138210][T28106] total_inactive_anon 4096 [ 3114.142633][T28106] total_active_anon 0 [ 3114.146674][T28106] total_inactive_file 0 [ 3114.150834][T28106] total_active_file 0 [ 3114.154805][T28106] total_unevictable 0 [ 3114.158872][T28106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28105,uid=0 [ 3114.174223][T28106] Memory cgroup out of memory: Killed process 28105 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:45 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:45 executing program 1: mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:20:45 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000001200000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x16}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xfe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:45 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000001400000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:45 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) [ 3114.463591][T28149] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:45 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000001500000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:45 executing program 1: mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 3114.509334][T28155] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:45 executing program 0: r0 = syz_io_uring_setup(0x4cda, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x8, 0xfffd, 0x0, 0xfff}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:45 executing program 0: r0 = syz_io_uring_setup(0x4cda, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}) (async) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x8, 0xfffd, 0x0, 0xfff}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:45 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000002500000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3114.581964][T28169] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:45 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000b00)={0x1c, 0x1c}, 0x12) 00:20:45 executing program 0: r0 = syz_io_uring_setup(0x4cda, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}) (async) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x8, 0xfffd, 0x0, 0xfff}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3114.694823][T28178] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x1b}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:46 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000000), &(0x7f0000000040)=0x18) 00:20:46 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000003c00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:46 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x25, 0x1, r5, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000280)=""/86, 0x56}], 0x4}, 0x0, 0x2, 0x1, {0x2, r6}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:46 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000004800000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:46 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000004c00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) 00:20:46 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x25, 0x1, r5, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000280)=""/86, 0x56}], 0x4}, 0x0, 0x2, 0x1, {0x2, r6}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:46 executing program 1: syz_clone3(&(0x7f0000000580)={0x90000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x1}, 0x58) 00:20:47 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000006000000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3116.179259][T28188] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3116.190620][T28188] CPU: 0 PID: 28188 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3116.201070][T28188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3116.211156][T28188] Call Trace: [ 3116.214438][T28188] [ 3116.217365][T28188] dump_stack_lvl+0xda/0x130 [ 3116.222028][T28188] dump_stack+0x15/0x20 [ 3116.226241][T28188] dump_header+0x82/0x2d0 [ 3116.230649][T28188] oom_kill_process+0x33a/0x4c0 [ 3116.235505][T28188] out_of_memory+0x9ca/0xbf0 [ 3116.240193][T28188] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3116.246280][T28188] mem_cgroup_out_of_memory+0x139/0x190 [ 3116.251885][T28188] try_charge_memcg+0x75c/0xd30 [ 3116.256893][T28188] ? __swap_duplicate+0x29b/0x2b0 [ 3116.261921][T28188] ? radix_tree_lookup+0xf9/0x150 [ 3116.267070][T28188] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3116.273159][T28188] __read_swap_cache_async+0x2f6/0x550 [ 3116.278662][T28188] swap_cluster_readahead+0x27c/0x4c0 [ 3116.284099][T28188] swapin_readahead+0xe9/0x7f0 [ 3116.288882][T28188] ? __filemap_get_folio+0x41a/0x5a0 [ 3116.294302][T28188] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3116.299940][T28188] ? swap_cache_get_folio+0x6e/0x200 [ 3116.305382][T28188] do_swap_page+0x4a0/0x1670 [ 3116.309975][T28188] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3116.315265][T28188] ? __rcu_read_lock+0x35/0x50 [ 3116.320088][T28188] ? pte_offset_map_nolock+0x124/0x1d0 [ 3116.325555][T28188] handle_mm_fault+0xa36/0x2dd0 [ 3116.330411][T28188] exc_page_fault+0x3ff/0x6c0 [ 3116.335186][T28188] asm_exc_page_fault+0x26/0x30 [ 3116.340160][T28188] RIP: 0033:0x7f0beb361ae4 [ 3116.344667][T28188] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3116.364354][T28188] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010206 [ 3116.370546][T28188] RAX: 0000000000000000 RBX: 00007f0beb4c6f80 RCX: 0000000000000000 [ 3116.378575][T28188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555fc5788 [ 3116.386682][T28188] RBP: 00007f0beb4c8980 R08: 0000000000000000 R09: 00007ffe135670b0 [ 3116.394665][T28188] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f8d27 [ 3116.402728][T28188] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000002f89e6 [ 3116.410749][T28188] [ 3116.413911][T28188] memory: usage 307200kB, limit 307200kB, failcnt 168307 [ 3116.420939][T28188] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 3116.428846][T28188] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 3116.436136][T28188] Memory cgroup stats for /syz5: [ 3116.438624][T28188] cache 0 [ 3116.446521][T28188] rss 20480 [ 3116.449669][T28188] shmem 0 [ 3116.452598][T28188] mapped_file 0 [ 3116.456081][T28188] dirty 0 [ 3116.459036][T28188] writeback 20480 [ 3116.462697][T28188] workingset_refault_anon 109693 [ 3116.467648][T28188] workingset_refault_file 28 [ 3116.472224][T28188] swap 229376 [ 3116.475546][T28188] swapcached 28672 [ 3116.479345][T28188] pgpgin 187779 [ 3116.482852][T28188] pgpgout 187772 [ 3116.486415][T28188] pgfault 380379 [ 3116.489965][T28188] pgmajfault 48842 [ 3116.493704][T28188] inactive_anon 0 [ 3116.497374][T28188] active_anon 0 [ 3116.500826][T28188] inactive_file 0 [ 3116.504444][T28188] active_file 0 [ 3116.507954][T28188] unevictable 0 [ 3116.511409][T28188] hierarchical_memory_limit 314572800 [ 3116.516873][T28188] hierarchical_memsw_limit 9223372036854771712 [ 3116.523027][T28188] total_cache 0 [ 3116.526509][T28188] total_rss 20480 [ 3116.530198][T28188] total_shmem 0 [ 3116.533660][T28188] total_mapped_file 0 [ 3116.537708][T28188] total_dirty 0 [ 3116.541157][T28188] total_writeback 20480 [ 3116.545347][T28188] total_workingset_refault_anon 109693 [ 3116.550806][T28188] total_workingset_refault_file 28 [ 3116.556018][T28188] total_swap 229376 [ 3116.559912][T28188] total_swapcached 28672 [ 3116.564150][T28188] total_pgpgin 187779 [ 3116.568142][T28188] total_pgpgout 187772 [ 3116.572209][T28188] total_pgfault 380379 [ 3116.576289][T28188] total_pgmajfault 48842 [ 3116.580590][T28188] total_inactive_anon 0 [ 3116.584729][T28188] total_active_anon 0 [ 3116.588727][T28188] total_inactive_file 0 [ 3116.592966][T28188] total_active_file 0 [ 3116.596948][T28188] total_unevictable 0 [ 3116.600919][T28188] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28188,uid=0 [ 3116.616366][T28188] Memory cgroup out of memory: Killed process 28188 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:47 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (rerun: 32) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 64) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r1, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x25, 0x1, r5, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000280)=""/86, 0x56}], 0x4}, 0x0, 0x2, 0x1, {0x2, r6}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:47 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000480)='\x00', &(0x7f00000005c0)='./file0\x00', 0xffffffffffffffff) 00:20:47 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000006800000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x1c}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000016c0)=0x14) 00:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:48 executing program 1: fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) [ 3116.852389][T28226] __nla_validate_parse: 4 callbacks suppressed [ 3116.852401][T28226] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x1d, 0x0, &(0x7f00000003c0)) 00:20:48 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000006c00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:48 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L'], 0x34}}, 0x0) 00:20:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x90) [ 3116.977362][ T27] audit: type=1400 audit(1701217248.111:480): avc: denied { getopt } for pid=28240 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3116.982161][T28241] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x700}}) 00:20:48 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000007400000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:48 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12, 0x11, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x200) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0xa0}) r6 = memfd_secret(0x80000) io_uring_enter(r6, 0x5c98, 0x70f6, 0x0, &(0x7f0000000280)={[0x7fffffff]}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x89, 0x6}, 0x8) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3117.269405][T28251] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:48 executing program 1: io_setup(0x3ff, &(0x7f0000000100)=0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001980)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 00:20:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:48 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000007a00000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:48 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12, 0x11, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x200) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0xa0}) r6 = memfd_secret(0x80000) io_uring_enter(r6, 0x5c98, 0x70f6, 0x0, &(0x7f0000000280)={[0x7fffffff]}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x89, 0x6}, 0x8) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12, 0x11, r0, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x200) (async) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0xa0}) (async) memfd_secret(0x80000) (async) io_uring_enter(r6, 0x5c98, 0x70f6, 0x0, &(0x7f0000000280)={[0x7fffffff]}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x89, 0x6}, 0x8) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x22}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:48 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000003000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:49 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f00000000c0)) 00:20:49 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12, 0x11, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x200) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x200) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0xa0}) r6 = memfd_secret(0x80000) io_uring_enter(r6, 0x5c98, 0x70f6, 0x0, &(0x7f0000000280)={[0x7fffffff]}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x89, 0x6}, 0x8) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3117.813810][T28258] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:49 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 00:20:49 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000005000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:49 executing program 1: pselect6(0x40, &(0x7f0000000740), &(0x7f0000000780)={0x7}, &(0x7f00000007c0), 0x0, 0x0) [ 3117.876734][T28269] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:49 executing program 1: io_setup(0x3ff, &(0x7f0000000100)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) [ 3118.027373][T28287] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3118.695454][T28259] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3118.706945][T28259] CPU: 0 PID: 28259 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3118.717412][T28259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3118.727578][T28259] Call Trace: [ 3118.730849][T28259] [ 3118.733822][T28259] dump_stack_lvl+0xda/0x130 [ 3118.738462][T28259] dump_stack+0x15/0x20 [ 3118.742669][T28259] dump_header+0x82/0x2d0 [ 3118.747012][T28259] oom_kill_process+0x33a/0x4c0 [ 3118.751908][T28259] out_of_memory+0x9ca/0xbf0 [ 3118.756500][T28259] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3118.762634][T28259] mem_cgroup_out_of_memory+0x139/0x190 [ 3118.768193][T28259] try_charge_memcg+0x75c/0xd30 [ 3118.773061][T28259] ? __swap_duplicate+0x29b/0x2b0 [ 3118.778082][T28259] ? radix_tree_lookup+0xf9/0x150 [ 3118.783241][T28259] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3118.789306][T28259] __read_swap_cache_async+0x2f6/0x550 [ 3118.794761][T28259] swap_cluster_readahead+0x27c/0x4c0 [ 3118.800141][T28259] swapin_readahead+0xe9/0x7f0 [ 3118.804987][T28259] ? __filemap_get_folio+0x41a/0x5a0 [ 3118.810422][T28259] ? swap_cache_get_folio+0x6e/0x200 [ 3118.815698][T28259] do_swap_page+0x4a0/0x1670 [ 3118.820339][T28259] ? asm_exc_page_fault+0x26/0x30 [ 3118.825362][T28259] ? __rcu_read_lock+0x35/0x50 [ 3118.830118][T28259] ? pte_offset_map_nolock+0x124/0x1d0 [ 3118.835625][T28259] handle_mm_fault+0xa36/0x2dd0 [ 3118.840486][T28259] exc_page_fault+0x3ff/0x6c0 [ 3118.845169][T28259] asm_exc_page_fault+0x26/0x30 [ 3118.850054][T28259] RIP: 0033:0x7f6f320edae4 [ 3118.854477][T28259] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3118.874130][T28259] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3118.880227][T28259] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3118.888391][T28259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3118.896352][T28259] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3118.904318][T28259] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f963b [ 3118.912276][T28259] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002f92fa [ 3118.920326][T28259] [ 3118.923404][T28259] memory: usage 307200kB, limit 307200kB, failcnt 84204 [ 3118.930461][T28259] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0 [ 3118.938564][T28259] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 3118.945863][T28259] Memory cgroup stats for /syz3: [ 3118.975292][T28259] cache 0 [ 3118.983199][T28259] rss 0 [ 3118.985988][T28259] shmem 0 [ 3118.988912][T28259] mapped_file 0 [ 3118.992352][T28259] dirty 0 [ 3118.995302][T28259] writeback 0 [ 3118.998593][T28259] workingset_refault_anon 72357 [ 3119.003430][T28259] workingset_refault_file 64 [ 3119.008024][T28259] swap 307200 [ 3119.011389][T28259] swapcached 0 [ 3119.014744][T28259] pgpgin 475838 [ 3119.018216][T28259] pgpgout 475838 [ 3119.021751][T28259] pgfault 900146 [ 3119.025312][T28259] pgmajfault 30468 [ 3119.029028][T28259] inactive_anon 0 [ 3119.032701][T28259] active_anon 0 [ 3119.036196][T28259] inactive_file 0 [ 3119.040012][T28259] active_file 0 [ 3119.043559][T28259] unevictable 0 [ 3119.047055][T28259] hierarchical_memory_limit 314572800 [ 3119.052422][T28259] hierarchical_memsw_limit 9223372036854771712 [ 3119.058708][T28259] total_cache 0 [ 3119.062216][T28259] total_rss 0 [ 3119.065511][T28259] total_shmem 0 [ 3119.068959][T28259] total_mapped_file 0 [ 3119.072951][T28259] total_dirty 0 [ 3119.076427][T28259] total_writeback 0 [ 3119.080269][T28259] total_workingset_refault_anon 72357 [ 3119.085653][T28259] total_workingset_refault_file 64 [ 3119.090756][T28259] total_swap 307200 [ 3119.094558][T28259] total_swapcached 0 [ 3119.098485][T28259] total_pgpgin 475838 [ 3119.102452][T28259] total_pgpgout 475838 [ 3119.106530][T28259] total_pgfault 900146 [ 3119.110623][T28259] total_pgmajfault 30468 [ 3119.114858][T28259] total_inactive_anon 0 [ 3119.119050][T28259] total_active_anon 0 [ 3119.123017][T28259] total_inactive_file 0 [ 3119.127280][T28259] total_active_file 0 [ 3119.131267][T28259] total_unevictable 0 [ 3119.135321][T28259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28259,uid=0 [ 3119.150625][T28259] Memory cgroup out of memory: Killed process 28259 (syz-executor.3) total-vm:46428kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:50 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000006000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x29}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x3ff, &(0x7f0000000100)=0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r1, 0x2, &(0x7f0000001980)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000001280)={0x0, 0x0, 0xeffd, 0x0, 0x0, r0, 0x0}]) 00:20:50 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 00:20:50 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 00:20:50 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9bf}, [@call={0x85, 0x0, 0x0, 0x6b}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xc3, &(0x7f0000000380)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x10, 0x0, 0x3}, 0x10, 0x66d5, 0xffffffffffffffff, 0x9, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x4, 0x3, 0x2}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x4, 0x1, 0xb, 0x9}, {0x3, 0x2, 0x5, 0x5}, {0x4, 0x1, 0xd, 0x6}, {0x3, 0x5, 0x5, 0x7}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x9}, 0x90) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r0, r3, r5, r6, r0, r0, r7, r8, r9, r3], 0xa) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3119.394273][T28305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:50 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000007000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:50 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:20:50 executing program 1: io_setup(0x3, &(0x7f00000000c0)=0x0) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 00:20:50 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9bf}, [@call={0x85, 0x0, 0x0, 0x6b}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xc3, &(0x7f0000000380)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x10, 0x0, 0x3}, 0x10, 0x66d5, 0xffffffffffffffff, 0x9, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x4, 0x3, 0x2}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x4, 0x1, 0xb, 0x9}, {0x3, 0x2, 0x5, 0x5}, {0x4, 0x1, 0xd, 0x6}, {0x3, 0x5, 0x5, 0x7}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x9}, 0x90) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r0, r3, r5, r6, r0, r0, r7, r8, r9, r3], 0xa) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x0, {0x0, r4}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9bf}, [@call={0x85, 0x0, 0x0, 0x6b}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xc3, &(0x7f0000000380)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x10, 0x0, 0x3}, 0x10, 0x66d5, 0xffffffffffffffff, 0x9, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x4, 0x3, 0x2}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x4, 0x1, 0xb, 0x9}, {0x3, 0x2, 0x5, 0x5}, {0x4, 0x1, 0xd, 0x6}, {0x3, 0x5, 0x5, 0x7}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x9}, 0x90) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r0, r3, r5, r6, r0, r0, r7, r8, r9, r3], 0xa) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:50 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000009000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3119.527309][T28318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3119.580915][T28324] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3120.094999][T28301] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3120.106375][T28301] CPU: 0 PID: 28301 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3120.116866][T28301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3120.127056][T28301] Call Trace: [ 3120.130330][T28301] [ 3120.133261][T28301] dump_stack_lvl+0xda/0x130 [ 3120.137873][T28301] dump_stack+0x15/0x20 [ 3120.142107][T28301] dump_header+0x82/0x2d0 [ 3120.146524][T28301] oom_kill_process+0x33a/0x4c0 [ 3120.151453][T28301] out_of_memory+0x9ca/0xbf0 [ 3120.156059][T28301] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3120.162160][T28301] mem_cgroup_out_of_memory+0x139/0x190 [ 3120.167729][T28301] try_charge_memcg+0x75c/0xd30 [ 3120.172590][T28301] ? __swap_duplicate+0x29b/0x2b0 [ 3120.177720][T28301] ? radix_tree_lookup+0xf9/0x150 [ 3120.182762][T28301] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3120.188838][T28301] __read_swap_cache_async+0x2f6/0x550 [ 3120.194334][T28301] swap_cluster_readahead+0x27c/0x4c0 [ 3120.199722][T28301] swapin_readahead+0xe9/0x7f0 [ 3120.204560][T28301] ? __filemap_get_folio+0x41a/0x5a0 [ 3120.209869][T28301] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3120.215559][T28301] ? swap_cache_get_folio+0x6e/0x200 [ 3120.220852][T28301] do_swap_page+0x4a0/0x1670 [ 3120.225445][T28301] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3120.230748][T28301] ? __rcu_read_lock+0x35/0x50 [ 3120.235608][T28301] ? pte_offset_map_nolock+0x124/0x1d0 [ 3120.241157][T28301] handle_mm_fault+0xa36/0x2dd0 [ 3120.246015][T28301] exc_page_fault+0x3ff/0x6c0 [ 3120.250792][T28301] asm_exc_page_fault+0x26/0x30 [ 3120.255735][T28301] RIP: 0033:0x7f2cd3f1dae4 [ 3120.260143][T28301] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3120.279890][T28301] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010206 [ 3120.286001][T28301] RAX: 0000000000000000 RBX: 00007f2cd4082f80 RCX: 0000000000000000 [ 3120.294029][T28301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556726788 [ 3120.302029][T28301] RBP: 00007f2cd4084980 R08: 0000000000000000 R09: 00007ffcf5b320b0 [ 3120.309991][T28301] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002f9c40 [ 3120.318018][T28301] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 00000000002f98ff [ 3120.326039][T28301] [ 3120.329129][T28301] memory: usage 307200kB, limit 307200kB, failcnt 159327 [ 3120.336163][T28301] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3120.344134][T28301] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3120.351420][T28301] Memory cgroup stats for /syz2: [ 3120.389425][T28301] cache 0 [ 3120.397373][T28301] rss 0 [ 3120.400130][T28301] shmem 0 [ 3120.403056][T28301] mapped_file 0 [ 3120.406522][T28301] dirty 0 [ 3120.409444][T28301] writeback 0 [ 3120.412719][T28301] workingset_refault_anon 110040 [ 3120.417674][T28301] workingset_refault_file 41 [ 3120.422258][T28301] swap 229376 [ 3120.425736][T28301] swapcached 8192 [ 3120.429355][T28301] pgpgin 205276 [ 3120.432799][T28301] pgpgout 205274 00:20:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:51 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000000a000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:51 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x0, {0x0, r4}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9bf}, [@call={0x85, 0x0, 0x0, 0x6b}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xc3, &(0x7f0000000380)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x10, 0x0, 0x3}, 0x10, 0x66d5, 0xffffffffffffffff, 0x9, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x4, 0x3, 0x2}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x4, 0xc, 0x8}, {0x4, 0x1, 0xb, 0x9}, {0x3, 0x2, 0x5, 0x5}, {0x4, 0x1, 0xd, 0x6}, {0x3, 0x5, 0x5, 0x7}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x9}, 0x90) (async) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) (async) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) (async) r9 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r0, r3, r5, r6, r0, r0, r7, r8, r9, r3], 0xa) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:51 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) [ 3120.436408][T28301] pgfault 414509 [ 3120.440008][T28301] pgmajfault 46336 [ 3120.443715][T28301] inactive_anon 8192 [ 3120.447635][T28301] active_anon 0 [ 3120.451172][T28301] inactive_file 0 [ 3120.454796][T28301] active_file 0 [ 3120.458276][T28301] unevictable 0 [ 3120.461781][T28301] hierarchical_memory_limit 314572800 [ 3120.467378][T28301] hierarchical_memsw_limit 9223372036854771712 [ 3120.473726][T28301] total_cache 0 [ 3120.477249][T28301] total_rss 0 [ 3120.479867][T28341] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3120.480603][T28301] total_shmem 0 [ 3120.493514][T28301] total_mapped_file 0 [ 3120.497534][T28301] total_dirty 0 [ 3120.500990][T28301] total_writeback 0 [ 3120.504859][T28301] total_workingset_refault_anon 110040 [ 3120.510356][T28301] total_workingset_refault_file 41 [ 3120.515487][T28301] total_swap 229376 [ 3120.519303][T28301] total_swapcached 8192 [ 3120.523539][T28301] total_pgpgin 205276 [ 3120.527527][T28301] total_pgpgout 205274 [ 3120.531586][T28301] total_pgfault 414509 [ 3120.535674][T28301] total_pgmajfault 46336 [ 3120.539992][T28301] total_inactive_anon 8192 [ 3120.544387][T28301] total_active_anon 0 [ 3120.548557][T28301] total_inactive_file 0 [ 3120.552778][T28301] total_active_file 0 [ 3120.556771][T28301] total_unevictable 0 [ 3120.560764][T28301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28301,uid=0 [ 3120.576079][T28301] Memory cgroup out of memory: Killed process 28301 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:51 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000000b000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x3e}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:51 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:51 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000000c000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:52 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:52 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000000d000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:52 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000000e000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3121.441981][T28342] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3121.453321][T28342] CPU: 0 PID: 28342 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3121.463866][T28342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3121.473920][T28342] Call Trace: [ 3121.477270][T28342] [ 3121.480197][T28342] dump_stack_lvl+0xda/0x130 [ 3121.484915][T28342] dump_stack+0x15/0x20 [ 3121.489136][T28342] dump_header+0x82/0x2d0 [ 3121.493605][T28342] oom_kill_process+0x33a/0x4c0 [ 3121.498490][T28342] out_of_memory+0x9ca/0xbf0 [ 3121.503098][T28342] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3121.509219][T28342] mem_cgroup_out_of_memory+0x139/0x190 [ 3121.514793][T28342] try_charge_memcg+0x75c/0xd30 [ 3121.519668][T28342] ? __swap_duplicate+0x29b/0x2b0 [ 3121.524764][T28342] ? radix_tree_lookup+0xf9/0x150 [ 3121.529803][T28342] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3121.535946][T28342] __read_swap_cache_async+0x2f6/0x550 [ 3121.541499][T28342] swap_cluster_readahead+0x27c/0x4c0 [ 3121.546915][T28342] swapin_readahead+0xe9/0x7f0 [ 3121.551733][T28342] ? __filemap_get_folio+0x41a/0x5a0 [ 3121.557038][T28342] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3121.562810][T28342] ? swap_cache_get_folio+0x6e/0x200 [ 3121.568201][T28342] do_swap_page+0x4a0/0x1670 [ 3121.572842][T28342] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3121.578133][T28342] ? __rcu_read_lock+0x35/0x50 [ 3121.582971][T28342] ? pte_offset_map_nolock+0x124/0x1d0 [ 3121.588477][T28342] handle_mm_fault+0xa36/0x2dd0 [ 3121.593338][T28342] exc_page_fault+0x3ff/0x6c0 [ 3121.598075][T28342] asm_exc_page_fault+0x26/0x30 [ 3121.602933][T28342] RIP: 0033:0x7f6f320edae4 [ 3121.607352][T28342] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3121.627057][T28342] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3121.633144][T28342] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3121.641145][T28342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3121.649201][T28342] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3121.657236][T28342] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002fa149 [ 3121.665212][T28342] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002f9e08 [ 3121.673381][T28342] [ 3121.676495][T28342] memory: usage 307200kB, limit 307200kB, failcnt 84605 [ 3121.683510][T28342] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3121.691535][T28342] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3121.698828][T28342] Memory cgroup stats for /syz3: [ 3121.699016][T28342] cache 0 [ 3121.706945][T28342] rss 8192 [ 3121.709958][T28342] shmem 0 [ 3121.712890][T28342] mapped_file 0 [ 3121.716425][T28342] dirty 0 [ 3121.719422][T28342] writeback 8192 [ 3121.723039][T28342] workingset_refault_anon 72425 [ 3121.727901][T28342] workingset_refault_file 64 [ 3121.732491][T28342] swap 299008 [ 3121.735871][T28342] swapcached 8192 [ 3121.739498][T28342] pgpgin 475954 [ 3121.742950][T28342] pgpgout 475952 [ 3121.746548][T28342] pgfault 900438 [ 3121.750091][T28342] pgmajfault 30502 [ 3121.753802][T28342] inactive_anon 0 [ 3121.757454][T28342] active_anon 0 [ 3121.760906][T28342] inactive_file 0 [ 3121.764580][T28342] active_file 0 [ 3121.768142][T28342] unevictable 0 [ 3121.771643][T28342] hierarchical_memory_limit 314572800 [ 3121.777037][T28342] hierarchical_memsw_limit 9223372036854771712 [ 3121.783177][T28342] total_cache 0 [ 3121.786675][T28342] total_rss 8192 [ 3121.790249][T28342] total_shmem 0 [ 3121.793699][T28342] total_mapped_file 0 [ 3121.797696][T28342] total_dirty 0 [ 3121.801157][T28342] total_writeback 8192 [ 3121.805230][T28342] total_workingset_refault_anon 72425 [ 3121.810657][T28342] total_workingset_refault_file 64 [ 3121.815780][T28342] total_swap 299008 [ 3121.819589][T28342] total_swapcached 8192 [ 3121.823749][T28342] total_pgpgin 475954 [ 3121.827832][T28342] total_pgpgout 475952 [ 3121.831969][T28342] total_pgfault 900438 [ 3121.836123][T28342] total_pgmajfault 30502 [ 3121.840532][T28342] total_inactive_anon 0 [ 3121.844737][T28342] total_active_anon 0 [ 3121.848774][T28342] total_inactive_file 0 [ 3121.852979][T28342] total_active_file 0 [ 3121.857049][T28342] total_unevictable 0 [ 3121.861040][T28342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28342,uid=0 [ 3121.876419][T28342] Memory cgroup out of memory: Killed process 28342 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3121.894910][T28352] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3121.906313][T28352] CPU: 1 PID: 28352 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3121.916845][T28352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3121.926902][T28352] Call Trace: [ 3121.930201][T28352] [ 3121.933148][T28352] dump_stack_lvl+0xda/0x130 [ 3121.938141][T28352] dump_stack+0x15/0x20 [ 3121.942305][T28352] dump_header+0x82/0x2d0 [ 3121.946669][T28352] oom_kill_process+0x33a/0x4c0 [ 3121.951601][T28352] out_of_memory+0x9ca/0xbf0 [ 3121.956268][T28352] mem_cgroup_out_of_memory+0x139/0x190 [ 3121.961849][T28352] try_charge_memcg+0x75c/0xd30 [ 3121.966887][T28352] ? __swap_duplicate+0x29b/0x2b0 [ 3121.971983][T28352] ? radix_tree_lookup+0xf9/0x150 [ 3121.977019][T28352] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3121.983139][T28352] __read_swap_cache_async+0x2f6/0x550 [ 3121.988585][T28352] swap_cluster_readahead+0x27c/0x4c0 [ 3121.993997][T28352] swapin_readahead+0xe9/0x7f0 [ 3121.998932][T28352] ? __filemap_get_folio+0x41a/0x5a0 [ 3122.004206][T28352] ? __switch_to+0x44d/0x9c0 [ 3122.008784][T28352] ? _raw_spin_unlock+0x26/0x40 [ 3122.013677][T28352] ? swap_cache_get_folio+0x6e/0x200 [ 3122.019008][T28352] do_swap_page+0x4a0/0x1670 [ 3122.023597][T28352] ? __rcu_read_lock+0x35/0x50 [ 3122.028374][T28352] ? pte_offset_map_nolock+0x124/0x1d0 [ 3122.033875][T28352] handle_mm_fault+0xa36/0x2dd0 [ 3122.038747][T28352] exc_page_fault+0x3ff/0x6c0 [ 3122.043433][T28352] asm_exc_page_fault+0x26/0x30 [ 3122.048344][T28352] RIP: 0033:0x7f2cd3f1dc6b [ 3122.052827][T28352] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d 9e e4 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 3122.072421][T28352] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010202 [ 3122.078494][T28352] RAX: 0000000000000001 RBX: 00007f2cd4082f80 RCX: 00000000002f9f68 [ 3122.086489][T28352] RDX: 00000000000002d3 RSI: 00007ffcf5b11370 RDI: 00007f2cd4082f80 [ 3122.094481][T28352] RBP: 00007f2cd4084980 R08: 0000000000000010 R09: 00007ffcf5b320b0 [ 3122.102449][T28352] R10: 00007ffcf5b32080 R11: 00000000000921c0 R12: 00000000002fa23a [ 3122.110423][T28352] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 00000000002f9ef9 [ 3122.118492][T28352] [ 3122.121651][T28352] memory: usage 307200kB, limit 307200kB, failcnt 168594 [ 3122.128774][T28352] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 3122.136709][T28352] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3122.143983][T28352] Memory cgroup stats for /syz5: [ 3122.144183][T28352] cache 0 [ 3122.152225][T28352] rss 12288 [ 3122.155372][T28352] shmem 0 [ 3122.158302][T28352] mapped_file 0 [ 3122.161752][T28352] dirty 0 [ 3122.164689][T28352] writeback 12288 [ 3122.168397][T28352] workingset_refault_anon 109881 [ 3122.173325][T28352] workingset_refault_file 28 [ 3122.177923][T28352] swap 253952 [ 3122.181225][T28352] swapcached 20480 [ 3122.184967][T28352] pgpgin 188064 [ 3122.188416][T28352] pgpgout 188059 [ 3122.191963][T28352] pgfault 381010 [ 3122.195536][T28352] pgmajfault 48935 [ 3122.199245][T28352] inactive_anon 0 [ 3122.202930][T28352] active_anon 0 [ 3122.206484][T28352] inactive_file 0 [ 3122.210107][T28352] active_file 0 [ 3122.213602][T28352] unevictable 0 [ 3122.217123][T28352] hierarchical_memory_limit 314572800 [ 3122.222557][T28352] hierarchical_memsw_limit 9223372036854771712 [ 3122.228724][T28352] total_cache 0 [ 3122.232236][T28352] total_rss 12288 [ 3122.235896][T28352] total_shmem 0 [ 3122.239345][T28352] total_mapped_file 0 [ 3122.243333][T28352] total_dirty 0 [ 3122.246858][T28352] total_writeback 12288 [ 3122.251005][T28352] total_workingset_refault_anon 109881 [ 3122.256489][T28352] total_workingset_refault_file 28 [ 3122.261686][T28352] total_swap 253952 [ 3122.265520][T28352] total_swapcached 20480 [ 3122.269787][T28352] total_pgpgin 188064 [ 3122.273756][T28352] total_pgpgout 188059 [ 3122.277920][T28352] total_pgfault 381010 [ 3122.281991][T28352] total_pgmajfault 48935 [ 3122.286337][T28352] total_inactive_anon 0 [ 3122.290481][T28352] total_active_anon 0 [ 3122.294506][T28352] total_inactive_file 0 [ 3122.298681][T28352] total_active_file 0 [ 3122.302657][T28352] total_unevictable 0 [ 3122.306654][T28352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28349,uid=0 [ 3122.322126][T28352] Memory cgroup out of memory: Killed process 28349 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3122.345012][T28356] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3122.358609][T28356] CPU: 1 PID: 28356 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3122.369043][T28356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3122.379090][T28356] Call Trace: [ 3122.382400][T28356] [ 3122.385321][T28356] dump_stack_lvl+0xda/0x130 [ 3122.389969][T28356] dump_stack+0x15/0x20 [ 3122.394117][T28356] dump_header+0x82/0x2d0 [ 3122.398537][T28356] oom_kill_process+0x33a/0x4c0 [ 3122.403386][T28356] out_of_memory+0x9ca/0xbf0 [ 3122.408037][T28356] mem_cgroup_out_of_memory+0x139/0x190 [ 3122.413578][T28356] try_charge_memcg+0x75c/0xd30 [ 3122.418443][T28356] obj_cgroup_charge_pages+0xab/0x130 [ 3122.423895][T28356] __memcg_kmem_charge_page+0x9c/0x170 [ 3122.429377][T28356] __alloc_pages+0x1bb/0x340 [ 3122.434087][T28356] alloc_pages_mpol+0xb1/0x1d0 [ 3122.438861][T28356] alloc_pages+0xe0/0x100 [ 3122.443267][T28356] __vmalloc_node_range+0x6d2/0xea0 [ 3122.448751][T28356] kvmalloc_node+0x121/0x160 [ 3122.453343][T28356] ? xt_alloc_table_info+0x3d/0x80 [ 3122.458530][T28356] xt_alloc_table_info+0x3d/0x80 [ 3122.463504][T28356] do_arpt_set_ctl+0x634/0x13b0 [ 3122.468352][T28356] ? __futex_wait+0x227/0x280 [ 3122.473152][T28356] ? __futex_wake_mark+0x70/0x70 [ 3122.478132][T28356] ? tcp_release_cb+0xfe/0x370 [ 3122.482953][T28356] ? _raw_spin_unlock_bh+0x36/0x40 [ 3122.488065][T28356] nf_setsockopt+0x18d/0x1b0 [ 3122.492657][T28356] ip_setsockopt+0xe6/0x100 [ 3122.497161][T28356] tcp_setsockopt+0x90/0xa0 [ 3122.501690][T28356] sock_common_setsockopt+0x61/0x70 [ 3122.506919][T28356] ? sock_common_recvmsg+0xe0/0xe0 [ 3122.512051][T28356] __sys_setsockopt+0x1d4/0x240 [ 3122.517068][T28356] __x64_sys_setsockopt+0x66/0x80 [ 3122.522096][T28356] do_syscall_64+0x44/0x110 [ 3122.526647][T28356] ? syscall_exit_to_user_mode+0x38/0x140 [ 3122.532425][T28356] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3122.538394][T28356] RIP: 0033:0x7f2cd3f63ae9 [ 3122.542802][T28356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3122.562466][T28356] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3122.570897][T28356] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3122.578860][T28356] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3122.586822][T28356] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3122.594783][T28356] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3122.602875][T28356] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3122.610840][T28356] [ 3122.614016][T28356] memory: usage 307200kB, limit 307200kB, failcnt 159858 [ 3122.621095][T28356] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3122.629018][T28356] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3122.636384][T28356] Memory cgroup stats for /syz2: [ 3122.657594][T28356] cache 0 [ 3122.665526][T28356] rss 8192 [ 3122.668540][T28356] shmem 0 [ 3122.671475][T28356] mapped_file 0 [ 3122.674927][T28356] dirty 0 [ 3122.677995][T28356] writeback 0 [ 3122.681277][T28356] workingset_refault_anon 110065 [ 3122.686260][T28356] workingset_refault_file 41 [ 3122.690838][T28356] swap 229376 [ 3122.694108][T28356] swapcached 8192 [ 3122.697761][T28356] pgpgin 205325 [ 3122.701216][T28356] pgpgout 205323 [ 3122.704749][T28356] pgfault 414614 [ 3122.708400][T28356] pgmajfault 46344 [ 3122.712126][T28356] inactive_anon 8192 [ 3122.716037][T28356] active_anon 0 [ 3122.719633][T28356] inactive_file 0 [ 3122.723347][T28356] active_file 0 [ 3122.726836][T28356] unevictable 0 [ 3122.730290][T28356] hierarchical_memory_limit 314572800 [ 3122.735723][T28356] hierarchical_memsw_limit 9223372036854771712 [ 3122.741873][T28356] total_cache 0 [ 3122.745349][T28356] total_rss 8192 [ 3122.748889][T28356] total_shmem 0 [ 3122.752344][T28356] total_mapped_file 0 [ 3122.756398][T28356] total_dirty 0 [ 3122.759964][T28356] total_writeback 0 [ 3122.763756][T28356] total_workingset_refault_anon 110065 [ 3122.769230][T28356] total_workingset_refault_file 41 [ 3122.774363][T28356] total_swap 229376 [ 3122.778178][T28356] total_swapcached 8192 [ 3122.782382][T28356] total_pgpgin 205325 [ 3122.786391][T28356] total_pgpgout 205323 [ 3122.790503][T28356] total_pgfault 414614 [ 3122.794645][T28356] total_pgmajfault 46344 [ 3122.798932][T28356] total_inactive_anon 8192 [ 3122.803384][T28356] total_active_anon 0 00:20:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:54 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:54 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000000f000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:54 executing program 1: unshare(0xc80) 00:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3122.807392][T28356] total_inactive_file 0 [ 3122.811562][T28356] total_active_file 0 [ 3122.815637][T28356] total_unevictable 0 [ 3122.819633][T28356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28352,uid=0 [ 3122.835135][T28356] Memory cgroup out of memory: Killed process 28352 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00233e"], 0x34}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) [ 3122.898313][T28376] __nla_validate_parse: 4 callbacks suppressed [ 3122.898328][T28376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3122.928806][T28379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3122.949643][T28379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:54 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000280)={0x0, 0x2cc1, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) 00:20:54 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000011000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x67}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x30, 0x0, 0x0) 00:20:54 executing program 1: r0 = socket(0x10, 0x2, 0xf) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0xf}}, 0x0) 00:20:54 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000280)={0x0, 0x2cc1, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) (async) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) [ 3123.242454][T28389] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="aa", 0x1) 00:20:55 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000280)={0x0, 0x2cc1, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) syz_io_uring_setup(0x46bb, &(0x7f0000000280)={0x0, 0x2cc1, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) (async) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) (async) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x3) (async) 00:20:55 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000012000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3123.892161][T28386] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3123.903509][T28386] CPU: 0 PID: 28386 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3123.913965][T28386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3123.924038][T28386] Call Trace: [ 3123.927322][T28386] [ 3123.930468][T28386] dump_stack_lvl+0xda/0x130 [ 3123.935095][T28386] dump_stack+0x15/0x20 [ 3123.939398][T28386] dump_header+0x82/0x2d0 [ 3123.943958][T28386] oom_kill_process+0x33a/0x4c0 [ 3123.948907][T28386] out_of_memory+0x9ca/0xbf0 [ 3123.953589][T28386] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3123.959726][T28386] mem_cgroup_out_of_memory+0x139/0x190 [ 3123.965350][T28386] try_charge_memcg+0x75c/0xd30 [ 3123.970220][T28386] ? __swap_duplicate+0x29b/0x2b0 [ 3123.975458][T28386] ? radix_tree_lookup+0xf9/0x150 [ 3123.980500][T28386] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3123.986832][T28386] __read_swap_cache_async+0x2f6/0x550 00:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3123.992449][T28386] swap_cluster_readahead+0x27c/0x4c0 [ 3123.997865][T28386] swapin_readahead+0xe9/0x7f0 [ 3124.002654][T28386] ? __filemap_get_folio+0x41a/0x5a0 [ 3124.007981][T28386] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3124.013639][T28386] ? swap_cache_get_folio+0x6e/0x200 [ 3124.018946][T28386] do_swap_page+0x4a0/0x1670 [ 3124.023669][T28386] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3124.029057][T28386] ? __rcu_read_lock+0x35/0x50 [ 3124.034170][T28386] ? pte_offset_map_nolock+0x124/0x1d0 [ 3124.039712][T28386] handle_mm_fault+0xa36/0x2dd0 [ 3124.044613][T28386] exc_page_fault+0x3ff/0x6c0 [ 3124.049378][T28386] asm_exc_page_fault+0x26/0x30 [ 3124.054349][T28386] RIP: 0033:0x7f2cd3f1dae4 [ 3124.058772][T28386] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3124.078783][T28386] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010206 [ 3124.084853][T28386] RAX: 0000000000000000 RBX: 00007f2cd4082f80 RCX: 0000000000000000 [ 3124.092832][T28386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556726788 [ 3124.100850][T28386] RBP: 00007f2cd4084980 R08: 0000000000000000 R09: 00007ffcf5b320b0 [ 3124.108951][T28386] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002fab34 [ 3124.116969][T28386] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 00000000002fa7f3 [ 3124.124958][T28386] [ 3124.128149][T28386] memory: usage 307200kB, limit 307200kB, failcnt 160023 [ 3124.135442][T28386] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 00:20:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x1) [ 3124.143347][T28386] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3124.150720][T28386] Memory cgroup stats for /syz2: [ 3124.162679][T28386] cache 0 [ 3124.170681][T28386] rss 8192 [ 3124.173767][T28386] shmem 0 [ 3124.176800][T28386] mapped_file 0 [ 3124.180313][T28386] dirty 0 [ 3124.183250][T28386] writeback 8192 [ 3124.186874][T28386] workingset_refault_anon 110135 00:20:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x15, 0x0, 0x0) [ 3124.191882][T28386] workingset_refault_file 41 [ 3124.196547][T28386] swap 229376 [ 3124.199978][T28386] swapcached 16384 [ 3124.203698][T28386] pgpgin 205419 [ 3124.207169][T28386] pgpgout 205415 [ 3124.210709][T28386] pgfault 414774 [ 3124.214261][T28386] pgmajfault 46369 [ 3124.218031][T28386] inactive_anon 0 [ 3124.221694][T28386] active_anon 0 [ 3124.225213][T28386] inactive_file 0 [ 3124.228844][T28386] active_file 0 [ 3124.232290][T28386] unevictable 0 [ 3124.235752][T28386] hierarchical_memory_limit 314572800 [ 3124.241113][T28386] hierarchical_memsw_limit 9223372036854771712 [ 3124.247310][T28386] total_cache 0 [ 3124.250845][T28386] total_rss 8192 [ 3124.254435][T28386] total_shmem 0 [ 3124.258008][T28386] total_mapped_file 0 [ 3124.261976][T28386] total_dirty 0 [ 3124.265496][T28386] total_writeback 8192 [ 3124.269558][T28386] total_workingset_refault_anon 110135 [ 3124.275091][T28386] total_workingset_refault_file 41 [ 3124.280191][T28386] total_swap 229376 [ 3124.283984][T28386] total_swapcached 16384 [ 3124.288276][T28386] total_pgpgin 205419 [ 3124.292272][T28386] total_pgpgout 205415 [ 3124.296356][T28386] total_pgfault 414774 [ 3124.300415][T28386] total_pgmajfault 46369 [ 3124.304651][T28386] total_inactive_anon 0 [ 3124.308829][T28386] total_active_anon 0 [ 3124.312799][T28386] total_inactive_file 0 [ 3124.316959][T28386] total_active_file 0 [ 3124.321015][T28386] total_unevictable 0 [ 3124.325015][T28386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28386,uid=0 [ 3124.340334][T28386] Memory cgroup out of memory: Killed process 28386 (syz-executor.2) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3124.357988][T28412] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x69}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:55 executing program 1: mq_unlink(&(0x7f0000000000)='syztnl0\x00') 00:20:55 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000014000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:55 executing program 0: r0 = syz_io_uring_setup(0x69ea, &(0x7f0000000200)={0x0, 0x0, 0x10315, 0x0, 0x119}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3124.854360][T28431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:56 executing program 0: r0 = syz_io_uring_setup(0x69ea, &(0x7f0000000200)={0x0, 0x0, 0x10315, 0x0, 0x119}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x69ea, &(0x7f0000000200)={0x0, 0x0, 0x10315, 0x0, 0x119}, &(0x7f0000000000), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:56 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000015000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:56 executing program 1: syz_clone3(&(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:56 executing program 1: syz_io_uring_setup(0x5c2c, &(0x7f0000000300), &(0x7f0000000380), 0x0) syz_io_uring_setup(0x52d8, &(0x7f0000000400)={0x0, 0x894d}, &(0x7f0000000480), &(0x7f00000004c0)) [ 3125.084231][T28442] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 00:20:56 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000025000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3125.194088][T28456] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:57 executing program 0: r0 = syz_io_uring_setup(0x69ea, &(0x7f0000000200)={0x0, 0x0, 0x10315, 0x0, 0x119}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x69ea, &(0x7f0000000200)={0x0, 0x0, 0x10315, 0x0, 0x119}, &(0x7f0000000000), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:20:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0x6a}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:57 executing program 1: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="ff2e", 0xfffff, 0xfffffffffffffffb) 00:20:57 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000003c000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3125.947146][T28459] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3125.962823][T28443] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3125.974524][T28443] CPU: 0 PID: 28443 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3125.984944][T28443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 00:20:57 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000048000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:57 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000004c000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3125.995000][T28443] Call Trace: [ 3125.996927][T28465] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3125.998267][T28443] [ 3125.998275][T28443] dump_stack_lvl+0xda/0x130 [ 3126.015114][T28443] dump_stack+0x15/0x20 [ 3126.019364][T28443] dump_header+0x82/0x2d0 [ 3126.023706][T28443] oom_kill_process+0x33a/0x4c0 [ 3126.028572][T28443] out_of_memory+0x9ca/0xbf0 [ 3126.033182][T28443] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3126.039470][T28443] mem_cgroup_out_of_memory+0x139/0x190 [ 3126.045201][T28443] try_charge_memcg+0x75c/0xd30 [ 3126.050068][T28443] ? __swap_duplicate+0x29b/0x2b0 [ 3126.055104][T28443] ? radix_tree_lookup+0xf9/0x150 [ 3126.060254][T28443] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3126.066420][T28443] __read_swap_cache_async+0x2f6/0x550 [ 3126.071920][T28443] swap_cluster_readahead+0x27c/0x4c0 [ 3126.077315][T28443] swapin_readahead+0xe9/0x7f0 [ 3126.082083][T28443] ? __filemap_get_folio+0x41a/0x5a0 [ 3126.087452][T28443] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3126.093167][T28443] ? swap_cache_get_folio+0x6e/0x200 [ 3126.098558][T28443] do_swap_page+0x4a0/0x1670 [ 3126.103184][T28443] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3126.108493][T28443] ? __rcu_read_lock+0x35/0x50 [ 3126.113826][T28443] ? pte_offset_map_nolock+0x124/0x1d0 [ 3126.119297][T28443] handle_mm_fault+0xa36/0x2dd0 [ 3126.124186][T28443] exc_page_fault+0x3ff/0x6c0 [ 3126.128930][T28443] asm_exc_page_fault+0x26/0x30 [ 3126.133782][T28443] RIP: 0033:0x7f6f320edae4 [ 3126.138261][T28443] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3126.157884][T28443] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3126.163970][T28443] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3126.171947][T28443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3126.180033][T28443] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3126.188039][T28443] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002fb2a8 [ 3126.196109][T28443] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002faf67 [ 3126.204192][T28443] [ 3126.207319][T28443] memory: usage 307200kB, limit 307200kB, failcnt 84975 [ 3126.214272][T28443] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0 [ 3126.222379][T28443] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 3126.229761][T28443] Memory cgroup stats for /syz3: [ 3126.231161][T28443] cache 0 [ 3126.239153][T28443] rss 0 [ 3126.242045][T28443] shmem 0 [ 3126.245008][T28443] mapped_file 0 [ 3126.248537][T28443] dirty 0 [ 3126.251471][T28443] writeback 0 [ 3126.254834][T28443] workingset_refault_anon 72530 [ 3126.259708][T28443] workingset_refault_file 64 [ 3126.264290][T28443] swap 307200 [ 3126.267669][T28443] swapcached 0 [ 3126.271031][T28443] pgpgin 476131 [ 3126.274522][T28443] pgpgout 476131 [ 3126.278075][T28443] pgfault 900874 [ 3126.281619][T28443] pgmajfault 30539 [ 3126.285387][T28443] inactive_anon 0 [ 3126.289010][T28443] active_anon 0 [ 3126.292471][T28443] inactive_file 0 [ 3126.296118][T28443] active_file 0 [ 3126.299579][T28443] unevictable 0 [ 3126.303040][T28443] hierarchical_memory_limit 314572800 [ 3126.308485][T28443] hierarchical_memsw_limit 9223372036854771712 [ 3126.314626][T28443] total_cache 0 [ 3126.318109][T28443] total_rss 0 [ 3126.321390][T28443] total_shmem 0 [ 3126.324836][T28443] total_mapped_file 0 [ 3126.328848][T28443] total_dirty 0 [ 3126.332300][T28443] total_writeback 0 [ 3126.336167][T28443] total_workingset_refault_anon 72530 [ 3126.341579][T28443] total_workingset_refault_file 64 [ 3126.346700][T28443] total_swap 307200 [ 3126.350499][T28443] total_swapcached 0 [ 3126.354392][T28443] total_pgpgin 476131 [ 3126.358425][T28443] total_pgpgout 476131 [ 3126.362551][T28443] total_pgfault 900874 [ 3126.366621][T28443] total_pgmajfault 30539 [ 3126.370850][T28443] total_inactive_anon 0 [ 3126.375012][T28443] total_active_anon 0 [ 3126.379049][T28443] total_inactive_file 0 [ 3126.383195][T28443] total_active_file 0 [ 3126.387185][T28443] total_unevictable 0 [ 3126.391151][T28443] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28443,uid=0 [ 3126.406581][T28443] Memory cgroup out of memory: Killed process 28443 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:57 executing program 1: request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='0000111122223333', 0x0) 00:20:57 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000060000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:57 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0), 0x0) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x400081) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380), 0x400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000}}, {@cachetag={'cachetag', 0x3d, '/dev/vcsa#\x00'}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x39, 0x33, 0x31, 0x39, 0x61, 0x34, 0x33], 0x2d, [0x35, 0x65, 0x32, 0x62], 0x2d, [0x38, 0x38, 0x30, 0x61], 0x2d, [0x30, 0x37, 0x61, 0x63], 0x2d, [0x61, 0x39, 0x39, 0x31, 0x30, 0x31, 0x31, 0x66]}}}]}}) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000280)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f0000002bc0)={&(0x7f00000004c0)=@ethernet={0x1, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000540)="8cf7a0db55e5f3605090954a21ea30bb6ae261e17a1e044c7f84b4700d167e83263b141dfc908349529e600035b100e34b2ce3a4db949e1903ab8c3fe47b89e4dbd650385d5a33b6fbb6d6d3e0cc0eeeded45d5a5011528a70b265ee450102611ff132bceca0507c22c9ea7950c0307fab514b908274186a49456beff69c573134886901a73e6791cea7edcfe1c250f4a811a1f74f70f6378dfffdb955d1b80516a6e0545eb9ee4e310a350cb2dde6afeebe19ac71cd7ee5245a12a38c743b221227f35df1f48ebd95a4e28fc15a783850877f63080fe038ecde6451766103014215eed5ea4129d6d226b80c912fa12c0bf39c62bc6856c6a64c64f0779fcf547fe8b1a3f0ff9ac3bd86c5793a4c3e631a13b371de2b8c1bdaa88aab0c72b11d5ad88088c4c3f7c22bc2511d9219434c80cc36a43ce8bebf915e361cba28d91768d3a74f30a2d80e1dae1e21cbb25005840ba1b3b973b3dea550ef40a149a6d899cc1c7477cc3963edebd275270e4b46e9c076dab4862eef05de88e90e480e709afc84b0d3b22ff8a2479f964cdbe59803043fc03ccf44b44f1708ff65f769b50336e29aec404e24460e18061f13135dce16084cebba3798ba934f6409a2a0c60ede928d122a39c1a52e2cda7e72c7f3c32da0d0342c6de027d369350aa5e508443af148843bbaf714d9aeb6bf61faa47ed883ac56b2c0b8ff481591fbd5e25fe1951d188ef18f80385b4e052f45c3c187cd8d5b09ccf536bd7f68b82c181887c988b4894d95c19ac73f5470e51114dae4078b1baa52436871870cf4f53e67a1211bf6e67e173ac9544ecd22a9c70c7889a540f8212fc0a4879de9e06f6e76dcfd25e7f698add3046e3b9a102bd20410bbfbae97937b18b9e7a15be08ca5917182fddd726a38d0808e65dfbe9a0e2b599c7ea05f4572cb33a42f878412d5bfc06e543d9c1b70853f6b25eae9cc74e64789619032ab3ecabfd6abfd5e082275334e01d3f5ed3b375a61a40da02539214c185a6f14012a948206101e2377d5a4fb7c2c2e470f9cbd3c8814a34bf75a998d19e53240b87a7348f7119303877867104a5e2de1654400f1c33454c76fe284d01dfa418ee50cd6b4db4bffda796b68d5e87a2b7f50988a8adba00e2913a450690e48ecbd982dcdad792b91cad1e91257efd2dc755cd428158f29939e24966a7395be7eb24ed5dee015b83f45c2781b8b613b4831f7bbf27e2b4c16242dadd291efb096c62125c9adadf8e6a682ddf05fe93c83735a8b3e447b39bfeefacff2123eb8a2195a29f861dec5829ae67325942d43cdd1011d80e9e2c350523763da43cc1008f60fcf4f2a905a668c32724d7f14a6d508fee4a2b8aaa921246c53695ef4c5dc887c1b2b3c39ea8d1be833a9bc499d0a43c6312337c9a6a76afe5d6ea8ffbbed6b1753500c549014084261109cc3fb7f1e81069eb9571018b2179bd5352753ab189c9ddcba8512995d6a0fa993afaf8854b81ece7be207267d4d405e2b02884a5facbe78b15e44d518cff8ac94a3ff9170f85325e18728e2502ccb8d912f727f33281c8d285da4bb8f7306f64c08b2d60ca3de55163b63bd6e8b8639a259ef9752fdedf1b0fd9305433c45359c19a439e45be3c091ed0168cbb797b7d46674572ec59df3afcc882eb52c6271132d349f203194f24cb0ace82b61f2ecaf396d3bef00c2c20886cba4c0c1ad3fd768b307a0a4e2d3bd652a6b915f3683087ac23d6984179e8a59068aadcafdc5eb5cd23847c04c9bbaa218a8282a148c463aeafd4fb69265c866502aba3fbd1eddfd3c5708dc9c93bb323e79e07d28a999fd542e2b5d4cc57564546e20d58ccf2437fa499953d3f73e5f92b3be968b5cc2ed1fc48a7e4da0d58c002a9e53f13cda5831d059fb69fa00c6018fcd736885c67ad6404aea6b9c1df31a2b6ac993dcd8f05d54e577280e505cb16c2b72f8d713474a41bc197a9230623a3e37d9f35b211d846ee7ea8877cd500cbd18e88cae43e50562d21129903abd7ecc3ab4caeea7a743eab302edb383d95f27524c97d506d2abe6edf60f750805eff1aba47c7e4deb819e33aaf340ed559defd16e943e2f88ff7a28c66d9080b64cd1ed6f4f966c44fe3597f4c25b1ac319f4847dbc1003a4ffeb9270b9ad7a7f25b28f9b4fa8ba8908bbfe6c367b478bb7a3621d1a00eaed053367d72bc7231698cbab52caa8be40d35c2c10ff04701f8678da743eebc4ea1383c5b47e103028edae9bf24048a55ff7638bbca2856a7b346b28fbc1993c96459ce7ad4c764e91da0ad22e830549c2faf5c1518924f32d0bcc43069ec9042b9b75f08253e39363f60ed63a1b8b87c3d09efadae7f6753889b88b78381e5eaa67e41ba56339d61125258c109421524376755b26370b18629fcff806425c1e19277612cf9015112795ef9b5942e3deb9a9b88acc4b26b06bc35e7c31de1fd73c82d49c219ca33e805ae12c16a33058d4c1e3d50c86fe7d811e1889852623fce19c2cfa35e77227a2f1ce21e6eed03e3843201c2763065e276750148288ffe227c5f7bcc12f3f02133077640f5df2699ef4a6d74aabe92d4e812a2ae2d6d323807d3ce044ae895d76a93343d8392a4896225b44115039b349d115d8af7f87828f5d47191d216aecbba6eeabe6199e9678ee4d78834008a88d0aba87fad81d039df025520d17ff89479b2ba1d0d5c300ff7535c8c47a92432516b5a56297de78a7885a1d477bbc827663270c7db413768f7ac1e084a064ffd7a0f298f5965b9c2883c060c7c254fe328e09988be31a4c7b6e0ced3bdee172c293c0619330562b28fa65d1045f7c88ebaafa38708cff3c5cab6abe249969f44a3d73c9b9c5e6155d3693f5fe9cc1bbfc4d59cd5474cdcb3fcc4f2fe8e96a4c87c9431bb8bcf5a3ea1e31162c9c6c0b4d1913f59000d5eb64c6f9a1b0021c94a00201e5f84e8c7a69181d6c44db2b9f79206f997978431821b61530a39fc84d776b2eb0ffe83dce4781b5cbfdbfcbb8d9fb61b0285839118a4b5cb4509868f6a35e080cc6e7048c9cac5525a34a631e4058b60d51a3965dd7fa1d355212871e0fc0769fe0bb99ad14823ae947d5aabb30d4b2a7e6aa3c3e700a1317c0cde637b6e18b23cd16f0a9bc2b616e2cfbeff5d9e272211cfbe01d961e4512e9ecb58109ffd10f3755e746e8f15f8f411f714569d169fb7d1eb719fbc7f440b8fad4b412a43573708feba9a440c610225d6f7a1970ca845eda17298cd392b92c09b5235bcb46600fb093e7f2b6df1fbffefa92e277659c5d9c9aae4ca2a9fd62524dd7ceac9644d3b0d8126d38621a3d54409def812f188829a7613c4dee29f34358acbe91a9f4c09d7525b44eb04b1815c76b3e468c149fd0267512679edc2f031df2202a0fe339273a60d782081de38f9b7c261ac21869b851a3814284a0d08d78b29f6b8399e325c617db14db61e3dc70fec843044ed90a042fcf6fc64c3a8089f38c45ac62266d2dcc9bb82430382ab9a1dea58d723c6cad69970aa4e4af35a37c0093696df93afe7d0ebb705329e875fd1d35a1a1e5fa56e6bb1dba2409d362975c1e77cc925c975ea156e53cbc757d4b1739b0b22883057a2466204bb0865d471b0b09bf1ab97740ac4d33597c8108e7b26463d24329fd0f56fea31afda170bd25a2d8f8cdb3c7c2a8b274ae5cdedb3982c9e406d1d3ed34bdd8f786b3a7488bda624ae8de6f3e0598cf42edc6b4fe55fa185ffe698d68b5f1037d993483624f35826145d094731094447eca799b0e6b0b331fa0e40e139e26d023b820ff243b7f2800bb67f633babc9eafc97bfc2cf1d20f04fc11273de8cdf0447e01ac29e76af6f4033716d94cb1843bc40c053962efeef6d4ba607fb818f76c74c9a1215cffe7b1535941f94916ed2f482f1254e4d5b6a1bb119097d6782bf1c265b00785be94d4815d7fa86b69f60702fab38f926b0ec65e76cf9a0769b46ea509a2ac332ca35c7ec9182dc2a685d44d469f7c37298e2c25bafad70d5ef25f1d45310211e683749b272b70e600b58ee53a6ee6da8f8f9e561785cdc3899cf32ca93193edddb73c5595bc7d917584e819e4232261fba4e6a8c3f698cbd82a896ff77bd8592041786eaffc755b6bd0233d972f1644c69a1fbee16a43bfb33d41e01dc773dd17a177f251bd2080d789eb610c619c13bcae4188e40e576f07aac8a20cd4a9ea837c03c49a874df2367e3b5d94c917672df60b94d35e8becb450616bc72af7598dffd12ffcf5c0563a20154f04641e4777c2ff1a0baae47a8c9a8d00d5a7c5f44f595085e0d7a873ea538dd49ed5afcfc9c2e2ad8c62af77da3043418284a71bd81770edcca49c36c08de5a6d0c3448bd8b91599eb7782c4cc4a6a8483ea1c7ccb93fb2660b978e5c8cf458806bb2f204687255a957d122b03bada97b99d0642f8065c31b2aee46e1a6ed8b0a1267cab268e6a64d99b37a1f896d098a0426a3d6d046401623a3645180c8305f0ff628abe8413bc98ac0ccb5a0feb20de08ed3be79f92ec72a92deb7227ec9ebff801f5a6fba748c63ef1de59ce109e0954ec777606971ff72313ef3f4a978e570b29a303e27a6d52023c3ef6b41870e1f6184cea8e3cdb29476f2030321bdb06d696038daca0b63e0f93e7265ed8354f28a09d70777e67103f64a1193b6309fc01999703545661ac1ec075632fd18f81c8bc19c5bec61ac465ae61fc16f45047bce69609ceec2b4d4b5cb42d2c02ae48f11f44728a0d6edae4c099b2fc939a96d7cff2336c4e0db7f78ff111b992aa390d41eeb41b0983d93de87b220bbcd44b482f7151bf64d3004db64d238814e2534e5aa94f830c347d065ddd26cde416381c7994cc992a1efc39489537772ac837f311490d331f3ae708920c81e8f4258fc4e27ccb85f5aa723f6db788655495cf53e5deade2513d0543d0676341e8f5c12bb5e81c5caf5a1590eeec19c9ba8f0a2f6549e47b51296ac85da80f19f1afa0f73bdee6094d1d466c06225d721338a37ab3ada4049ff1735f906a7011c0e496ec3b5c4bb100637667af6c4be1de6fdda6ec1d130719f0e9f911f7f49f8d66589830ea10d0529a79505263b15e81bc7a3e157396dbfee8200da196d4427c06136639970672a41819bf5f4d3340fd68425bcb1e4b83f12fe55f6a79449f8e317fe8dd0ab197c995e589b5c3ac654c3f58f2640889c1ac30779c8376db092fe4a597da3363651cf7ab00cb29289051670155994427c8c08ad7751f10657dff3084671357d0338db5b8f93496c75b7fadc29507db8228b6a85956ae87266116f6bc4cfe0b6d18462ad83ce4c8fd33d988372c6922ed805e11954cd607f99ccfab8e6dba24cef837e9d67694b7b7fa39d0b88d33227d79f6bfc77458794a4a11d230a46f59a94c4d6530653de93981b0c9398364b163e2d0f8868a57efb7e370357b0649ef008d746cf3253807ab0c106e5c70e51a784cac7be1e8708396cd3a88921041a32036923cf7b4f5c8f4ac78cc2eb304a90f85dab5587e6078889649f96adbf3cf73a2e59e4ea5d5cea8162e10f93c01a3c878b28dfb94eab2daa1b594fb3f896ed775edf97cd350b1a3ddb878d5c5db4cbd70d4f7dc6c997d26bb2ae83fd048ccb076d57882676631caf727383ec556c873dab667f3a07556a1842fcbf5f207589ae7fbb7f610a4d2103a44694417f54e8f794cc430361a0b96e24a12a4b0c035bc189f5b4bdde10e7e2365079e9fb6c857ed321ef2698215a0ac20c8959b09ffa7732368ff342be0", 0x1000}, {&(0x7f0000001540)="e12615831c3cfa8952a801cca12a217672f4ef6c800e123de589757670b872737b65e0502e6b51b7de3451cd47209dbcb066984ecb24c56af3e7e80bcef5a905dd0246bee6a7bf27059b871e66dab4910eb96a104f5a0fe8501c07eaac5a6706279f56f906d68d92ce975f9dca6d357c86a8292612741a122bde4df79c105c5d30d211b31f49d55e0d071d6924f31fe4cbdf0f5ce2bf6289edb73cb9ccbd23236d430bef9450a2a6bad7ede0abd05928a7211bcf07603c6f9cf0a96421bceec388be5afb901a4618725479877fdb401fe9001e4a58b3ab71f7c4fc60429ce749", 0xe0}, {&(0x7f0000001640)="f5e8fd7da277d06bee468b7e54e96eb2f787fbe5a3eb1826ff4a712059e35d9c768c275e1c7dbeadbc5242f5949c2d2521f0348225628f8dc9cad504aaad", 0x3e}, {&(0x7f0000001680)="59016d24d3315f7c700d881d01e81f041e27", 0x12}, {&(0x7f00000016c0)="54c9098542596e753d99bacc451a8531683f625518077c3682729f6732f525576bd97058e78b7eca921d1b73322b086fda73f7a290ca9d812ee946f9944af985f4d06649d77da4d9f78d449e5e2196f4134ed08d694ae4f04114b4d355db1155c1fce65ed16bec127fe3b86b679917e16b18b44263071d8e4837da63363540f55fadbc89c1ff6921e322bf987f", 0x8d}], 0x5, &(0x7f0000001800)=[{0xe8, 0x11, 0x80, "0607409445a52a2a5d93b8f5afdc6b08c987a34e645d7986fec6cf891caf0aa65ed2f525de379cb93db3b793aec47b6a61b24d968c8d7da1cea0eb4fd665f511742215128d6280cc8c865ed9b32373b06a81465598a99860ac1f164f5e5f93ce71a0c870b0136dfb94728fbba19fe75c0c5ac12df6d7dea931632203104798613f69828566942041f3f8e8a24c058edc62bc48cd59387a9b795dfd73b9fe9e2a86701191e451e4af14034502617e18b24a4b292ed7c21887e6942e0a7146596864c8157ddd1e1cc6376f28e736fffa5c937d"}, {0xb8, 0x104, 0x0, "7c8f33137b4fe934e956c50ea9692ebde5413db0f0c804d854fd7829bf3e85124b0a3433b3923da8b828776b9a20a255d17b6711a7651447b2afca1e4a415f98040bbe2b6a52755a8a1d2937a9223413940b445a48058dcd12bfe26c13665ad8ae7eccdba7d14e3e3ff0af39909129a9a9d1f60f588c946a8b14e25b0dac6f5ff8fe7c275cdc780a52f8ec3447f66b7e8d5348914c141899db9e5af979e85cfd6e9827e341"}, {0x58, 0x1, 0x8, "80a087d4bfc05ce6403322e66237889415c76ef6c35e871ed75b22024f9f240b9dd1cb57a097ab4342f161c1f13731052e22669d3f5486d97df7e0475be055096ca42b129f82ea"}, {0xe8, 0x112, 0xf0, "662d52b8d54c864e384a4b912d0cc29803663f84bec4a8e0f955d946ea5ca72b3bd2fbea4ef8a8bb464fa764177da08fa89354498750f688b5e0b67f10e36a864fbcedb9bad644980e9b8a3654de7bbd7726c48234e0733f5f8c3ec6b07c4a6e6e7a9088faed7bce48a46b7d873efb6e174bed713b7f199a2f72ab1351f0f172a3fd179821da0fb63e40eec5a11f3c640645ae002add68cc7feafb167f872e97faa7644239f6d0785898ac317b0bc2e90389958e46d167d198eff0b5da1de5969948e2d66e73a3b3ef72e8956148393b1f6144a5ddb7"}, {0x1010, 0x1, 0x1, "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"}, {0xd0, 0x0, 0x8, "ef2d2c05eccd9e5a316e8cb1ce38f4e6178d4fc003b9b9472ccb826a693eb4c0e254236f99edbae8e394b5a34a1a3e481b72f81d6e2044ee393d4cf3dfa45238c73cce63f71090446b3459f3e506a8fc3ee29bffe853b09968456c7fba17cbb6f76b6eb5a35acc755be015ad0f5184c67847dc69ce3e41603b7835fbbb6821fcc64a5fb0eed89ad3a286633d3b82bf7b9da873746d7cb9f0cfb196f33b82e84a49efa8c3bfaaf852d60cebfa890bf92ff60d9106cc4e8a8dfeea57b6f9"}], 0x13c0}, 0x0, 0x44010, 0x1}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, r5, 0x0, &(0x7f0000000000)='./bus\x00'}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:57 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101040, 0x0) connect$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c6d1f54bfae053e3ca1fe5531b59b7340c7bc00279290504bee7358cec4d999eeed8dd770f6a5322b8a253c298e5a1a572cdc7194ebab102a28bba77ba6fa7"}, 0xffffffffffffff10) 00:20:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:57 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000068000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3126.782989][T28464] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3126.794430][T28464] CPU: 1 PID: 28464 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3126.804871][T28464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3126.815029][T28464] Call Trace: [ 3126.818337][T28464] [ 3126.821275][T28464] dump_stack_lvl+0xda/0x130 [ 3126.825970][T28464] dump_stack+0x15/0x20 [ 3126.830146][T28464] dump_header+0x82/0x2d0 [ 3126.834503][T28464] oom_kill_process+0x33a/0x4c0 [ 3126.839432][T28464] out_of_memory+0x9ca/0xbf0 [ 3126.844054][T28464] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3126.850154][T28464] mem_cgroup_out_of_memory+0x139/0x190 [ 3126.855722][T28464] try_charge_memcg+0x75c/0xd30 [ 3126.860623][T28464] ? __swap_duplicate+0x29b/0x2b0 [ 3126.865667][T28464] ? radix_tree_lookup+0xf9/0x150 [ 3126.870802][T28464] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3126.876945][T28464] __read_swap_cache_async+0x2f6/0x550 [ 3126.882420][T28464] swap_cluster_readahead+0x27c/0x4c0 [ 3126.887818][T28464] swapin_readahead+0xe9/0x7f0 [ 3126.892637][T28464] ? __filemap_get_folio+0x41a/0x5a0 [ 3126.898037][T28464] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3126.903676][T28464] ? swap_cache_get_folio+0x6e/0x200 [ 3126.909003][T28464] do_swap_page+0x4a0/0x1670 [ 3126.913804][T28464] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3126.919160][T28464] ? __rcu_read_lock+0x35/0x50 [ 3126.923932][T28464] ? pte_offset_map_nolock+0x124/0x1d0 [ 3126.929412][T28464] handle_mm_fault+0xa36/0x2dd0 [ 3126.934339][T28464] exc_page_fault+0x3ff/0x6c0 [ 3126.939078][T28464] asm_exc_page_fault+0x26/0x30 [ 3126.943927][T28464] RIP: 0033:0x7f2cd3f1dae4 [ 3126.948336][T28464] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3126.968013][T28464] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010206 [ 3126.974139][T28464] RAX: 0000000000000000 RBX: 00007f2cd4082f80 RCX: 0000000000000000 [ 3126.982095][T28464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556726788 [ 3126.990142][T28464] RBP: 00007f2cd4084980 R08: 0000000000000000 R09: 00007ffcf5b320b0 [ 3126.998131][T28464] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002fb69d [ 3127.006272][T28464] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 00000000002fb35c [ 3127.014244][T28464] [ 3127.017635][T28464] memory: usage 307200kB, limit 307200kB, failcnt 160611 [ 3127.024800][T28464] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 3127.032738][T28464] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3127.040194][T28464] Memory cgroup stats for /syz2: [ 3127.040350][T28464] cache 0 [ 3127.048443][T28464] rss 8192 [ 3127.051544][T28464] shmem 0 [ 3127.054526][T28464] mapped_file 0 [ 3127.058082][T28464] dirty 0 [ 3127.061039][T28464] writeback 16384 [ 3127.064715][T28464] workingset_refault_anon 110208 [ 3127.069821][T28464] workingset_refault_file 41 [ 3127.074440][T28464] swap 221184 [ 3127.077781][T28464] swapcached 16384 [ 3127.081495][T28464] pgpgin 205540 [ 3127.085041][T28464] pgpgout 205536 [ 3127.088599][T28464] pgfault 415047 [ 3127.092149][T28464] pgmajfault 46398 [ 3127.096017][T28464] inactive_anon 0 [ 3127.099635][T28464] active_anon 0 [ 3127.103077][T28464] inactive_file 0 [ 3127.106741][T28464] active_file 0 [ 3127.110194][T28464] unevictable 0 [ 3127.113804][T28464] hierarchical_memory_limit 314572800 [ 3127.119347][T28464] hierarchical_memsw_limit 9223372036854771712 [ 3127.125554][T28464] total_cache 0 [ 3127.129004][T28464] total_rss 8192 [ 3127.132612][T28464] total_shmem 0 [ 3127.136082][T28464] total_mapped_file 0 [ 3127.140146][T28464] total_dirty 0 [ 3127.143599][T28464] total_writeback 16384 [ 3127.147759][T28464] total_workingset_refault_anon 110208 [ 3127.153270][T28464] total_workingset_refault_file 41 [ 3127.158448][T28464] total_swap 221184 [ 3127.162314][T28464] total_swapcached 16384 [ 3127.166566][T28464] total_pgpgin 205540 [ 3127.170537][T28464] total_pgpgout 205536 [ 3127.174657][T28464] total_pgfault 415047 [ 3127.178741][T28464] total_pgmajfault 46398 [ 3127.182967][T28464] total_inactive_anon 0 [ 3127.187167][T28464] total_active_anon 0 [ 3127.191140][T28464] total_inactive_file 0 [ 3127.195345][T28464] total_active_file 0 [ 3127.199429][T28464] total_unevictable 0 [ 3127.203399][T28464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28464,uid=0 [ 3127.218789][T28464] Memory cgroup out of memory: Killed process 28464 (syz-executor.2) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:20:58 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000006c000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:58 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 00:20:58 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0), 0x0) (async) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x400081) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) mount$9p_fd(0x0, &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380), 0x400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000}}, {@cachetag={'cachetag', 0x3d, '/dev/vcsa#\x00'}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x39, 0x33, 0x31, 0x39, 0x61, 0x34, 0x33], 0x2d, [0x35, 0x65, 0x32, 0x62], 0x2d, [0x38, 0x38, 0x30, 0x61], 0x2d, [0x30, 0x37, 0x61, 0x63], 0x2d, [0x61, 0x39, 0x39, 0x31, 0x30, 0x31, 0x31, 0x66]}}}]}}) (async) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000280)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f0000002bc0)={&(0x7f00000004c0)=@ethernet={0x1, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="e12615831c3cfa8952a801cca12a217672f4ef6c800e123de589757670b872737b65e0502e6b51b7de3451cd47209dbcb066984ecb24c56af3e7e80bcef5a905dd0246bee6a7bf27059b871e66dab4910eb96a104f5a0fe8501c07eaac5a6706279f56f906d68d92ce975f9dca6d357c86a8292612741a122bde4df79c105c5d30d211b31f49d55e0d071d6924f31fe4cbdf0f5ce2bf6289edb73cb9ccbd23236d430bef9450a2a6bad7ede0abd05928a7211bcf07603c6f9cf0a96421bceec388be5afb901a4618725479877fdb401fe9001e4a58b3ab71f7c4fc60429ce749", 0xe0}, {&(0x7f0000001640)="f5e8fd7da277d06bee468b7e54e96eb2f787fbe5a3eb1826ff4a712059e35d9c768c275e1c7dbeadbc5242f5949c2d2521f0348225628f8dc9cad504aaad", 0x3e}, {&(0x7f0000001680)="59016d24d3315f7c700d881d01e81f041e27", 0x12}, {&(0x7f00000016c0)="54c9098542596e753d99bacc451a8531683f625518077c3682729f6732f525576bd97058e78b7eca921d1b73322b086fda73f7a290ca9d812ee946f9944af985f4d06649d77da4d9f78d449e5e2196f4134ed08d694ae4f04114b4d355db1155c1fce65ed16bec127fe3b86b679917e16b18b44263071d8e4837da63363540f55fadbc89c1ff6921e322bf987f", 0x8d}], 0x5, &(0x7f0000001800)=[{0xe8, 0x11, 0x80, "0607409445a52a2a5d93b8f5afdc6b08c987a34e645d7986fec6cf891caf0aa65ed2f525de379cb93db3b793aec47b6a61b24d968c8d7da1cea0eb4fd665f511742215128d6280cc8c865ed9b32373b06a81465598a99860ac1f164f5e5f93ce71a0c870b0136dfb94728fbba19fe75c0c5ac12df6d7dea931632203104798613f69828566942041f3f8e8a24c058edc62bc48cd59387a9b795dfd73b9fe9e2a86701191e451e4af14034502617e18b24a4b292ed7c21887e6942e0a7146596864c8157ddd1e1cc6376f28e736fffa5c937d"}, {0xb8, 0x104, 0x0, "7c8f33137b4fe934e956c50ea9692ebde5413db0f0c804d854fd7829bf3e85124b0a3433b3923da8b828776b9a20a255d17b6711a7651447b2afca1e4a415f98040bbe2b6a52755a8a1d2937a9223413940b445a48058dcd12bfe26c13665ad8ae7eccdba7d14e3e3ff0af39909129a9a9d1f60f588c946a8b14e25b0dac6f5ff8fe7c275cdc780a52f8ec3447f66b7e8d5348914c141899db9e5af979e85cfd6e9827e341"}, {0x58, 0x1, 0x8, "80a087d4bfc05ce6403322e66237889415c76ef6c35e871ed75b22024f9f240b9dd1cb57a097ab4342f161c1f13731052e22669d3f5486d97df7e0475be055096ca42b129f82ea"}, {0xe8, 0x112, 0xf0, "662d52b8d54c864e384a4b912d0cc29803663f84bec4a8e0f955d946ea5ca72b3bd2fbea4ef8a8bb464fa764177da08fa89354498750f688b5e0b67f10e36a864fbcedb9bad644980e9b8a3654de7bbd7726c48234e0733f5f8c3ec6b07c4a6e6e7a9088faed7bce48a46b7d873efb6e174bed713b7f199a2f72ab1351f0f172a3fd179821da0fb63e40eec5a11f3c640645ae002add68cc7feafb167f872e97faa7644239f6d0785898ac317b0bc2e90389958e46d167d198eff0b5da1de5969948e2d66e73a3b3ef72e8956148393b1f6144a5ddb7"}, {0x1010, 0x1, 0x1, "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"}, {0xd0, 0x0, 0x8, "ef2d2c05eccd9e5a316e8cb1ce38f4e6178d4fc003b9b9472ccb826a693eb4c0e254236f99edbae8e394b5a34a1a3e481b72f81d6e2044ee393d4cf3dfa45238c73cce63f71090446b3459f3e506a8fc3ee29bffe853b09968456c7fba17cbb6f76b6eb5a35acc755be015ad0f5184c67847dc69ce3e41603b7835fbbb6821fcc64a5fb0eed89ad3a286633d3b82bf7b9da873746d7cb9f0cfb196f33b82e84a49efa8c3bfaaf852d60cebfa890bf92ff60d9106cc4e8a8dfeea57b6f9"}], 0x13c0}, 0x0, 0x44010, 0x1}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, r5, 0x0, &(0x7f0000000000)='./bus\x00'}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:20:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0xfe}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:20:58 executing program 1: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 00:20:58 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0), 0x0) cachestat(r4, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r5, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x400081) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380), 0x400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000}}, {@cachetag={'cachetag', 0x3d, '/dev/vcsa#\x00'}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x39, 0x33, 0x31, 0x39, 0x61, 0x34, 0x33], 0x2d, [0x35, 0x65, 0x32, 0x62], 0x2d, [0x38, 0x38, 0x30, 0x61], 0x2d, [0x30, 0x37, 0x61, 0x63], 0x2d, [0x61, 0x39, 0x39, 0x31, 0x30, 0x31, 0x31, 0x66]}}}]}}) (async) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000280)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002c00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f0000002bc0)={&(0x7f00000004c0)=@ethernet={0x1, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="e12615831c3cfa8952a801cca12a217672f4ef6c800e123de589757670b872737b65e0502e6b51b7de3451cd47209dbcb066984ecb24c56af3e7e80bcef5a905dd0246bee6a7bf27059b871e66dab4910eb96a104f5a0fe8501c07eaac5a6706279f56f906d68d92ce975f9dca6d357c86a8292612741a122bde4df79c105c5d30d211b31f49d55e0d071d6924f31fe4cbdf0f5ce2bf6289edb73cb9ccbd23236d430bef9450a2a6bad7ede0abd05928a7211bcf07603c6f9cf0a96421bceec388be5afb901a4618725479877fdb401fe9001e4a58b3ab71f7c4fc60429ce749", 0xe0}, {&(0x7f0000001640)="f5e8fd7da277d06bee468b7e54e96eb2f787fbe5a3eb1826ff4a712059e35d9c768c275e1c7dbeadbc5242f5949c2d2521f0348225628f8dc9cad504aaad", 0x3e}, {&(0x7f0000001680)="59016d24d3315f7c700d881d01e81f041e27", 0x12}, {&(0x7f00000016c0)="54c9098542596e753d99bacc451a8531683f625518077c3682729f6732f525576bd97058e78b7eca921d1b73322b086fda73f7a290ca9d812ee946f9944af985f4d06649d77da4d9f78d449e5e2196f4134ed08d694ae4f04114b4d355db1155c1fce65ed16bec127fe3b86b679917e16b18b44263071d8e4837da63363540f55fadbc89c1ff6921e322bf987f", 0x8d}], 0x5, &(0x7f0000001800)=[{0xe8, 0x11, 0x80, "0607409445a52a2a5d93b8f5afdc6b08c987a34e645d7986fec6cf891caf0aa65ed2f525de379cb93db3b793aec47b6a61b24d968c8d7da1cea0eb4fd665f511742215128d6280cc8c865ed9b32373b06a81465598a99860ac1f164f5e5f93ce71a0c870b0136dfb94728fbba19fe75c0c5ac12df6d7dea931632203104798613f69828566942041f3f8e8a24c058edc62bc48cd59387a9b795dfd73b9fe9e2a86701191e451e4af14034502617e18b24a4b292ed7c21887e6942e0a7146596864c8157ddd1e1cc6376f28e736fffa5c937d"}, {0xb8, 0x104, 0x0, "7c8f33137b4fe934e956c50ea9692ebde5413db0f0c804d854fd7829bf3e85124b0a3433b3923da8b828776b9a20a255d17b6711a7651447b2afca1e4a415f98040bbe2b6a52755a8a1d2937a9223413940b445a48058dcd12bfe26c13665ad8ae7eccdba7d14e3e3ff0af39909129a9a9d1f60f588c946a8b14e25b0dac6f5ff8fe7c275cdc780a52f8ec3447f66b7e8d5348914c141899db9e5af979e85cfd6e9827e341"}, {0x58, 0x1, 0x8, "80a087d4bfc05ce6403322e66237889415c76ef6c35e871ed75b22024f9f240b9dd1cb57a097ab4342f161c1f13731052e22669d3f5486d97df7e0475be055096ca42b129f82ea"}, {0xe8, 0x112, 0xf0, "662d52b8d54c864e384a4b912d0cc29803663f84bec4a8e0f955d946ea5ca72b3bd2fbea4ef8a8bb464fa764177da08fa89354498750f688b5e0b67f10e36a864fbcedb9bad644980e9b8a3654de7bbd7726c48234e0733f5f8c3ec6b07c4a6e6e7a9088faed7bce48a46b7d873efb6e174bed713b7f199a2f72ab1351f0f172a3fd179821da0fb63e40eec5a11f3c640645ae002add68cc7feafb167f872e97faa7644239f6d0785898ac317b0bc2e90389958e46d167d198eff0b5da1de5969948e2d66e73a3b3ef72e8956148393b1f6144a5ddb7"}, {0x1010, 0x1, 0x1, "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"}, {0xd0, 0x0, 0x8, "ef2d2c05eccd9e5a316e8cb1ce38f4e6178d4fc003b9b9472ccb826a693eb4c0e254236f99edbae8e394b5a34a1a3e481b72f81d6e2044ee393d4cf3dfa45238c73cce63f71090446b3459f3e506a8fc3ee29bffe853b09968456c7fba17cbb6f76b6eb5a35acc755be015ad0f5184c67847dc69ce3e41603b7835fbbb6821fcc64a5fb0eed89ad3a286633d3b82bf7b9da873746d7cb9f0cfb196f33b82e84a49efa8c3bfaaf852d60cebfa890bf92ff60d9106cc4e8a8dfeea57b6f9"}], 0x13c0}, 0x0, 0x44010, 0x1}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, r5, 0x0, &(0x7f0000000000)='./bus\x00'}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:20:58 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000074000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:58 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000007a000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:58 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000f9e3000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:20:59 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) 00:20:59 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000080)=[r5], 0x1) 00:20:59 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000e3f9000000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:20:59 executing program 1: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 3127.953022][T28524] __nla_validate_parse: 7 callbacks suppressed [ 3127.953035][T28524] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3128.579230][T28498] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3128.590866][T28498] CPU: 0 PID: 28498 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3128.601282][T28498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3128.611512][T28498] Call Trace: [ 3128.614864][T28498] [ 3128.617791][T28498] dump_stack_lvl+0xda/0x130 [ 3128.622391][T28498] dump_stack+0x15/0x20 [ 3128.626622][T28498] dump_header+0x82/0x2d0 [ 3128.630955][T28498] oom_kill_process+0x33a/0x4c0 [ 3128.635863][T28498] out_of_memory+0x9ca/0xbf0 [ 3128.640555][T28498] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3128.646700][T28498] mem_cgroup_out_of_memory+0x139/0x190 [ 3128.652256][T28498] try_charge_memcg+0x75c/0xd30 [ 3128.657187][T28498] ? __swap_duplicate+0x29b/0x2b0 [ 3128.663005][T28498] ? radix_tree_lookup+0xf9/0x150 [ 3128.668038][T28498] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3128.674265][T28498] __read_swap_cache_async+0x2f6/0x550 [ 3128.679733][T28498] swap_cluster_readahead+0x27c/0x4c0 [ 3128.685265][T28498] swapin_readahead+0xe9/0x7f0 [ 3128.690037][T28498] ? __filemap_get_folio+0x41a/0x5a0 [ 3128.695372][T28498] ? swap_cache_get_folio+0x6e/0x200 [ 3128.700741][T28498] do_swap_page+0x4a0/0x1670 [ 3128.705431][T28498] ? asm_exc_page_fault+0x26/0x30 [ 3128.710475][T28498] ? __rcu_read_lock+0x35/0x50 [ 3128.715417][T28498] ? pte_offset_map_nolock+0x124/0x1d0 [ 3128.721008][T28498] handle_mm_fault+0xa36/0x2dd0 [ 3128.725884][T28498] exc_page_fault+0x3ff/0x6c0 [ 3128.730577][T28498] asm_exc_page_fault+0x26/0x30 [ 3128.735436][T28498] RIP: 0033:0x7f0beb363775 [ 3128.740029][T28498] Code: 35 b0 78 15 00 48 89 fb 48 89 74 24 10 48 89 54 24 18 eb 20 90 4c 89 ff e8 b8 09 ff ff 41 08 c5 0f 85 ff 01 00 00 41 83 c4 01 <44> 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c [ 3128.760244][T28498] RSP: 002b:00007ffe134d2cf0 EFLAGS: 00010202 [ 3128.766307][T28498] RAX: 00000000815df11b RBX: 00007f0beb4c7018 RCX: 0000000000000003 [ 3128.774334][T28498] RDX: 00000000815df11b RSI: 0000000080000000 RDI: 000000000000c058 [ 3128.782319][T28498] RBP: 00000000815df11b R08: 0000001b2da20000 R09: 000000000000111b [ 3128.790367][T28498] R10: 00000000815df11f R11: 0000000000092692 R12: 0000000000000004 [ 3128.798335][T28498] R13: 0000000000000001 R14: 00007f0beb4bb000 R15: ffffffff815dfb7c [ 3128.806357][T28498] ? __fget_files+0x1c/0x230 [ 3128.810998][T28498] [ 3128.814065][T28498] memory: usage 307200kB, limit 307200kB, failcnt 168878 [ 3128.821105][T28498] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 3128.829008][T28498] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3128.836315][T28498] Memory cgroup stats for /syz5: [ 3128.837038][T28498] cache 0 [ 3128.845068][T28498] rss 12288 [ 3128.848171][T28498] shmem 0 [ 3128.851097][T28498] mapped_file 0 [ 3128.854552][T28498] dirty 0 [ 3128.857519][T28498] writeback 4096 [ 3128.861096][T28498] workingset_refault_anon 110096 [ 3128.866062][T28498] workingset_refault_file 28 [ 3128.870720][T28498] swap 245760 [ 3128.873998][T28498] swapcached 16384 [ 3128.877756][T28498] pgpgin 188423 [ 3128.881201][T28498] pgpgout 188419 [ 3128.884791][T28498] pgfault 381735 [ 3128.888350][T28498] pgmajfault 49010 [ 3128.892130][T28498] inactive_anon 0 [ 3128.895774][T28498] active_anon 0 [ 3128.899222][T28498] inactive_file 0 [ 3128.902845][T28498] active_file 0 [ 3128.906341][T28498] unevictable 0 [ 3128.909847][T28498] hierarchical_memory_limit 314572800 [ 3128.915343][T28498] hierarchical_memsw_limit 9223372036854771712 [ 3128.921510][T28498] total_cache 0 [ 3128.925017][T28498] total_rss 12288 [ 3128.928651][T28498] total_shmem 0 [ 3128.932246][T28498] total_mapped_file 0 [ 3128.936264][T28498] total_dirty 0 [ 3128.939803][T28498] total_writeback 4096 [ 3128.943925][T28498] total_workingset_refault_anon 110096 [ 3128.949395][T28498] total_workingset_refault_file 28 [ 3128.954532][T28498] total_swap 245760 [ 3128.958363][T28498] total_swapcached 16384 [ 3128.962596][T28498] total_pgpgin 188423 [ 3128.966676][T28498] total_pgpgout 188419 [ 3128.970763][T28498] total_pgfault 381735 [ 3128.974805][T28498] total_pgmajfault 49010 [ 3128.979113][T28498] total_inactive_anon 0 [ 3128.983259][T28498] total_active_anon 0 [ 3128.987252][T28498] total_inactive_file 0 [ 3128.991391][T28498] total_active_file 0 [ 3128.995373][T28498] total_unevictable 0 [ 3128.999386][T28498] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28498,uid=0 [ 3129.014650][T28498] Memory cgroup out of memory: Killed process 28498 (syz-executor.5) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3129.032713][T28526] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3129.044116][T28526] CPU: 1 PID: 28526 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3129.054574][T28526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3129.064804][T28526] Call Trace: [ 3129.068172][T28526] [ 3129.071086][T28526] dump_stack_lvl+0xda/0x130 [ 3129.075738][T28526] dump_stack+0x15/0x20 [ 3129.079880][T28526] dump_header+0x82/0x2d0 [ 3129.084278][T28526] oom_kill_process+0x33a/0x4c0 [ 3129.089113][T28526] out_of_memory+0x9ca/0xbf0 [ 3129.093722][T28526] mem_cgroup_out_of_memory+0x139/0x190 [ 3129.099262][T28526] try_charge_memcg+0x75c/0xd30 [ 3129.104134][T28526] ? __swap_duplicate+0x29b/0x2b0 [ 3129.109175][T28526] ? radix_tree_lookup+0xf9/0x150 [ 3129.114258][T28526] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3129.120324][T28526] __read_swap_cache_async+0x2f6/0x550 [ 3129.125811][T28526] swap_cluster_readahead+0x27c/0x4c0 [ 3129.131266][T28526] swapin_readahead+0xe9/0x7f0 [ 3129.136017][T28526] ? __filemap_get_folio+0x41a/0x5a0 [ 3129.141293][T28526] ? swap_cache_get_folio+0x6e/0x200 [ 3129.146560][T28526] do_swap_page+0x4a0/0x1670 [ 3129.151193][T28526] ? asm_exc_page_fault+0x26/0x30 [ 3129.156232][T28526] ? __rcu_read_lock+0x35/0x50 [ 3129.160980][T28526] ? pte_offset_map_nolock+0x124/0x1d0 [ 3129.166495][T28526] handle_mm_fault+0xa36/0x2dd0 [ 3129.171363][T28526] exc_page_fault+0x3ff/0x6c0 [ 3129.176054][T28526] asm_exc_page_fault+0x26/0x30 [ 3129.180910][T28526] RIP: 0033:0x7f6f320edae4 [ 3129.185325][T28526] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3129.204994][T28526] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3129.211043][T28526] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3129.219001][T28526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3129.226983][T28526] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3129.234944][T28526] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002fbdfd [ 3129.242908][T28526] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002fbabc [ 3129.250919][T28526] [ 3129.254026][T28526] memory: usage 307200kB, limit 307200kB, failcnt 85637 [ 3129.261112][T28526] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3129.269083][T28526] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3129.276405][T28526] Memory cgroup stats for /syz3: [ 3129.277304][T28526] cache 0 [ 3129.285225][T28526] rss 8192 [ 3129.288241][T28526] shmem 0 [ 3129.291346][T28526] mapped_file 0 [ 3129.294851][T28526] dirty 0 [ 3129.297797][T28526] writeback 0 [ 3129.301135][T28526] workingset_refault_anon 72642 [ 3129.306026][T28526] workingset_refault_file 64 [ 3129.310670][T28526] swap 299008 [ 3129.314077][T28526] swapcached 8192 [ 3129.317736][T28526] pgpgin 476291 [ 3129.321199][T28526] pgpgout 476289 [ 3129.324732][T28526] pgfault 901240 [ 3129.328295][T28526] pgmajfault 30579 [ 3129.332007][T28526] inactive_anon 8192 [ 3129.336003][T28526] active_anon 0 [ 3129.339451][T28526] inactive_file 0 [ 3129.343179][T28526] active_file 0 [ 3129.346741][T28526] unevictable 0 [ 3129.350213][T28526] hierarchical_memory_limit 314572800 [ 3129.355625][T28526] hierarchical_memsw_limit 9223372036854771712 [ 3129.361782][T28526] total_cache 0 [ 3129.365350][T28526] total_rss 8192 [ 3129.368889][T28526] total_shmem 0 [ 3129.372340][T28526] total_mapped_file 0 [ 3129.376363][T28526] total_dirty 0 [ 3129.379886][T28526] total_writeback 0 [ 3129.383691][T28526] total_workingset_refault_anon 72642 [ 3129.389089][T28526] total_workingset_refault_file 64 [ 3129.394185][T28526] total_swap 299008 [ 3129.398012][T28526] total_swapcached 8192 [ 3129.402209][T28526] total_pgpgin 476291 [ 3129.406241][T28526] total_pgpgout 476289 [ 3129.410425][T28526] total_pgfault 901240 [ 3129.414564][T28526] total_pgmajfault 30579 [ 3129.418836][T28526] total_inactive_anon 8192 [ 3129.423347][T28526] total_active_anon 0 [ 3129.427346][T28526] total_inactive_file 0 00:21:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:00 executing program 0: syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000080)=[r5], 0x1) 00:21:00 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$sock(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f1", 0x1}], 0x1}}], 0x1, 0x0) 00:21:00 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000030000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) [ 3129.431500][T28526] total_active_file 0 [ 3129.435503][T28526] total_unevictable 0 [ 3129.439473][T28526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28526,uid=0 [ 3129.454849][T28526] Memory cgroup out of memory: Killed process 28526 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:00 executing program 1: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @multicast, @val={@void, {0x8864}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8cd464", 0x30, 0x3a, 0x0, @private0, @empty, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18f13f", 0x0, 0x0, 0x0, @mcast1, @empty}}}}}}}, 0x0) 00:21:00 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') (async) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000080)=[r5], 0x1) [ 3129.545439][T28538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f00000003c0)={'sit0\x00', 0x0}) 00:21:00 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000040030000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:00 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1a, 0x81, 0x2f, 0x7f, 0x0, 0x1, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1b, 0x1, 0x4000, 0x4, 0x20, 0x7fffffff, 0x5, 0x0, 0xffffffff, 0x0, 0x7}, r0, 0x1, 0xffffffffffffffff, 0x8) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:01 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 3129.850707][T28557] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3130.327328][T28537] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3130.341021][T28537] CPU: 0 PID: 28537 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3130.351447][T28537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3130.361584][T28537] Call Trace: [ 3130.364953][T28537] [ 3130.367880][T28537] dump_stack_lvl+0xda/0x130 [ 3130.372583][T28537] dump_stack+0x15/0x20 [ 3130.376752][T28537] dump_header+0x82/0x2d0 [ 3130.381186][T28537] oom_kill_process+0x33a/0x4c0 [ 3130.386048][T28537] out_of_memory+0x9ca/0xbf0 [ 3130.390710][T28537] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3130.396846][T28537] mem_cgroup_out_of_memory+0x139/0x190 [ 3130.402399][T28537] try_charge_memcg+0x75c/0xd30 [ 3130.407290][T28537] obj_cgroup_charge_pages+0xab/0x130 [ 3130.412666][T28537] __memcg_kmem_charge_page+0x9c/0x170 [ 3130.418136][T28537] __alloc_pages+0x1bb/0x340 [ 3130.422825][T28537] alloc_pages_mpol+0xb1/0x1d0 [ 3130.427669][T28537] alloc_pages+0xe0/0x100 [ 3130.432005][T28537] __vmalloc_node_range+0x6d2/0xea0 [ 3130.437278][T28537] kvmalloc_node+0x121/0x160 [ 3130.441859][T28537] ? xt_alloc_table_info+0x3d/0x80 [ 3130.446973][T28537] xt_alloc_table_info+0x3d/0x80 [ 3130.452000][T28537] do_arpt_set_ctl+0x634/0x13b0 [ 3130.456866][T28537] ? __futex_wait+0x227/0x280 [ 3130.461586][T28537] ? __futex_wake_mark+0x70/0x70 [ 3130.466516][T28537] ? tcp_release_cb+0xfe/0x370 [ 3130.471325][T28537] ? _raw_spin_unlock_bh+0x36/0x40 [ 3130.476487][T28537] nf_setsockopt+0x18d/0x1b0 [ 3130.481161][T28537] ip_setsockopt+0xe6/0x100 [ 3130.485662][T28537] tcp_setsockopt+0x90/0xa0 [ 3130.490181][T28537] sock_common_setsockopt+0x61/0x70 [ 3130.495410][T28537] ? sock_common_recvmsg+0xe0/0xe0 [ 3130.500553][T28537] __sys_setsockopt+0x1d4/0x240 [ 3130.505438][T28537] __x64_sys_setsockopt+0x66/0x80 [ 3130.510481][T28537] do_syscall_64+0x44/0x110 [ 3130.515043][T28537] ? syscall_exit_to_user_mode+0x38/0x140 [ 3130.520839][T28537] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3130.526739][T28537] RIP: 0033:0x7f0beb3a7ae9 [ 3130.531143][T28537] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3130.551318][T28537] RSP: 002b:00007f0bea72a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3130.559738][T28537] RAX: ffffffffffffffda RBX: 00007f0beb4c6f80 RCX: 00007f0beb3a7ae9 [ 3130.567721][T28537] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3130.575681][T28537] RBP: 00007f0beb3f347a R08: 0000000000000438 R09: 0000000000000000 [ 3130.583727][T28537] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3130.591698][T28537] R13: 000000000000000b R14: 00007f0beb4c6f80 R15: 00007ffe134d2ca8 [ 3130.599671][T28537] [ 3130.602872][T28537] memory: usage 307200kB, limit 307200kB, failcnt 169118 [ 3130.609945][T28537] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0 [ 3130.617918][T28537] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3130.625240][T28537] Memory cgroup stats for /syz5: [ 3130.696166][T28537] cache 0 [ 3130.704037][T28537] rss 0 [ 3130.706920][T28537] shmem 0 [ 3130.709895][T28537] mapped_file 0 [ 3130.713351][T28537] dirty 0 [ 3130.716336][T28537] writeback 0 [ 3130.719618][T28537] workingset_refault_anon 110148 [ 3130.724652][T28537] workingset_refault_file 28 [ 3130.729295][T28537] swap 311296 [ 3130.732578][T28537] swapcached 20480 [ 3130.736349][T28537] pgpgin 188499 [ 3130.739798][T28537] pgpgout 188494 [ 3130.743325][T28537] pgfault 381923 [ 3130.746976][T28537] pgmajfault 49026 [ 3130.750831][T28537] inactive_anon 20480 [ 3130.754808][T28537] active_anon 0 [ 3130.758413][T28537] inactive_file 0 [ 3130.762045][T28537] active_file 0 [ 3130.765716][T28537] unevictable 0 [ 3130.769199][T28537] hierarchical_memory_limit 314572800 [ 3130.774905][T28537] hierarchical_memsw_limit 9223372036854771712 [ 3130.781161][T28537] total_cache 0 [ 3130.784685][T28537] total_rss 0 [ 3130.788030][T28537] total_shmem 0 [ 3130.792102][T28537] total_mapped_file 0 [ 3130.796131][T28537] total_dirty 0 [ 3130.799677][T28537] total_writeback 0 [ 3130.803474][T28537] total_workingset_refault_anon 110148 [ 3130.808962][T28537] total_workingset_refault_file 28 [ 3130.814137][T28537] total_swap 311296 [ 3130.818031][T28537] total_swapcached 20480 [ 3130.822363][T28537] total_pgpgin 188499 [ 3130.826378][T28537] total_pgpgout 188494 [ 3130.830531][T28537] total_pgfault 381923 [ 3130.834623][T28537] total_pgmajfault 49026 [ 3130.838889][T28537] total_inactive_anon 20480 [ 3130.843447][T28537] total_active_anon 0 [ 3130.847489][T28537] total_inactive_file 0 [ 3130.851727][T28537] total_active_file 0 [ 3130.855820][T28537] total_unevictable 0 [ 3130.859872][T28537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28531,uid=0 [ 3130.875294][T28537] Memory cgroup out of memory: Killed process 28531 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:02 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000003400000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:02 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1a, 0x81, 0x2f, 0x7f, 0x0, 0x1, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1b, 0x1, 0x4000, 0x4, 0x20, 0x7fffffff, 0x5, 0x0, 0xffffffff, 0x0, 0x7}, r0, 0x1, 0xffffffffffffffff, 0x8) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$peeksig(0x4209, r0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1a, 0x81, 0x2f, 0x7f, 0x0, 0x1, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1b, 0x1, 0x4000, 0x4, 0x20, 0x7fffffff, 0x5, 0x0, 0xffffffff, 0x0, 0x7}, r0, 0x1, 0xffffffffffffffff, 0x8) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:21:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:02 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e86452", 0x10, 0x0, 0x0, @empty, @local, {[@hopopts={0x0, 0x1, '\x00', [@jumbo, @generic]}]}}}}}, 0x0) 00:21:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 00:21:02 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000100000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3131.069284][T28573] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:02 executing program 1: syz_emit_ethernet(0x72, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "619628", 0x38, 0x6, 0x0, @local, @mcast2, {[@fragment, @srh={0x0, 0x0, 0x4, 0x0, 0x99}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) 00:21:02 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1a, 0x81, 0x2f, 0x7f, 0x0, 0x1, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1b, 0x1, 0x4000, 0x4, 0x20, 0x7fffffff, 0x5, 0x0, 0xffffffff, 0x0, 0x7}, r0, 0x1, 0xffffffffffffffff, 0x8) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3131.152124][T28591] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:02 executing program 1: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x2, r0, 0x1ffff000, 0x20000000) 00:21:02 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000200000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:02 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x101, 0xfc00}, 0x8) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x48, 0xa, r3, 0x0, 0x0, 0x0, 0x40000000}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:02 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000300000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3131.247258][T28601] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3131.295500][T28607] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:03 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000400)) 00:21:03 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x101, 0xfc00}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x101, 0xfc00}, 0x8) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x48, 0xa, r3, 0x0, 0x0, 0x0, 0x40000000}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:03 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000100)={@random="4ec5244b42db", @random="f589592a0649", @void, {@generic={0x889e}}}, 0x0) 00:21:03 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000400000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:03 executing program 0: syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x101, 0xfc00}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0x10000000) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x48, 0xa, r3, 0x0, 0x0, 0x0, 0x40000000}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:03 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000500000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:03 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000600000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:03 executing program 1: socketpair(0x3, 0x0, 0x0, &(0x7f0000000140)) [ 3132.191260][T28619] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3132.219196][T28628] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:03 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x22, 0x0, @fd=r4, 0x2, 0x0, 0x6, 0x1, 0x0, {0x0, r5}}) [ 3132.265931][T28631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3132.283857][ T27] audit: type=1400 audit(1701217263.411:481): avc: denied { create } for pid=28632 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 3133.017560][T28629] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3133.031190][T28629] CPU: 1 PID: 28629 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3133.041711][T28629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3133.051826][T28629] Call Trace: [ 3133.055103][T28629] [ 3133.058044][T28629] dump_stack_lvl+0xda/0x130 [ 3133.062648][T28629] dump_stack+0x15/0x20 [ 3133.066895][T28629] dump_header+0x82/0x2d0 [ 3133.071285][T28629] oom_kill_process+0x33a/0x4c0 [ 3133.076203][T28629] out_of_memory+0x9ca/0xbf0 [ 3133.080819][T28629] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3133.086956][T28629] mem_cgroup_out_of_memory+0x139/0x190 [ 3133.092525][T28629] try_charge_memcg+0x75c/0xd30 [ 3133.097516][T28629] obj_cgroup_charge_pages+0xab/0x130 [ 3133.102905][T28629] __memcg_kmem_charge_page+0x9c/0x170 [ 3133.108393][T28629] __alloc_pages+0x1bb/0x340 [ 3133.112991][T28629] alloc_pages_mpol+0xb1/0x1d0 [ 3133.117766][T28629] alloc_pages+0xe0/0x100 [ 3133.122160][T28629] __vmalloc_node_range+0x6d2/0xea0 [ 3133.127537][T28629] kvmalloc_node+0x121/0x160 [ 3133.132145][T28629] ? xt_alloc_table_info+0x3d/0x80 [ 3133.137393][T28629] xt_alloc_table_info+0x3d/0x80 [ 3133.142369][T28629] do_arpt_set_ctl+0x634/0x13b0 [ 3133.147234][T28629] ? __futex_wait+0x227/0x280 [ 3133.151919][T28629] ? __futex_wake_mark+0x70/0x70 [ 3133.156856][T28629] ? tcp_release_cb+0xfe/0x370 [ 3133.161609][T28629] ? _raw_spin_unlock_bh+0x36/0x40 [ 3133.166812][T28629] nf_setsockopt+0x18d/0x1b0 [ 3133.171414][T28629] ip_setsockopt+0xe6/0x100 [ 3133.175967][T28629] tcp_setsockopt+0x90/0xa0 [ 3133.180455][T28629] sock_common_setsockopt+0x61/0x70 [ 3133.185686][T28629] ? sock_common_recvmsg+0xe0/0xe0 [ 3133.190798][T28629] __sys_setsockopt+0x1d4/0x240 [ 3133.195642][T28629] __x64_sys_setsockopt+0x66/0x80 [ 3133.200718][T28629] do_syscall_64+0x44/0x110 [ 3133.205206][T28629] ? syscall_exit_to_user_mode+0x38/0x140 [ 3133.210967][T28629] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3133.216919][T28629] RIP: 0033:0x7f6f32133ae9 [ 3133.221395][T28629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3133.241025][T28629] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3133.249504][T28629] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3133.257460][T28629] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 00:21:04 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000700000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:04 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 00:21:04 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x22, 0x0, @fd=r4, 0x2, 0x0, 0x6, 0x1, 0x0, {0x0, r5}}) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x22, 0x0, @fd=r4, 0x2, 0x0, 0x6, 0x1, 0x0, {0x0, r5}}) (async) [ 3133.265419][T28629] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3133.273385][T28629] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3133.281344][T28629] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3133.289350][T28629] [ 3133.292582][T28629] memory: usage 307200kB, limit 307200kB, failcnt 85959 [ 3133.299571][T28629] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0 [ 3133.307526][T28629] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 00:21:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x3, {0xffff8001}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@shmem={0xc, 0x1, {0xbd}}, 0x4442) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000040)=@shmem={0xc, 0x1, {0xbd}}, 0x4442) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x4, 0x70bd2b, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x94, 0xfe, 0x2, 0xfe, 0x8, 0x2000}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4040010) socket$inet_icmp_raw(0x2, 0x3, 0x1) 00:21:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3133.315003][T28629] Memory cgroup stats for /syz3: [ 3133.321585][T28629] cache 0 [ 3133.329617][T28629] rss 0 [ 3133.332603][T28629] shmem 0 [ 3133.335733][T28629] mapped_file 0 [ 3133.339192][T28629] dirty 0 [ 3133.342137][T28629] writeback 0 [ 3133.345591][T28629] workingset_refault_anon 72784 [ 3133.349847][T28647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3133.350427][T28629] workingset_refault_file 64 [ 3133.350434][T28629] swap 290816 [ 3133.350440][T28629] swapcached 16384 [ 3133.377211][T28629] pgpgin 476505 [ 3133.379228][T28643] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3133.380731][T28629] pgpgout 476501 [ 3133.380740][T28629] pgfault 901698 [ 3133.380747][T28629] pgmajfault 30639 [ 3133.380753][T28629] inactive_anon 16384 [ 3133.405052][T28629] active_anon 0 [ 3133.408576][T28629] inactive_file 0 [ 3133.412307][T28629] active_file 0 [ 3133.415800][T28629] unevictable 0 [ 3133.419378][T28629] hierarchical_memory_limit 314572800 [ 3133.424790][T28629] hierarchical_memsw_limit 9223372036854771712 [ 3133.431091][T28629] total_cache 0 [ 3133.434610][T28629] total_rss 0 [ 3133.437966][T28629] total_shmem 0 [ 3133.441485][T28629] total_mapped_file 0 [ 3133.445548][T28629] total_dirty 0 [ 3133.448997][T28629] total_writeback 0 [ 3133.452849][T28629] total_workingset_refault_anon 72784 [ 3133.458314][T28629] total_workingset_refault_file 64 [ 3133.463417][T28629] total_swap 290816 [ 3133.467270][T28629] total_swapcached 16384 [ 3133.471711][T28629] total_pgpgin 476505 [ 3133.475772][T28629] total_pgpgout 476501 [ 3133.479851][T28629] total_pgfault 901698 [ 3133.484005][T28629] total_pgmajfault 30639 [ 3133.488345][T28629] total_inactive_anon 16384 [ 3133.492924][T28629] total_active_anon 0 [ 3133.496954][T28629] total_inactive_file 0 [ 3133.501122][T28629] total_active_file 0 [ 3133.505136][T28629] total_unevictable 0 [ 3133.509179][T28629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28627,uid=0 [ 3133.524559][T28629] Memory cgroup out of memory: Killed process 28627 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3133.542136][T28624] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3133.553579][T28624] CPU: 0 PID: 28624 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3133.564063][T28624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3133.574148][T28624] Call Trace: [ 3133.577422][T28624] [ 3133.580419][T28624] dump_stack_lvl+0xda/0x130 [ 3133.585021][T28624] dump_stack+0x15/0x20 [ 3133.589206][T28624] dump_header+0x82/0x2d0 [ 3133.593572][T28624] oom_kill_process+0x33a/0x4c0 [ 3133.598473][T28624] out_of_memory+0x9ca/0xbf0 [ 3133.603094][T28624] mem_cgroup_out_of_memory+0x139/0x190 [ 3133.608648][T28624] try_charge_memcg+0x75c/0xd30 [ 3133.613521][T28624] ? __swap_duplicate+0x29b/0x2b0 [ 3133.618576][T28624] ? radix_tree_lookup+0xf9/0x150 [ 3133.623653][T28624] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3133.629747][T28624] __read_swap_cache_async+0x2f6/0x550 [ 3133.635206][T28624] swap_cluster_readahead+0x27c/0x4c0 [ 3133.640573][T28624] swapin_readahead+0xe9/0x7f0 [ 3133.645328][T28624] ? __filemap_get_folio+0x41a/0x5a0 [ 3133.650602][T28624] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3133.656245][T28624] ? swap_cache_get_folio+0x6e/0x200 [ 3133.661525][T28624] do_swap_page+0x4a0/0x1670 [ 3133.666207][T28624] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3133.671503][T28624] ? __rcu_read_lock+0x35/0x50 [ 3133.676310][T28624] ? pte_offset_map_nolock+0x124/0x1d0 [ 3133.681776][T28624] handle_mm_fault+0xa36/0x2dd0 [ 3133.686623][T28624] exc_page_fault+0x3ff/0x6c0 [ 3133.691339][T28624] asm_exc_page_fault+0x26/0x30 [ 3133.696179][T28624] RIP: 0033:0x7f2cd3f1f807 [ 3133.700583][T28624] Code: 25 ff 0f 00 00 09 c5 80 3d be ce c8 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 3133.720297][T28624] RSP: 002b:00007ffcf5b112f0 EFLAGS: 00010206 [ 3133.726357][T28624] RAX: 0000000083b11a4e RBX: 00007f2cd4083018 RCX: 0000000000000000 [ 3133.734374][T28624] RDX: ffffffff83b11324 RSI: 0000000080000000 RDI: 0000000000018151 [ 3133.742413][T28624] RBP: 0000000083b11a4e R08: 0000001b2d020000 R09: 0000000000001a4e [ 3133.750400][T28624] R10: 0000000083b11a52 R11: 00000000000929e0 R12: 0000000000000000 [ 3133.758432][T28624] R13: 0000000000000001 R14: 00007f2cd4077000 R15: ffffffff83b11324 [ 3133.766427][T28624] ? __x64_sys_setsockopt+0x14/0x80 [ 3133.771693][T28624] ? __x64_sys_setsockopt+0x14/0x80 [ 3133.776885][T28624] [ 3133.780124][T28624] memory: usage 307200kB, limit 307200kB, failcnt 161304 [ 3133.787264][T28624] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3133.795247][T28624] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3133.802519][T28624] Memory cgroup stats for /syz2: [ 3133.835266][T28624] cache 0 [ 3133.843211][T28624] rss 8192 [ 3133.846263][T28624] shmem 0 [ 3133.849184][T28624] mapped_file 0 [ 3133.852648][T28624] dirty 0 [ 3133.855598][T28624] writeback 0 [ 3133.858870][T28624] workingset_refault_anon 110388 [ 3133.863797][T28624] workingset_refault_file 41 [ 3133.868408][T28624] swap 229376 [ 3133.871688][T28624] swapcached 8192 [ 3133.875344][T28624] pgpgin 205816 [ 3133.878796][T28624] pgpgout 205814 [ 3133.882362][T28624] pgfault 415672 [ 3133.885922][T28624] pgmajfault 46464 [ 3133.889684][T28624] inactive_anon 0 [ 3133.893311][T28624] active_anon 8192 [ 3133.897035][T28624] inactive_file 0 [ 3133.900733][T28624] active_file 0 [ 3133.904177][T28624] unevictable 0 [ 3133.907640][T28624] hierarchical_memory_limit 314572800 [ 3133.912997][T28624] hierarchical_memsw_limit 9223372036854771712 [ 3133.919155][T28624] total_cache 0 [ 3133.922661][T28624] total_rss 8192 [ 3133.926218][T28624] total_shmem 0 [ 3133.929714][T28624] total_mapped_file 0 [ 3133.933683][T28624] total_dirty 0 [ 3133.937225][T28624] total_writeback 0 [ 3133.941055][T28624] total_workingset_refault_anon 110388 [ 3133.946516][T28624] total_workingset_refault_file 41 [ 3133.951633][T28624] total_swap 229376 [ 3133.955438][T28624] total_swapcached 8192 [ 3133.959694][T28624] total_pgpgin 205816 [ 3133.963674][T28624] total_pgpgout 205814 [ 3133.967771][T28624] total_pgfault 415672 [ 3133.971830][T28624] total_pgmajfault 46464 [ 3133.976129][T28624] total_inactive_anon 0 [ 3133.980273][T28624] total_active_anon 8192 [ 3133.984539][T28624] total_inactive_file 0 [ 3133.988702][T28624] total_active_file 0 [ 3133.992668][T28624] total_unevictable 0 [ 3133.996658][T28624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28624,uid=0 [ 3134.012228][T28624] Memory cgroup out of memory: Killed process 28624 (syz-executor.2) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:05 executing program 1: r0 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="1b", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r0}, 0x0, 0x0, 0x0) 00:21:05 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000800000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:05 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x22, 0x0, @fd=r4, 0x2, 0x0, 0x6, 0x1, 0x0, {0x0, r5}}) 00:21:05 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x0, 0xc, 0x4, 0x4}, 0x20) 00:21:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x3}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:05 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:05 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000900000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:05 executing program 1: socketpair(0x15, 0x0, 0x0, &(0x7f0000000fc0)) 00:21:05 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3134.424379][T28668] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3134.437526][T28670] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 00:21:05 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$inet6(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) [ 3134.484540][T28677] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:06 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:21:06 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000a00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x6, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 00:21:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) cachestat(r0, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x3b36, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4000, @fd_index=0x9, 0x882, &(0x7f0000000280)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000540)=""/233, 0xe9}], 0x5, 0x2, 0x1}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3135.212708][T28694] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3135.233684][ T3113] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3135.244794][ T3113] CPU: 1 PID: 3113 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3135.255273][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3135.265373][ T3113] Call Trace: [ 3135.268653][ T3113] [ 3135.271658][ T3113] dump_stack_lvl+0xda/0x130 [ 3135.276308][ T3113] dump_stack+0x15/0x20 [ 3135.280470][ T3113] dump_header+0x82/0x2d0 [ 3135.284881][ T3113] oom_kill_process+0x33a/0x4c0 [ 3135.289737][ T3113] out_of_memory+0x9ca/0xbf0 [ 3135.294422][ T3113] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3135.300498][ T3113] mem_cgroup_out_of_memory+0x139/0x190 [ 3135.306095][ T3113] try_charge_memcg+0x75c/0xd30 [ 3135.310967][ T3113] ? __swap_duplicate+0x29b/0x2b0 [ 3135.316038][ T3113] ? radix_tree_lookup+0xf9/0x150 [ 3135.321083][ T3113] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3135.327248][ T3113] __read_swap_cache_async+0x2f6/0x550 [ 3135.332729][ T3113] swap_cluster_readahead+0x27c/0x4c0 [ 3135.338106][ T3113] swapin_readahead+0xe9/0x7f0 [ 3135.342926][ T3113] ? __filemap_get_folio+0x41a/0x5a0 [ 3135.348291][ T3113] ? __switch_to+0x44d/0x9c0 [ 3135.353000][ T3113] ? _raw_spin_unlock+0x26/0x40 [ 3135.357985][ T3113] ? swap_cache_get_folio+0x6e/0x200 [ 3135.363296][ T3113] do_swap_page+0x4a0/0x1670 [ 3135.367893][ T3113] ? __rcu_read_lock+0x35/0x50 [ 3135.372665][ T3113] ? pte_offset_map_nolock+0x124/0x1d0 [ 3135.378148][ T3113] handle_mm_fault+0xa36/0x2dd0 [ 3135.383011][ T3113] exc_page_fault+0x3ff/0x6c0 [ 3135.387786][ T3113] asm_exc_page_fault+0x26/0x30 [ 3135.392649][ T3113] RIP: 0033:0x7f2cd3f8eeb5 [ 3135.397112][ T3113] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 4e 40 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 3135.416793][ T3113] RSP: 002b:00007ffcf5b11578 EFLAGS: 00010246 [ 3135.422874][ T3113] RAX: 0000000000000000 RBX: 0000000000001eb8 RCX: 00007f2cd3f8eeb3 [ 3135.430870][ T3113] RDX: 00007ffcf5b11590 RSI: 0000000000000000 RDI: 0000000000000000 [ 3135.438846][ T3113] RBP: 00007ffcf5b1161c R08: 0000000000000010 R09: 00007ffcf5b320b0 [ 3135.446798][ T3113] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 3135.454765][ T3113] R13: 00000000002fd44d R14: 00000000002fd3d7 R15: 0000000000000009 [ 3135.462717][ T3113] [ 3135.466111][ T3113] memory: usage 307200kB, limit 307200kB, failcnt 161502 [ 3135.473149][ T3113] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 3135.481445][ T3113] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3135.488775][ T3113] Memory cgroup stats for /syz2: [ 3135.488848][ T3113] cache 0 [ 3135.496792][ T3113] rss 0 [ 3135.499563][ T3113] shmem 0 [ 3135.502545][ T3113] mapped_file 0 [ 3135.506031][ T3113] dirty 0 [ 3135.508956][ T3113] writeback 4096 [ 3135.512637][ T3113] workingset_refault_anon 110439 [ 3135.517733][ T3113] workingset_refault_file 41 [ 3135.522389][ T3113] swap 225280 [ 3135.525751][ T3113] swapcached 12288 [ 3135.529464][ T3113] pgpgin 205891 [ 3135.532902][ T3113] pgpgout 205888 [ 3135.536702][ T3113] pgfault 415829 [ 3135.540302][ T3113] pgmajfault 46485 [ 3135.544116][ T3113] inactive_anon 0 [ 3135.547841][ T3113] active_anon 0 [ 3135.551285][ T3113] inactive_file 0 [ 3135.554905][ T3113] active_file 0 [ 3135.558466][ T3113] unevictable 0 [ 3135.561954][ T3113] hierarchical_memory_limit 314572800 [ 3135.567335][ T3113] hierarchical_memsw_limit 9223372036854771712 [ 3135.573708][ T3113] total_cache 0 [ 3135.577176][ T3113] total_rss 0 [ 3135.580632][ T3113] total_shmem 0 [ 3135.584113][ T3113] total_mapped_file 0 [ 3135.588123][ T3113] total_dirty 0 [ 3135.591566][ T3113] total_writeback 4096 [ 3135.595688][ T3113] total_workingset_refault_anon 110439 [ 3135.601143][ T3113] total_workingset_refault_file 41 [ 3135.606277][ T3113] total_swap 225280 [ 3135.610107][ T3113] total_swapcached 12288 [ 3135.614348][ T3113] total_pgpgin 205891 [ 3135.618455][ T3113] total_pgpgout 205888 [ 3135.622512][ T3113] total_pgfault 415829 [ 3135.626593][ T3113] total_pgmajfault 46485 [ 3135.630819][ T3113] total_inactive_anon 0 [ 3135.634984][ T3113] total_active_anon 0 [ 3135.638960][ T3113] total_inactive_file 0 [ 3135.643099][ T3113] total_active_file 0 [ 3135.647090][ T3113] total_unevictable 0 [ 3135.651127][ T3113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28671,uid=0 [ 3135.666482][ T3113] Memory cgroup out of memory: Killed process 28671 (syz-executor.2) total-vm:46428kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3135.705951][T28682] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3135.717462][T28682] CPU: 0 PID: 28682 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3135.727996][T28682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3135.738159][T28682] Call Trace: [ 3135.741435][T28682] [ 3135.744370][T28682] dump_stack_lvl+0xda/0x130 [ 3135.749182][T28682] dump_stack+0x15/0x20 [ 3135.753454][T28682] dump_header+0x82/0x2d0 [ 3135.757843][T28682] oom_kill_process+0x33a/0x4c0 [ 3135.762696][T28682] out_of_memory+0x9ca/0xbf0 [ 3135.767290][T28682] mem_cgroup_out_of_memory+0x139/0x190 [ 3135.772870][T28682] try_charge_memcg+0x75c/0xd30 [ 3135.777784][T28682] ? __swap_duplicate+0x29b/0x2b0 [ 3135.782837][T28682] ? radix_tree_lookup+0xf9/0x150 [ 3135.787887][T28682] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3135.794042][T28682] __read_swap_cache_async+0x2f6/0x550 [ 3135.799604][T28682] swap_cluster_readahead+0x27c/0x4c0 [ 3135.805114][T28682] swapin_readahead+0xe9/0x7f0 [ 3135.809929][T28682] ? __filemap_get_folio+0x41a/0x5a0 [ 3135.815291][T28682] ? swap_cache_get_folio+0x6e/0x200 [ 3135.820729][T28682] do_swap_page+0x4a0/0x1670 [ 3135.825387][T28682] ? __rcu_read_lock+0x35/0x50 [ 3135.830223][T28682] ? pte_offset_map_nolock+0x124/0x1d0 [ 3135.835681][T28682] handle_mm_fault+0xa36/0x2dd0 [ 3135.840551][T28682] ? mt_find+0x1d9/0x310 [ 3135.844843][T28682] exc_page_fault+0x2f7/0x6c0 [ 3135.849577][T28682] asm_exc_page_fault+0x26/0x30 [ 3135.854485][T28682] RIP: 0010:__get_user_8+0x11/0x20 [ 3135.859674][T28682] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 3135.879371][T28682] RSP: 0018:ffffc90000defe38 EFLAGS: 00050202 [ 3135.885434][T28682] RAX: 0000555555fc5da8 RBX: ffffc90000defe40 RCX: ffffffff814442c3 [ 3135.893427][T28682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881924c1a10 [ 3135.901388][T28682] RBP: ffffc90000defef8 R08: 00018881924c1a17 R09: 0000000000000000 [ 3135.909468][T28682] R10: 0001ffffffffffff R11: 00018881924c16d0 R12: ffff8881924c1040 [ 3135.917425][T28682] R13: ffff8881924c1a10 R14: ffffc90000deff58 R15: ffffc90000deffd8 [ 3135.925387][T28682] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 3135.931282][T28682] __rseq_handle_notify_resume+0xc7/0xbf0 [ 3135.937100][T28682] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 3135.943031][T28682] exit_to_user_mode_loop+0xcc/0xe0 [ 3135.948301][T28682] exit_to_user_mode_prepare+0x6c/0xb0 [ 3135.953795][T28682] irqentry_exit_to_user_mode+0x9/0x20 [ 3135.959435][T28682] irqentry_exit+0x12/0x40 [ 3135.963977][T28682] asm_exc_page_fault+0x26/0x30 [ 3135.968894][T28682] RIP: 0033:0x7f0beb361c72 [ 3135.973320][T28682] Code: ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 80 3d 9e e4 13 00 00 <48> 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 00 00 eb bd 48 89 f1 [ 3135.992915][T28682] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010202 [ 3135.999156][T28682] RAX: 0000000000000001 RBX: 00007f0beb4c6f80 RCX: 00000000002fd618 [ 3136.007120][T28682] RDX: 0000000000000150 RSI: 00007ffe134d2d70 RDI: 00007f0beb4c6f80 [ 3136.015154][T28682] RBP: 00007f0beb4c8980 R08: 0000000000000010 R09: 00007ffe135670b0 [ 3136.023143][T28682] R10: 00007ffe13567080 R11: 0000000000092b88 R12: 00000000002fd767 [ 3136.031259][T28682] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000002fd426 [ 3136.039229][T28682] [ 3136.042375][T28682] memory: usage 307200kB, limit 307200kB, failcnt 169331 [ 3136.049474][T28682] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 3136.057376][T28682] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3136.064651][T28682] Memory cgroup stats for /syz5: [ 3136.165918][T28682] cache 0 [ 3136.173816][T28682] rss 12288 [ 3136.176956][T28682] shmem 0 [ 3136.179885][T28682] mapped_file 0 [ 3136.183327][T28682] dirty 0 [ 3136.186275][T28682] writeback 0 [ 3136.189540][T28682] workingset_refault_anon 110292 [ 3136.194478][T28682] workingset_refault_file 28 [ 3136.199058][T28682] swap 245760 [ 3136.202343][T28682] swapcached 12288 [ 3136.206085][T28682] pgpgin 188740 [ 3136.209520][T28682] pgpgout 188737 [ 3136.213207][T28682] pgfault 382429 [ 3136.216751][T28682] pgmajfault 49091 [ 3136.220490][T28682] inactive_anon 12288 [ 3136.224443][T28682] active_anon 0 [ 3136.227897][T28682] inactive_file 0 [ 3136.231577][T28682] active_file 0 [ 3136.235111][T28682] unevictable 0 [ 3136.238545][T28682] hierarchical_memory_limit 314572800 [ 3136.243909][T28682] hierarchical_memsw_limit 9223372036854771712 [ 3136.250070][T28682] total_cache 0 [ 3136.253543][T28682] total_rss 12288 [ 3136.257255][T28682] total_shmem 0 [ 3136.260692][T28682] total_mapped_file 0 [ 3136.264654][T28682] total_dirty 0 [ 3136.268104][T28682] total_writeback 0 [ 3136.271965][T28682] total_workingset_refault_anon 110292 [ 3136.277418][T28682] total_workingset_refault_file 28 [ 3136.282569][T28682] total_swap 245760 [ 3136.286442][T28682] total_swapcached 12288 [ 3136.290662][T28682] total_pgpgin 188740 [ 3136.294650][T28682] total_pgpgout 188737 [ 3136.298811][T28682] total_pgfault 382429 [ 3136.302858][T28682] total_pgmajfault 49091 [ 3136.307106][T28682] total_inactive_anon 12288 [ 3136.311588][T28682] total_active_anon 0 [ 3136.315643][T28682] total_inactive_file 0 [ 3136.319784][T28682] total_active_file 0 [ 3136.323811][T28682] total_unevictable 0 [ 3136.327849][T28682] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28682,uid=0 [ 3136.343091][T28682] Memory cgroup out of memory: Killed process 28682 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3136.369127][T28689] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3136.380522][T28689] CPU: 0 PID: 28689 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3136.390939][T28689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3136.401018][T28689] Call Trace: [ 3136.404287][T28689] [ 3136.407204][T28689] dump_stack_lvl+0xda/0x130 [ 3136.411834][T28689] dump_stack+0x15/0x20 [ 3136.415980][T28689] dump_header+0x82/0x2d0 [ 3136.420700][T28689] oom_kill_process+0x33a/0x4c0 [ 3136.425609][T28689] out_of_memory+0x9ca/0xbf0 [ 3136.430220][T28689] mem_cgroup_out_of_memory+0x139/0x190 [ 3136.435763][T28689] try_charge_memcg+0x75c/0xd30 [ 3136.440606][T28689] ? __swap_duplicate+0x29b/0x2b0 [ 3136.445720][T28689] ? radix_tree_lookup+0xf9/0x150 [ 3136.450786][T28689] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3136.456919][T28689] __read_swap_cache_async+0x2f6/0x550 [ 3136.462369][T28689] swap_cluster_readahead+0x27c/0x4c0 [ 3136.467733][T28689] swapin_readahead+0xe9/0x7f0 [ 3136.472671][T28689] ? __filemap_get_folio+0x41a/0x5a0 [ 3136.477991][T28689] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3136.483631][T28689] ? swap_cache_get_folio+0x6e/0x200 [ 3136.488934][T28689] do_swap_page+0x4a0/0x1670 [ 3136.493753][T28689] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3136.499041][T28689] ? __rcu_read_lock+0x35/0x50 [ 3136.503798][T28689] ? pte_offset_map_nolock+0x124/0x1d0 [ 3136.509251][T28689] handle_mm_fault+0xa36/0x2dd0 [ 3136.514098][T28689] exc_page_fault+0x3ff/0x6c0 [ 3136.518770][T28689] asm_exc_page_fault+0x26/0x30 [ 3136.523671][T28689] RIP: 0033:0x7f6f320ef77f [ 3136.528071][T28689] Code: 74 24 10 48 89 54 24 18 eb 20 90 4c 89 ff e8 b8 09 ff ff 41 08 c5 0f 85 ff 01 00 00 41 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 <48> 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 [ 3136.547752][T28689] RSP: 002b:00007fff79885100 EFLAGS: 00010297 [ 3136.553805][T28689] RAX: 0000000081956059 RBX: 00007f6f32253018 RCX: 0000000000000007 [ 3136.561765][T28689] RDX: 0000000081956058 RSI: 0000000080000000 RDI: 0000000000013197 [ 3136.569725][T28689] RBP: 0000000081956058 R08: 0000001b2db20000 R09: 0000000000000059 [ 3136.577688][T28689] R10: 000000008195605c R11: 0000000000092be0 R12: 0000000000000008 [ 3136.585655][T28689] R13: 0000000000000001 R14: 00007f6f32247000 R15: ffffffff8195676f [ 3136.593629][T28689] ? selinux_socket_setsockopt+0x2f/0x180 [ 3136.599493][T28689] [ 3136.602613][T28689] memory: usage 307200kB, limit 307200kB, failcnt 86103 [ 3136.609572][T28689] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 00:21:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x4}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:07 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 00:21:07 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000b00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3136.617496][T28689] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3136.624805][T28689] Memory cgroup stats for /syz3: [ 3136.640805][T28709] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3136.672716][T28689] cache 0 [ 3136.675782][T28689] rss 8192 [ 3136.678818][T28689] shmem 0 [ 3136.681765][T28689] mapped_file 0 [ 3136.685344][T28689] dirty 0 [ 3136.688321][T28689] writeback 0 [ 3136.691668][T28689] workingset_refault_anon 72879 [ 3136.696566][T28689] workingset_refault_file 64 [ 3136.701150][T28689] swap 299008 [ 3136.704509][T28689] swapcached 8192 [ 3136.708170][T28689] pgpgin 476648 [ 3136.711629][T28689] pgpgout 476646 [ 3136.715250][T28689] pgfault 901979 [ 3136.718848][T28689] pgmajfault 30686 [ 3136.722671][T28689] inactive_anon 0 [ 3136.726371][T28689] active_anon 8192 [ 3136.730114][T28689] inactive_file 0 [ 3136.733758][T28689] active_file 0 [ 3136.737279][T28689] unevictable 0 [ 3136.740803][T28689] hierarchical_memory_limit 314572800 [ 3136.746288][T28689] hierarchical_memsw_limit 9223372036854771712 [ 3136.752501][T28689] total_cache 0 [ 3136.755979][T28689] total_rss 8192 [ 3136.759625][T28689] total_shmem 0 [ 3136.763129][T28689] total_mapped_file 0 [ 3136.767125][T28689] total_dirty 0 [ 3136.770593][T28689] total_writeback 0 [ 3136.774419][T28689] total_workingset_refault_anon 72879 [ 3136.779824][T28689] total_workingset_refault_file 64 [ 3136.784954][T28689] total_swap 299008 [ 3136.788760][T28689] total_swapcached 8192 [ 3136.792985][T28689] total_pgpgin 476648 [ 3136.797029][T28689] total_pgpgout 476646 [ 3136.801097][T28689] total_pgfault 901979 [ 3136.805198][T28689] total_pgmajfault 30686 [ 3136.809439][T28689] total_inactive_anon 0 [ 3136.813585][T28689] total_active_anon 8192 [ 3136.817869][T28689] total_inactive_file 0 [ 3136.822018][T28689] total_active_file 0 [ 3136.826018][T28689] total_unevictable 0 [ 3136.829988][T28689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28689,uid=0 [ 3136.845291][T28689] Memory cgroup out of memory: Killed process 28689 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) cachestat(r0, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x3b36, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4000, @fd_index=0x9, 0x882, &(0x7f0000000280)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000540)=""/233, 0xe9}], 0x5, 0x2, 0x1}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8915, &(0x7f00000003c0)={'sit0\x00', 0x0}) 00:21:08 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000c00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3136.993605][T28714] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:08 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000d00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:08 executing program 1: syz_emit_ethernet(0x10ce, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000086dd608cd46410943a"], 0x0) 00:21:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async, rerun: 32) cachestat(r0, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200), 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x3b36, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4000, @fd_index=0x9, 0x882, &(0x7f0000000280)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000540)=""/233, 0xe9}], 0x5, 0x2, 0x1}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00'}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 3137.425044][T28731] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x5}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:08 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e86452", 0x0, 0x1, 0x0, @empty, @local}}}}, 0x0) 00:21:08 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000e00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:08 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendfile(r0, r5, &(0x7f0000000440)=0x1, 0x3f) socket(0x9, 0x80000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r7, 0x189, 0x30}, 0xc) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x70, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x81}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004004}, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3137.706193][T28744] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3137.722100][ T27] audit: type=1400 audit(1701217268.851:482): avc: denied { create } for pid=28742 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3137.852728][T28720] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3137.864090][T28720] CPU: 0 PID: 28720 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3137.874555][T28720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3137.884612][T28720] Call Trace: [ 3137.887941][T28720] [ 3137.890932][T28720] dump_stack_lvl+0xda/0x130 [ 3137.895534][T28720] dump_stack+0x15/0x20 [ 3137.899885][T28720] dump_header+0x82/0x2d0 [ 3137.904318][T28720] oom_kill_process+0x33a/0x4c0 [ 3137.909292][T28720] out_of_memory+0x9ca/0xbf0 [ 3137.913982][T28720] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3137.920076][T28720] mem_cgroup_out_of_memory+0x139/0x190 [ 3137.925636][T28720] try_charge_memcg+0x75c/0xd30 [ 3137.930577][T28720] ? __swap_duplicate+0x29b/0x2b0 [ 3137.935694][T28720] ? radix_tree_lookup+0xf9/0x150 [ 3137.940724][T28720] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3137.946843][T28720] __read_swap_cache_async+0x2f6/0x550 [ 3137.952308][T28720] swap_cluster_readahead+0x27c/0x4c0 [ 3137.957736][T28720] swapin_readahead+0xe9/0x7f0 [ 3137.962519][T28720] ? __filemap_get_folio+0x41a/0x5a0 [ 3137.967867][T28720] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3137.973510][T28720] ? swap_cache_get_folio+0x6e/0x200 [ 3137.978913][T28720] do_swap_page+0x4a0/0x1670 [ 3137.983565][T28720] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3137.988846][T28720] ? __rcu_read_lock+0x35/0x50 [ 3137.993802][T28720] ? pte_offset_map_nolock+0x124/0x1d0 [ 3137.999253][T28720] handle_mm_fault+0xa36/0x2dd0 [ 3138.004154][T28720] exc_page_fault+0x3ff/0x6c0 [ 3138.008907][T28720] asm_exc_page_fault+0x26/0x30 [ 3138.013761][T28720] RIP: 0033:0x7f0beb361ae4 [ 3138.018270][T28720] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3138.037876][T28720] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010206 [ 3138.043993][T28720] RAX: 0000000000000000 RBX: 00007f0beb4c6f80 RCX: 0000000000000000 [ 3138.052007][T28720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555fc5788 [ 3138.060042][T28720] RBP: 00007f0beb4c8980 R08: 0000000000000000 R09: 00007ffe135670b0 [ 3138.068003][T28720] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002fe126 [ 3138.076002][T28720] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000002fdde5 [ 3138.083969][T28720] [ 3138.087152][T28720] memory: usage 307200kB, limit 307200kB, failcnt 169438 [ 3138.094512][T28720] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 3138.102444][T28720] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3138.109766][T28720] Memory cgroup stats for /syz5: [ 3138.152633][T28720] cache 0 [ 3138.160581][T28720] rss 12288 [ 3138.163752][T28720] shmem 0 [ 3138.166830][T28720] mapped_file 0 [ 3138.170365][T28720] dirty 0 [ 3138.173298][T28720] writeback 8192 [ 3138.176937][T28720] workingset_refault_anon 110326 [ 3138.181869][T28720] workingset_refault_file 28 [ 3138.186479][T28720] swap 237568 [ 3138.189782][T28720] swapcached 20480 [ 3138.193564][T28720] pgpgin 188799 [ 3138.197238][T28720] pgpgout 188794 [ 3138.200771][T28720] pgfault 382583 [ 3138.204311][T28720] pgmajfault 49101 [ 3138.208093][T28720] inactive_anon 0 [ 3138.211788][T28720] active_anon 0 [ 3138.215267][T28720] inactive_file 0 [ 3138.218953][T28720] active_file 0 [ 3138.222473][T28720] unevictable 0 [ 3138.225959][T28720] hierarchical_memory_limit 314572800 [ 3138.231379][T28720] hierarchical_memsw_limit 9223372036854771712 [ 3138.237621][T28720] total_cache 0 [ 3138.241101][T28720] total_rss 12288 [ 3138.244733][T28720] total_shmem 0 [ 3138.248266][T28720] total_mapped_file 0 [ 3138.252279][T28720] total_dirty 0 [ 3138.255765][T28720] total_writeback 8192 [ 3138.259899][T28720] total_workingset_refault_anon 110326 [ 3138.265367][T28720] total_workingset_refault_file 28 [ 3138.270510][T28720] total_swap 237568 [ 3138.274335][T28720] total_swapcached 20480 [ 3138.278766][T28720] total_pgpgin 188799 [ 3138.282741][T28720] total_pgpgout 188794 [ 3138.286838][T28720] total_pgfault 382583 [ 3138.290928][T28720] total_pgmajfault 49101 [ 3138.295220][T28720] total_inactive_anon 0 [ 3138.299417][T28720] total_active_anon 0 [ 3138.303530][T28720] total_inactive_file 0 [ 3138.307731][T28720] total_active_file 0 [ 3138.311736][T28720] total_unevictable 0 [ 3138.315740][T28720] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28720,uid=0 [ 3138.331115][T28720] Memory cgroup out of memory: Killed process 28720 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:09 executing program 0: syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket(0x2, 0x80805, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) sendfile(r0, r5, &(0x7f0000000440)=0x1, 0x3f) socket(0x9, 0x80000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r7, 0x189, 0x30}, 0xc) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x70, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x81}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004004}, 0x1) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x70, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x81}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004004}, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, 0x0) 00:21:09 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000f00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:09 executing program 1: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @multicast, @val={@void, {0x806}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8cd464", 0x30, 0x3a, 0x0, @private0, @empty, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18f13f", 0x0, 0x0, 0x0, @mcast1, @empty}}}}}}}, 0x0) 00:21:09 executing program 1: syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000086dd608cd464003a3a00fc000900000000000000000000000055d3"], 0x0) 00:21:09 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendfile(r0, r5, &(0x7f0000000440)=0x1, 0x3f) (async) sendfile(r0, r5, &(0x7f0000000440)=0x1, 0x3f) socket(0x9, 0x80000, 0x1) (async) socket(0x9, 0x80000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r7, 0x189, 0x30}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r7, 0x189, 0x30}, 0xc) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x70, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x81}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004004}, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:09 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000001000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3138.685000][T28757] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x3) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) ftruncate(r4, 0x800) lseek(r4, 0x20400, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ftruncate(r4, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000640)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740), 0x0, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000600000095", @ANYRES32, @ANYBLOB="000000000000000085100000ffffffff180000000200000000000000070000001861000003000000000000007507000095"], &(0x7f0000000380)='syzkaller\x00', 0x405, 0xd0, &(0x7f0000000540)=""/208, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x5, 0x5, 0x0, 0xa}, {0x5, 0x3, 0xd}, {0x0, 0x0, 0x6, 0x2}, {0x5, 0x4, 0xd, 0x4}, {0x0, 0x1, 0x2, 0x7}, {0x1, 0x5, 0x0, 0x6}]}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000840)={0x0, 0x0, 0x801, 0x20040006, 0x17800, 0xffcf0000}) 00:21:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1700, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:09 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xfc000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000a0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:09 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000001100000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3138.768348][T28773] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:09 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xfc000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000a0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:10 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xfc000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000a0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3138.860133][T28782] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:11 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000001200000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:11 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x80000000, &(0x7f0000000080)={0x0, 0x127a, 0x8, 0x2, 0x3a0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000003c0)={'sit0\x00', 0x0}) 00:21:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x7}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:11 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x80000000, &(0x7f0000000080)={0x0, 0x127a, 0x8, 0x2, 0x3a0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:11 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000001400000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3139.994222][T28803] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x101, 0x4) 00:21:11 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000001500000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:11 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x80000000, &(0x7f0000000080)={0x0, 0x127a, 0x8, 0x2, 0x3a0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3140.064589][T28813] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:11 executing program 1: r0 = socket(0x2, 0x3, 0x56) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 00:21:11 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = eventfd(0x7) fstat(r0, &(0x7f0000000080)) dup2(r0, r4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) dup(r3) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:11 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8cd464", 0x30, 0x3a, 0x0, @private0, @empty, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18f13f", 0x0, 0x0, 0x0, @private0, @private2}}}}}}}, 0x0) 00:21:11 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = eventfd(0x7) fstat(r0, &(0x7f0000000080)) (async) dup2(r0, r4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) dup(r3) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3140.184473][T28827] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3140.911010][T28800] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3140.922397][T28800] CPU: 1 PID: 28800 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3140.932849][T28800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3140.942910][T28800] Call Trace: [ 3140.946184][T28800] [ 3140.949115][T28800] dump_stack_lvl+0xda/0x130 [ 3140.953747][T28800] dump_stack+0x15/0x20 [ 3140.957910][T28800] dump_header+0x82/0x2d0 [ 3140.962446][T28800] oom_kill_process+0x33a/0x4c0 [ 3140.967346][T28800] out_of_memory+0x9ca/0xbf0 [ 3140.971940][T28800] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3140.978018][T28800] mem_cgroup_out_of_memory+0x139/0x190 [ 3140.983574][T28800] try_charge_memcg+0x75c/0xd30 [ 3140.988433][T28800] ? __swap_duplicate+0x29b/0x2b0 [ 3140.993471][T28800] ? radix_tree_lookup+0xf9/0x150 [ 3140.998510][T28800] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3141.004603][T28800] __read_swap_cache_async+0x2f6/0x550 [ 3141.010077][T28800] swap_cluster_readahead+0x27c/0x4c0 [ 3141.015519][T28800] shmem_swapin_folio+0x343/0x830 [ 3141.020567][T28800] shmem_get_folio_gfp+0x242/0xb40 [ 3141.025690][T28800] shmem_fault+0x100/0x250 [ 3141.030184][T28800] ? put_swap_device+0xb0/0xb0 [ 3141.034945][T28800] handle_mm_fault+0x17db/0x2dd0 [ 3141.039940][T28800] exc_page_fault+0x3ff/0x6c0 [ 3141.044704][T28800] asm_exc_page_fault+0x26/0x30 [ 3141.049557][T28800] RIP: 0033:0x7f2cd3f1f85e [ 3141.054085][T28800] Code: e8 c7 e9 fe ff 83 44 24 08 01 44 3b 63 04 0f 82 37 ff ff ff 44 8b 4c 24 08 48 8b 2c 24 49 89 df 48 8b 74 24 10 4c 8b 64 24 18 <44> 89 0e 80 3d 45 ce c8 00 00 0f 84 eb 00 00 00 80 3d 36 ce c8 00 [ 3141.075340][T28800] RSP: 002b:00007ffcf5b112f0 EFLAGS: 00010246 [ 3141.081490][T28800] RAX: 000000008150bb67 RBX: 00007f2cd4083018 RCX: 000000000003fffe [ 3141.089466][T28800] RDX: 000000008150bb67 RSI: 0000001b2cc222fc RDI: 000000000001a88b [ 3141.097464][T28800] RBP: 00007f2cd38e7008 R08: 0000001b2d020000 R09: 0000000000000568 [ 3141.105571][T28800] R10: 000000008150bb6b R11: 0000000000092f42 R12: 0000001b2cc22300 [ 3141.113533][T28800] R13: 0000000000000001 R14: 00007f2cd4077000 R15: 00007f2cd4083018 [ 3141.121567][T28800] [ 3141.124648][T28800] memory: usage 307200kB, limit 307200kB, failcnt 161746 [ 3141.131754][T28800] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3141.139678][T28800] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3141.147065][T28800] Memory cgroup stats for /syz2: [ 3141.147433][T28800] cache 0 [ 3141.155378][T28800] rss 0 [ 3141.158170][T28800] shmem 0 [ 3141.161113][T28800] mapped_file 0 [ 3141.164548][T28800] dirty 0 [ 3141.167521][T28800] writeback 0 [ 3141.170833][T28800] workingset_refault_anon 110648 [ 3141.175803][T28800] workingset_refault_file 41 [ 3141.180373][T28800] swap 229376 [ 3141.183720][T28800] swapcached 8192 [ 3141.187425][T28800] pgpgin 206196 [ 3141.190884][T28800] pgpgout 206194 [ 3141.194673][T28800] pgfault 416388 [ 3141.198263][T28800] pgmajfault 46568 [ 3141.201969][T28800] inactive_anon 0 [ 3141.205683][T28800] active_anon 0 [ 3141.209134][T28800] inactive_file 0 [ 3141.212745][T28800] active_file 0 [ 3141.216286][T28800] unevictable 0 [ 3141.219732][T28800] hierarchical_memory_limit 314572800 [ 3141.225098][T28800] hierarchical_memsw_limit 9223372036854771712 [ 3141.231304][T28800] total_cache 0 [ 3141.234801][T28800] total_rss 0 [ 3141.238208][T28800] total_shmem 0 [ 3141.241655][T28800] total_mapped_file 0 [ 3141.245663][T28800] total_dirty 0 [ 3141.249108][T28800] total_writeback 0 [ 3141.252888][T28800] total_workingset_refault_anon 110648 [ 3141.258350][T28800] total_workingset_refault_file 41 [ 3141.263505][T28800] total_swap 229376 [ 3141.267327][T28800] total_swapcached 8192 [ 3141.271466][T28800] total_pgpgin 206196 [ 3141.275479][T28800] total_pgpgout 206194 [ 3141.279526][T28800] total_pgfault 416388 [ 3141.283568][T28800] total_pgmajfault 46568 [ 3141.287814][T28800] total_inactive_anon 0 [ 3141.292113][T28800] total_active_anon 0 [ 3141.296098][T28800] total_inactive_file 0 [ 3141.300258][T28800] total_active_file 0 [ 3141.304210][T28800] total_unevictable 0 [ 3141.308239][T28800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28800,uid=0 [ 3141.323515][T28800] Memory cgroup out of memory: Killed process 28800 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3141.366147][T28823] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3141.377562][T28823] CPU: 0 PID: 28823 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3141.388006][T28823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3141.398298][T28823] Call Trace: [ 3141.401656][T28823] [ 3141.404616][T28823] dump_stack_lvl+0xda/0x130 [ 3141.409249][T28823] dump_stack+0x15/0x20 [ 3141.413480][T28823] dump_header+0x82/0x2d0 [ 3141.417890][T28823] oom_kill_process+0x33a/0x4c0 [ 3141.422827][T28823] out_of_memory+0x9ca/0xbf0 [ 3141.427438][T28823] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3141.433737][T28823] mem_cgroup_out_of_memory+0x139/0x190 [ 3141.439419][T28823] try_charge_memcg+0x75c/0xd30 [ 3141.444293][T28823] ? __swap_duplicate+0x29b/0x2b0 [ 3141.449392][T28823] ? radix_tree_lookup+0xf9/0x150 [ 3141.454442][T28823] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3141.460538][T28823] __read_swap_cache_async+0x2f6/0x550 [ 3141.466064][T28823] swap_cluster_readahead+0x27c/0x4c0 [ 3141.471552][T28823] swapin_readahead+0xe9/0x7f0 [ 3141.476324][T28823] ? __filemap_get_folio+0x41a/0x5a0 [ 3141.481680][T28823] ? swap_cache_get_folio+0x6e/0x200 [ 3141.486973][T28823] do_swap_page+0x4a0/0x1670 [ 3141.491597][T28823] ? asm_exc_page_fault+0x26/0x30 [ 3141.496719][T28823] ? __rcu_read_lock+0x35/0x50 [ 3141.501568][T28823] ? pte_offset_map_nolock+0x124/0x1d0 [ 3141.507242][T28823] handle_mm_fault+0xa36/0x2dd0 [ 3141.512190][T28823] exc_page_fault+0x3ff/0x6c0 [ 3141.516881][T28823] asm_exc_page_fault+0x26/0x30 [ 3141.521796][T28823] RIP: 0033:0x7f0beb363807 [ 3141.526289][T28823] Code: 25 ff 0f 00 00 09 c5 80 3d be ce c8 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 3141.545941][T28823] RSP: 002b:00007ffe134d2cf0 EFLAGS: 00010206 [ 3141.552027][T28823] RAX: 0000000083b11a4e RBX: 00007f0beb4c7018 RCX: 0000000000000000 [ 3141.560043][T28823] RDX: ffffffff83b11324 RSI: 0000000080000000 RDI: 0000000000018151 [ 3141.567998][T28823] RBP: 0000000083b11a4e R08: 0000001b2da20000 R09: 0000000000001a4e [ 3141.575953][T28823] R10: 0000000083b11a52 R11: 0000000000092f74 R12: 0000000000000000 [ 3141.583910][T28823] R13: 0000000000000001 R14: 00007f0beb4bb000 R15: ffffffff83b11324 [ 3141.591954][T28823] ? __x64_sys_setsockopt+0x14/0x80 [ 3141.597185][T28823] ? __x64_sys_setsockopt+0x14/0x80 [ 3141.602374][T28823] [ 3141.605460][T28823] memory: usage 307200kB, limit 307200kB, failcnt 169771 [ 3141.612489][T28823] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3141.620414][T28823] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3141.627782][T28823] Memory cgroup stats for /syz5: [ 3141.627927][T28823] cache 0 [ 3141.635974][T28823] rss 12288 [ 3141.639123][T28823] shmem 0 [ 3141.642037][T28823] mapped_file 0 [ 3141.645503][T28823] dirty 0 [ 3141.648427][T28823] writeback 0 [ 3141.651731][T28823] workingset_refault_anon 110414 [ 3141.656774][T28823] workingset_refault_file 28 [ 3141.661420][T28823] swap 299008 [ 3141.664681][T28823] swapcached 12288 [ 3141.668407][T28823] pgpgin 188959 [ 3141.671854][T28823] pgpgout 188956 [ 3141.675413][T28823] pgfault 382991 [ 3141.678947][T28823] pgmajfault 49128 [ 3141.682661][T28823] inactive_anon 12288 [ 3141.686653][T28823] active_anon 0 [ 3141.690098][T28823] inactive_file 0 [ 3141.693703][T28823] active_file 0 [ 3141.697155][T28823] unevictable 0 [ 3141.700656][T28823] hierarchical_memory_limit 314572800 [ 3141.706031][T28823] hierarchical_memsw_limit 9223372036854771712 [ 3141.712167][T28823] total_cache 0 [ 3141.715663][T28823] total_rss 12288 [ 3141.719296][T28823] total_shmem 0 [ 3141.722727][T28823] total_mapped_file 0 [ 3141.726795][T28823] total_dirty 0 [ 3141.730238][T28823] total_writeback 0 [ 3141.734018][T28823] total_workingset_refault_anon 110414 [ 3141.739537][T28823] total_workingset_refault_file 28 [ 3141.744637][T28823] total_swap 299008 [ 3141.748441][T28823] total_swapcached 12288 [ 3141.752694][T28823] total_pgpgin 188959 [ 3141.756673][T28823] total_pgpgout 188956 [ 3141.760754][T28823] total_pgfault 382991 [ 3141.764791][T28823] total_pgmajfault 49128 [ 3141.769109][T28823] total_inactive_anon 12288 [ 3141.773676][T28823] total_active_anon 0 [ 3141.777657][T28823] total_inactive_file 0 [ 3141.781799][T28823] total_active_file 0 [ 3141.785818][T28823] total_unevictable 0 [ 3141.789839][T28823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28823,uid=0 00:21:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x8}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:12 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 00:21:12 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000002500000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:12 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = eventfd(0x7) fstat(r0, &(0x7f0000000080)) dup2(r0, r4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) dup(r3) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) eventfd(0x7) (async) fstat(r0, &(0x7f0000000080)) (async) dup2(r0, r4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) dup(r3) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) 00:21:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x22]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) [ 3141.805519][T28823] Memory cgroup out of memory: Killed process 28823 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:13 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "8b3136c315da6befcbdbf8744dc5dd163d70ab045bcb094ee0843c8a5b4e9065bd513ece51ae5a2f05ad110e76c6cf9eea00c50d9cd37096e919b5745b52167f"}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0xfffffffffffffffe) [ 3141.889967][T28849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:13 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000003c00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:13 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, r0, 0x10000000) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r8}}) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x14, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:13 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e86452", 0x8, 0x0, 0x0, @empty, @local, {[@hopopts={0x2f}]}}}}}, 0x0) 00:21:13 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000680)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e86452", 0x8, 0x0, 0x0, @empty, @local, {[@dstopts={0x2c}]}}}}}, 0x0) 00:21:13 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, r0, 0x10000000) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r8}}) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x14, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, r0, 0x10000000) (async) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x14, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) (async) [ 3142.221871][T28862] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:14 executing program 1: syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8cd464", 0x32, 0x3a, 0x0, @private0, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18f13f", 0x0, 0x0, 0x0, @mcast1, @empty, [], "74a0"}}}}}}}, 0x0) 00:21:14 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000004800000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:14 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async, rerun: 64) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r5}}) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, r0, 0x10000000) syz_io_uring_setup(0x614a, &(0x7f0000000080)={0x0, 0x52c3, 0x0, 0x1, 0x7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x31, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x14, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x9}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) [ 3142.954036][T28884] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1a00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:14 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000004c00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:14 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pI4 \x00'}, 0x20) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r4, 0x2, 0x7ff, 0xfffffe00, 0x4}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xde55, 0x7fffffff}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r4, 0x4000, r5}, 0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) io_uring_enter(r0, 0x4e29, 0x66ad, 0x7, &(0x7f0000000380)={[0x9]}, 0x8) 00:21:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008e40)={0x148, 0xd, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x134, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x105, 0x6, 0x1, 0x0, "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"}]}]}]}, 0x148}}, 0x0) 00:21:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002440)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}]}, 0x34}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 00:21:14 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000006000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:14 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) [ 3143.382715][T28902] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:14 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pI4 \x00'}, 0x20) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r4, 0x2, 0x7ff, 0xfffffe00, 0x4}) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xde55, 0x7fffffff}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r4, 0x4000, r5}, 0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) io_uring_enter(r0, 0x4e29, 0x66ad, 0x7, &(0x7f0000000380)={[0x9]}, 0x8) 00:21:14 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000006800000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3143.743492][T28888] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3143.754829][T28888] CPU: 1 PID: 28888 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3143.765301][T28888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3143.775352][T28888] Call Trace: [ 3143.778627][T28888] [ 3143.781631][T28888] dump_stack_lvl+0xda/0x130 [ 3143.786224][T28888] dump_stack+0x15/0x20 [ 3143.790382][T28888] dump_header+0x82/0x2d0 [ 3143.794724][T28888] oom_kill_process+0x33a/0x4c0 [ 3143.799623][T28888] out_of_memory+0x9ca/0xbf0 [ 3143.804221][T28888] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3143.810308][T28888] mem_cgroup_out_of_memory+0x139/0x190 [ 3143.815918][T28888] try_charge_memcg+0x75c/0xd30 [ 3143.820815][T28888] ? __swap_duplicate+0x29b/0x2b0 [ 3143.825897][T28888] ? radix_tree_lookup+0xf9/0x150 [ 3143.831013][T28888] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3143.837177][T28888] __read_swap_cache_async+0x2f6/0x550 [ 3143.842809][T28888] swap_cluster_readahead+0x27c/0x4c0 [ 3143.848213][T28888] swapin_readahead+0xe9/0x7f0 [ 3143.852988][T28888] ? __filemap_get_folio+0x41a/0x5a0 [ 3143.858407][T28888] ? _raw_spin_unlock+0x26/0x40 [ 3143.863273][T28888] ? swap_cache_get_folio+0x6e/0x200 [ 3143.868945][T28888] do_swap_page+0x4a0/0x1670 [ 3143.873739][T28888] ? __rcu_read_lock+0x35/0x50 [ 3143.878544][T28888] ? pte_offset_map_nolock+0x124/0x1d0 [ 3143.884070][T28888] handle_mm_fault+0xa36/0x2dd0 [ 3143.888997][T28888] exc_page_fault+0x3ff/0x6c0 [ 3143.893741][T28888] asm_exc_page_fault+0x26/0x30 [ 3143.898615][T28888] RIP: 0033:0x7f6f320edae4 [ 3143.903034][T28888] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3143.922997][T28888] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3143.929173][T28888] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3143.937155][T28888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3143.945121][T28888] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3143.953091][T28888] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002ff871 [ 3143.961091][T28888] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 00000000002ff530 [ 3143.969131][T28888] [ 3143.972282][T28888] memory: usage 307200kB, limit 307200kB, failcnt 87123 [ 3143.979281][T28888] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3143.987279][T28888] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3143.994564][T28888] Memory cgroup stats for /syz3: [ 3143.997694][T28888] cache 0 [ 3144.005571][T28888] rss 0 [ 3144.008322][T28888] shmem 0 [ 3144.011403][T28888] mapped_file 0 [ 3144.014882][T28888] dirty 0 [ 3144.017872][T28888] writeback 0 [ 3144.021149][T28888] workingset_refault_anon 73074 [ 3144.026115][T28888] workingset_refault_file 64 [ 3144.030764][T28888] swap 299008 [ 3144.034110][T28888] swapcached 8192 [ 3144.037766][T28888] pgpgin 476963 [ 3144.041216][T28888] pgpgout 476961 [ 3144.044759][T28888] pgfault 902686 [ 3144.048355][T28888] pgmajfault 30786 [ 3144.052150][T28888] inactive_anon 0 [ 3144.055843][T28888] active_anon 0 [ 3144.059291][T28888] inactive_file 0 [ 3144.062915][T28888] active_file 0 [ 3144.066418][T28888] unevictable 0 [ 3144.069916][T28888] hierarchical_memory_limit 314572800 [ 3144.075283][T28888] hierarchical_memsw_limit 9223372036854771712 [ 3144.081420][T28888] total_cache 0 [ 3144.084969][T28888] total_rss 0 [ 3144.088246][T28888] total_shmem 0 [ 3144.091690][T28888] total_mapped_file 0 [ 3144.095676][T28888] total_dirty 0 [ 3144.099123][T28888] total_writeback 0 [ 3144.103005][T28888] total_workingset_refault_anon 73074 [ 3144.108496][T28888] total_workingset_refault_file 64 [ 3144.113616][T28888] total_swap 299008 [ 3144.117453][T28888] total_swapcached 8192 [ 3144.121594][T28888] total_pgpgin 476963 [ 3144.125589][T28888] total_pgpgout 476961 [ 3144.129646][T28888] total_pgfault 902686 [ 3144.133779][T28888] total_pgmajfault 30786 [ 3144.138085][T28888] total_inactive_anon 0 [ 3144.142242][T28888] total_active_anon 0 [ 3144.146265][T28888] total_inactive_file 0 [ 3144.150464][T28888] total_active_file 0 [ 3144.154542][T28888] total_unevictable 0 [ 3144.158605][T28888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28888,uid=0 [ 3144.173896][T28888] Memory cgroup out of memory: Killed process 28888 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3144.191417][T28901] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3144.202834][T28901] CPU: 0 PID: 28901 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3144.213245][T28901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3144.223290][T28901] Call Trace: [ 3144.226634][T28901] [ 3144.229564][T28901] dump_stack_lvl+0xda/0x130 [ 3144.234187][T28901] dump_stack+0x15/0x20 [ 3144.238344][T28901] dump_header+0x82/0x2d0 [ 3144.242686][T28901] oom_kill_process+0x33a/0x4c0 [ 3144.247658][T28901] out_of_memory+0x9ca/0xbf0 [ 3144.252336][T28901] mem_cgroup_out_of_memory+0x139/0x190 [ 3144.257968][T28901] try_charge_memcg+0x75c/0xd30 [ 3144.262823][T28901] ? __swap_duplicate+0x29b/0x2b0 [ 3144.267847][T28901] ? radix_tree_lookup+0xf9/0x150 [ 3144.272892][T28901] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3144.278974][T28901] __read_swap_cache_async+0x2f6/0x550 [ 3144.284455][T28901] swap_cluster_readahead+0x27c/0x4c0 [ 3144.289899][T28901] swapin_readahead+0xe9/0x7f0 [ 3144.294727][T28901] ? __filemap_get_folio+0x41a/0x5a0 [ 3144.300011][T28901] ? swap_cache_get_folio+0x6e/0x200 [ 3144.305303][T28901] do_swap_page+0x4a0/0x1670 [ 3144.309939][T28901] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3144.315238][T28901] ? __rcu_read_lock+0x35/0x50 [ 3144.319993][T28901] ? pte_offset_map_nolock+0x124/0x1d0 [ 3144.325553][T28901] handle_mm_fault+0xa36/0x2dd0 [ 3144.330397][T28901] exc_page_fault+0x3ff/0x6c0 [ 3144.335071][T28901] asm_exc_page_fault+0x26/0x30 [ 3144.339932][T28901] RIP: 0033:0x7f0beb361ae4 [ 3144.344419][T28901] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3144.364087][T28901] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010206 [ 3144.370179][T28901] RAX: 0000000000000000 RBX: 00007f0beb4c6f80 RCX: 0000000000000000 [ 3144.378140][T28901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555fc5788 [ 3144.386102][T28901] RBP: 00007f0beb4c8980 R08: 0000000000000000 R09: 00007ffe135670b0 [ 3144.394233][T28901] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002ffa0c [ 3144.402210][T28901] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000002ff6cb [ 3144.410173][T28901] [ 3144.413312][T28901] memory: usage 307200kB, limit 307200kB, failcnt 170576 [ 3144.420401][T28901] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 3144.428311][T28901] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3144.435628][T28901] Memory cgroup stats for /syz5: [ 3144.439113][T28901] cache 0 [ 3144.447110][T28901] rss 12288 [ 3144.450349][T28901] shmem 0 [ 3144.453336][T28901] mapped_file 0 [ 3144.456803][T28901] dirty 0 [ 3144.459772][T28901] writeback 0 [ 3144.463046][T28901] workingset_refault_anon 110485 [ 3144.468032][T28901] workingset_refault_file 28 [ 3144.472674][T28901] swap 253952 [ 3144.475960][T28901] swapcached 12288 [ 3144.479704][T28901] pgpgin 189078 [ 3144.483152][T28901] pgpgout 189075 [ 3144.486757][T28901] pgfault 383326 [ 3144.490362][T28901] pgmajfault 49158 [ 3144.494069][T28901] inactive_anon 12288 [ 3144.498054][T28901] active_anon 0 [ 3144.501527][T28901] inactive_file 0 [ 3144.505180][T28901] active_file 0 [ 3144.508643][T28901] unevictable 0 [ 3144.512093][T28901] hierarchical_memory_limit 314572800 [ 3144.517465][T28901] hierarchical_memsw_limit 9223372036854771712 [ 3144.523698][T28901] total_cache 0 [ 3144.527196][T28901] total_rss 12288 [ 3144.530820][T28901] total_shmem 0 [ 3144.534331][T28901] total_mapped_file 0 [ 3144.538473][T28901] total_dirty 0 [ 3144.541990][T28901] total_writeback 0 [ 3144.545809][T28901] total_workingset_refault_anon 110485 [ 3144.551254][T28901] total_workingset_refault_file 28 [ 3144.556400][T28901] total_swap 253952 [ 3144.560217][T28901] total_swapcached 12288 [ 3144.564477][T28901] total_pgpgin 189078 [ 3144.568483][T28901] total_pgpgout 189075 [ 3144.572627][T28901] total_pgfault 383326 [ 3144.576708][T28901] total_pgmajfault 49158 [ 3144.580944][T28901] total_inactive_anon 12288 [ 3144.585575][T28901] total_active_anon 0 [ 3144.589688][T28901] total_inactive_file 0 [ 3144.593833][T28901] total_active_file 0 00:21:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:15 executing program 0: r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pI4 \x00'}, 0x20) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r4, 0x2, 0x7ff, 0xfffffe00, 0x4}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xde55, 0x7fffffff}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r4, 0x4000, r5}, 0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) io_uring_enter(r0, 0x4e29, 0x66ad, 0x7, &(0x7f0000000380)={[0x9]}, 0x8) 00:21:15 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000006c00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3144.597828][T28901] total_unevictable 0 [ 3144.601794][T28901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28901,uid=0 [ 3144.617122][T28901] Memory cgroup out of memory: Killed process 28901 (syz-executor.5) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3144.687467][T28924] __nla_validate_parse: 2 callbacks suppressed [ 3144.687479][T28924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0xa}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x234}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x6800}}}, 0x24}}, 0x0) 00:21:16 executing program 0: r0 = syz_io_uring_setup(0x31c1, &(0x7f0000000900)={0x0, 0x0, 0x200}, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) syz_emit_ethernet(0x3b6, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) r4 = accept4$inet(r3, 0x0, &(0x7f00000003c0), 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000400), &(0x7f00000009c0)=0x4) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$inet(r6, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x6, [{@loopback, 0x6}, {@broadcast, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x43}}]}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x2, [{@empty, 0x800}]}, @generic={0x7, 0xe, "ddff16f13937459f1e22b7ea"}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x7, 0x3, "1d"}, {0x0, 0x7, "a3ba6d2661"}]}, @ssrr={0x89, 0x7, 0xea, [@multicast1]}, @noop, @lsrr={0x83, 0x17, 0x45, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x27, 0xd2, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @remote, @empty, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ra={0x94, 0x4, 0x8001}, @cipso={0x86, 0x10, 0x2, [{0x5, 0x8, "1e8b7f72cb16"}, {0x7, 0x2}]}, @generic={0x94, 0xb, "e7e37a2818e755f241"}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0xe, [{@private=0xa010101, 0x671}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x0, 0xc, "02fafb3ff0088487a313"}, {0x1, 0xe, "b2a4f2c1ca9f00b1ea27b413"}, {0x0, 0x4, "1b43"}, {0x7, 0x3, '{'}]}, @noop, @ssrr={0x89, 0x17, 0xf9, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @broadcast]}, @generic={0xd59e4f506689d395, 0xa, "0163d95c51db4872"}]}}}], 0x158}, 0x48000) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0xfffffffffffffd85, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000ac0)={r10, 0x7fff, 0x20}, &(0x7f0000000b00)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000b40)={0x401, 0x2, 0x6, 0x6, r13}, 0x10) sendto$inet(r4, &(0x7f0000000e40)="61fd74b521bc3e2562af7bb35f34b5946403bcd7f7ee2a8d18ddf7336200b5c0e6b91b2017b11049635c052a3fc0c70c0e264ba6f0900ca0f65d8ba0e1c02c05bfb9cbf80e516fcb9bfec7ae65cb717fd878cd82dd9ab57fc87614eef9b5e797364c8ab0ddfc7d8cf9f836caa568186225db3d81efa42e716532d6e3e76a8c95227f47e6934ab8a0e9f9df4af36d3d7b75fdce4c30c743d18ac7fa0cbcd1ebe90f11464586d55a5dbb352a49d9610a3d7a94edf97df1e4fd7bdbaff861f2fa1a2c3f26317fabfd7be5ebf2d60ddbcd036c3274024f6fda4304e1e75f643c47f03213e73e91050dc26cce32f69db7505560b89806f7a6b815c5", 0xf9, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a00)={r14, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x3, @mcast2, 0x1000}]}, &(0x7f0000000a40)=0x10) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:16 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000007400000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1b00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3144.927861][T28930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3144.946480][T28933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3144.959377][T28934] Cannot find set identified by id 0 to match 00:21:16 executing program 0: r0 = syz_io_uring_setup(0x31c1, &(0x7f0000000900)={0x0, 0x0, 0x200}, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) syz_emit_ethernet(0x3b6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000003803afffe800000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000000a028ce540065980800000c70000004023493b87aafa7f0a000000ffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af05020001000000000000001995319c000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000000bd47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb00145e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a3260e27e65f81081196ebd3e631082c4764c839a84a7838483da84a6e1ff9c3390219aa53b0f8144e15f243389410d9ceb1c75e477d3db103107608dbf7e319c558d8fbf16b49f9f87596cfd9fdcc533d5e0021cd2f8f48dc634bb53fea3eab915a4cea3f186c9e2c7e7500698bfbd31bdcca695e90ecdb466e358dd29e8e21d6fde7caabc46c868fea367cefb9d0af81ba8f8b915c1393258fe58f44ed03ae79bbd45236e8d4948188e581541ccda6597c9a673c1292ebd68c3fd5d6764a77"], 0x0) accept4$inet(r3, 0x0, &(0x7f00000003c0), 0x80000) (async) r4 = accept4$inet(r3, 0x0, &(0x7f00000003c0), 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000400), &(0x7f00000009c0)=0x4) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$inet(r6, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x6, [{@loopback, 0x6}, {@broadcast, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x43}}]}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x2, [{@empty, 0x800}]}, @generic={0x7, 0xe, "ddff16f13937459f1e22b7ea"}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x7, 0x3, "1d"}, {0x0, 0x7, "a3ba6d2661"}]}, @ssrr={0x89, 0x7, 0xea, [@multicast1]}, @noop, @lsrr={0x83, 0x17, 0x45, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x27, 0xd2, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @remote, @empty, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ra={0x94, 0x4, 0x8001}, @cipso={0x86, 0x10, 0x2, [{0x5, 0x8, "1e8b7f72cb16"}, {0x7, 0x2}]}, @generic={0x94, 0xb, "e7e37a2818e755f241"}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0xe, [{@private=0xa010101, 0x671}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x0, 0xc, "02fafb3ff0088487a313"}, {0x1, 0xe, "b2a4f2c1ca9f00b1ea27b413"}, {0x0, 0x4, "1b43"}, {0x7, 0x3, '{'}]}, @noop, @ssrr={0x89, 0x17, 0xf9, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @broadcast]}, @generic={0xd59e4f506689d395, 0xa, "0163d95c51db4872"}]}}}], 0x158}, 0x48000) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0xfffffffffffffd85, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000ac0)={r10, 0x7fff, 0x20}, &(0x7f0000000b00)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000b40)={0x401, 0x2, 0x6, 0x6, r13}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000b40)={0x401, 0x2, 0x6, 0x6, r13}, 0x10) sendto$inet(r4, &(0x7f0000000e40)="61fd74b521bc3e2562af7bb35f34b5946403bcd7f7ee2a8d18ddf7336200b5c0e6b91b2017b11049635c052a3fc0c70c0e264ba6f0900ca0f65d8ba0e1c02c05bfb9cbf80e516fcb9bfec7ae65cb717fd878cd82dd9ab57fc87614eef9b5e797364c8ab0ddfc7d8cf9f836caa568186225db3d81efa42e716532d6e3e76a8c95227f47e6934ab8a0e9f9df4af36d3d7b75fdce4c30c743d18ac7fa0cbcd1ebe90f11464586d55a5dbb352a49d9610a3d7a94edf97df1e4fd7bdbaff861f2fa1a2c3f26317fabfd7be5ebf2d60ddbcd036c3274024f6fda4304e1e75f643c47f03213e73e91050dc26cce32f69db7505560b89806f7a6b815c5", 0xf9, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a00)={r14, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x3, @mcast2, 0x1000}]}, &(0x7f0000000a40)=0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) 00:21:16 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000007a00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3144.985766][T28930] bond1: entered promiscuous mode [ 3145.013858][T28938] vlan0: entered promiscuous mode [ 3145.019065][T28938] vlan0: entered allmulticast mode [ 3145.024263][T28938] bond1: entered allmulticast mode [ 3145.054915][T28930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28930 comm=syz-executor.1 [ 3145.088714][T28943] Cannot find set identified by id 0 to match 00:21:16 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000e318f98b00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3145.108391][T28946] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3145.108768][T28945] Cannot find set identified by id 0 to match [ 3145.124255][ T27] audit: type=1400 audit(1701217276.241:483): avc: denied { read } for pid=28929 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 00:21:16 executing program 0: r0 = syz_io_uring_setup(0x31c1, &(0x7f0000000900)={0x0, 0x0, 0x200}, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) syz_emit_ethernet(0x3b6, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) (async) r4 = accept4$inet(r3, 0x0, &(0x7f00000003c0), 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000400), &(0x7f00000009c0)=0x4) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$inet(r6, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x6, [{@loopback, 0x6}, {@broadcast, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x43}}]}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x2, [{@empty, 0x800}]}, @generic={0x7, 0xe, "ddff16f13937459f1e22b7ea"}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x7, 0x3, "1d"}, {0x0, 0x7, "a3ba6d2661"}]}, @ssrr={0x89, 0x7, 0xea, [@multicast1]}, @noop, @lsrr={0x83, 0x17, 0x45, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x27, 0xd2, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @remote, @empty, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ra={0x94, 0x4, 0x8001}, @cipso={0x86, 0x10, 0x2, [{0x5, 0x8, "1e8b7f72cb16"}, {0x7, 0x2}]}, @generic={0x94, 0xb, "e7e37a2818e755f241"}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0xe, [{@private=0xa010101, 0x671}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x0, 0xc, "02fafb3ff0088487a313"}, {0x1, 0xe, "b2a4f2c1ca9f00b1ea27b413"}, {0x0, 0x4, "1b43"}, {0x7, 0x3, '{'}]}, @noop, @ssrr={0x89, 0x17, 0xf9, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @broadcast]}, @generic={0xd59e4f506689d395, 0xa, "0163d95c51db4872"}]}}}], 0x158}, 0x48000) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0xfffffffffffffd85, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000ac0)={r10, 0x7fff, 0x20}, &(0x7f0000000b00)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000b40)={0x401, 0x2, 0x6, 0x6, r13}, 0x10) (async) sendto$inet(r4, &(0x7f0000000e40)="61fd74b521bc3e2562af7bb35f34b5946403bcd7f7ee2a8d18ddf7336200b5c0e6b91b2017b11049635c052a3fc0c70c0e264ba6f0900ca0f65d8ba0e1c02c05bfb9cbf80e516fcb9bfec7ae65cb717fd878cd82dd9ab57fc87614eef9b5e797364c8ab0ddfc7d8cf9f836caa568186225db3d81efa42e716532d6e3e76a8c95227f47e6934ab8a0e9f9df4af36d3d7b75fdce4c30c743d18ac7fa0cbcd1ebe90f11464586d55a5dbb352a49d9610a3d7a94edf97df1e4fd7bdbaff861f2fa1a2c3f26317fabfd7be5ebf2d60ddbcd036c3274024f6fda4304e1e75f643c47f03213e73e91050dc26cce32f69db7505560b89806f7a6b815c5", 0xf9, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a00)={r14, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x3, @mcast2, 0x1000}]}, &(0x7f0000000a40)=0x10) (async) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180), 0x8) [ 3145.152595][T28930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3145.157933][T28948] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3145.194985][T28930] bond1 (unregistering): left allmulticast mode [ 3145.227935][T28930] bond1 (unregistering): Released all slaves [ 3145.498857][T28923] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3145.512386][T28923] CPU: 0 PID: 28923 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3145.523001][T28923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3145.533072][T28923] Call Trace: [ 3145.536347][T28923] [ 3145.539274][T28923] dump_stack_lvl+0xda/0x130 [ 3145.543870][T28923] dump_stack+0x15/0x20 [ 3145.548036][T28923] dump_header+0x82/0x2d0 [ 3145.552377][T28923] oom_kill_process+0x33a/0x4c0 [ 3145.557237][T28923] out_of_memory+0x9ca/0xbf0 [ 3145.561836][T28923] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3145.568004][T28923] mem_cgroup_out_of_memory+0x139/0x190 [ 3145.573574][T28923] try_charge_memcg+0x75c/0xd30 [ 3145.578495][T28923] obj_cgroup_charge_pages+0xab/0x130 [ 3145.583905][T28923] __memcg_kmem_charge_page+0x9c/0x170 [ 3145.589371][T28923] __alloc_pages+0x1bb/0x340 [ 3145.594019][T28923] alloc_pages_mpol+0xb1/0x1d0 [ 3145.598799][T28923] alloc_pages+0xe0/0x100 [ 3145.603147][T28923] __vmalloc_node_range+0x6d2/0xea0 [ 3145.608403][T28923] kvmalloc_node+0x121/0x160 [ 3145.612997][T28923] ? xt_alloc_table_info+0x3d/0x80 [ 3145.618250][T28923] xt_alloc_table_info+0x3d/0x80 [ 3145.623194][T28923] do_arpt_set_ctl+0x634/0x13b0 [ 3145.628113][T28923] ? __futex_wait+0x227/0x280 [ 3145.632790][T28923] ? __futex_wake_mark+0x70/0x70 [ 3145.637833][T28923] ? tcp_release_cb+0xfe/0x370 [ 3145.642606][T28923] ? _raw_spin_unlock_bh+0x36/0x40 [ 3145.647832][T28923] nf_setsockopt+0x18d/0x1b0 [ 3145.652438][T28923] ip_setsockopt+0xe6/0x100 [ 3145.657098][T28923] tcp_setsockopt+0x90/0xa0 [ 3145.661605][T28923] sock_common_setsockopt+0x61/0x70 [ 3145.666845][T28923] ? sock_common_recvmsg+0xe0/0xe0 [ 3145.672013][T28923] __sys_setsockopt+0x1d4/0x240 [ 3145.676903][T28923] __x64_sys_setsockopt+0x66/0x80 [ 3145.681969][T28923] do_syscall_64+0x44/0x110 [ 3145.686486][T28923] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3145.692440][T28923] RIP: 0033:0x7f6f32133ae9 [ 3145.696861][T28923] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3145.716688][T28923] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3145.725108][T28923] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3145.733146][T28923] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3145.741235][T28923] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3145.749223][T28923] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3145.757271][T28923] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3145.765253][T28923] [ 3145.768346][T28923] memory: usage 307200kB, limit 307200kB, failcnt 87395 [ 3145.775460][T28923] memory+swap: usage 307540kB, limit 9007199254740988kB, failcnt 0 [ 3145.783353][T28923] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3145.790649][T28923] Memory cgroup stats for /syz3: [ 3145.797303][T28923] cache 0 [ 3145.805646][T28923] rss 4096 [ 3145.808822][T28923] shmem 0 [ 3145.811812][T28923] mapped_file 0 [ 3145.815486][T28923] dirty 0 [ 3145.818573][T28923] writeback 0 [ 3145.821964][T28923] workingset_refault_anon 73152 [ 3145.826858][T28923] workingset_refault_file 64 [ 3145.831435][T28923] swap 352256 [ 3145.834758][T28923] swapcached 12288 [ 3145.838512][T28923] pgpgin 477065 [ 3145.841998][T28923] pgpgout 477062 [ 3145.845657][T28923] pgfault 902854 [ 3145.849199][T28923] pgmajfault 30809 [ 3145.852900][T28923] inactive_anon 8192 [ 3145.856832][T28923] active_anon 4096 [ 3145.860623][T28923] inactive_file 0 [ 3145.864254][T28923] active_file 0 [ 3145.867722][T28923] unevictable 0 [ 3145.871179][T28923] hierarchical_memory_limit 314572800 [ 3145.876609][T28923] hierarchical_memsw_limit 9223372036854771712 [ 3145.882800][T28923] total_cache 0 [ 3145.886324][T28923] total_rss 4096 [ 3145.889919][T28923] total_shmem 0 [ 3145.893446][T28923] total_mapped_file 0 [ 3145.897458][T28923] total_dirty 0 [ 3145.901049][T28923] total_writeback 0 [ 3145.904881][T28923] total_workingset_refault_anon 73152 [ 3145.910266][T28923] total_workingset_refault_file 64 [ 3145.915393][T28923] total_swap 352256 [ 3145.919196][T28923] total_swapcached 12288 [ 3145.923430][T28923] total_pgpgin 477065 [ 3145.927456][T28923] total_pgpgout 477062 [ 3145.931512][T28923] total_pgfault 902854 [ 3145.935657][T28923] total_pgmajfault 30809 [ 3145.939885][T28923] total_inactive_anon 8192 [ 3145.944299][T28923] total_active_anon 4096 [ 3145.948548][T28923] total_inactive_file 0 [ 3145.952728][T28923] total_active_file 0 [ 3145.956811][T28923] total_unevictable 0 [ 3145.960968][T28923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28919,uid=0 [ 3145.976289][T28923] Memory cgroup out of memory: Killed process 28919 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x558, 0x3a0, 0x61, 0x148, 0x1a030016, 0x148, 0x4c0, 0x225, 0x211, 0x4c0, 0x240, 0x3, 0x0, {[{{@ip={@local={0xac, 0x9}, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x3400000000000000}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@broadcast, [], @ipv6=@dev, [], @ipv4=@loopback, [], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x6}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 00:21:17 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000008bf918e300000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:17 executing program 1: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:21:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1c00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0xc}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:17 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:21:17 executing program 0: r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) 00:21:17 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000f9e300000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3146.235809][T28960] Cannot find add_set index 0 as target [ 3146.246867][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x3f, 0x4) 00:21:17 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "e95ac9ddfc6143f66d3229a7f28ecec46425ce41017d16b29f8c5268c05a473353cc00f46ccbb176137991cb45dd6e0a78f8ffb9d90265e67edd0367de2b23f2"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0) 00:21:17 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000500)='id_resolver\x00', 0x0, 0xfffffffffffffff8) 00:21:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc) 00:21:17 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000fffffff000000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3146.323281][T28973] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 3146.443051][T28984] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3146.455079][ T27] audit: type=1400 audit(1701217277.581:484): avc: denied { create } for pid=28981 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3147.047843][T28958] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3147.059400][T28958] CPU: 0 PID: 28958 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3147.069805][T28958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3147.079914][T28958] Call Trace: [ 3147.083182][T28958] [ 3147.086121][T28958] dump_stack_lvl+0xda/0x130 [ 3147.090726][T28958] dump_stack+0x15/0x20 [ 3147.094873][T28958] dump_header+0x82/0x2d0 [ 3147.099266][T28958] oom_kill_process+0x33a/0x4c0 [ 3147.104109][T28958] out_of_memory+0x9ca/0xbf0 [ 3147.108709][T28958] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3147.114792][T28958] mem_cgroup_out_of_memory+0x139/0x190 [ 3147.120387][T28958] try_charge_memcg+0x75c/0xd30 [ 3147.125265][T28958] ? __swap_duplicate+0x29b/0x2b0 [ 3147.130354][T28958] ? radix_tree_lookup+0xf9/0x150 [ 3147.135408][T28958] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3147.141483][T28958] __read_swap_cache_async+0x2f6/0x550 [ 3147.146979][T28958] swap_cluster_readahead+0x27c/0x4c0 [ 3147.152425][T28958] swapin_readahead+0xe9/0x7f0 [ 3147.157190][T28958] ? __filemap_get_folio+0x41a/0x5a0 [ 3147.162468][T28958] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3147.168170][T28958] ? swap_cache_get_folio+0x6e/0x200 [ 3147.173450][T28958] do_swap_page+0x4a0/0x1670 [ 3147.178042][T28958] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3147.183323][T28958] ? __rcu_read_lock+0x35/0x50 [ 3147.188147][T28958] ? pte_offset_map_nolock+0x124/0x1d0 [ 3147.193693][T28958] handle_mm_fault+0xa36/0x2dd0 [ 3147.198584][T28958] exc_page_fault+0x3ff/0x6c0 [ 3147.203274][T28958] asm_exc_page_fault+0x26/0x30 [ 3147.208122][T28958] RIP: 0033:0x7f0beb361ae4 [ 3147.212524][T28958] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3147.232217][T28958] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010206 [ 3147.238458][T28958] RAX: 0000000000000000 RBX: 00007f0beb4c6f80 RCX: 0000000000000000 [ 3147.246423][T28958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555fc5788 [ 3147.254389][T28958] RBP: 00007f0beb4c8980 R08: 0000000000000000 R09: 00007ffe135670b0 [ 3147.262410][T28958] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000300529 [ 3147.270370][T28958] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000003001e8 [ 3147.278335][T28958] [ 3147.281467][T28958] memory: usage 307200kB, limit 307200kB, failcnt 171097 [ 3147.288494][T28958] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 3147.296521][T28958] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3147.303933][T28958] Memory cgroup stats for /syz5: [ 3147.372777][T28958] cache 0 [ 3147.380802][T28958] rss 12288 [ 3147.383903][T28958] shmem 0 [ 3147.386915][T28958] mapped_file 0 [ 3147.390383][T28958] dirty 0 [ 3147.393328][T28958] writeback 4096 [ 3147.397029][T28958] workingset_refault_anon 110610 [ 3147.402043][T28958] workingset_refault_file 28 [ 3147.406703][T28958] swap 237568 [ 3147.409984][T28958] swapcached 20480 [ 3147.413712][T28958] pgpgin 189251 [ 3147.417182][T28958] pgpgout 189246 [ 3147.420719][T28958] pgfault 383638 [ 3147.424259][T28958] pgmajfault 49198 [ 3147.428034][T28958] inactive_anon 0 [ 3147.431652][T28958] active_anon 0 [ 3147.435125][T28958] inactive_file 0 [ 3147.438820][T28958] active_file 0 [ 3147.442263][T28958] unevictable 0 [ 3147.445739][T28958] hierarchical_memory_limit 314572800 [ 3147.451120][T28958] hierarchical_memsw_limit 9223372036854771712 [ 3147.457342][T28958] total_cache 0 [ 3147.460793][T28958] total_rss 12288 [ 3147.464412][T28958] total_shmem 0 [ 3147.467923][T28958] total_mapped_file 0 [ 3147.471889][T28958] total_dirty 0 [ 3147.475351][T28958] total_writeback 4096 [ 3147.479408][T28958] total_workingset_refault_anon 110610 [ 3147.485060][T28958] total_workingset_refault_file 28 [ 3147.490231][T28958] total_swap 237568 [ 3147.494050][T28958] total_swapcached 20480 [ 3147.498383][T28958] total_pgpgin 189251 [ 3147.502372][T28958] total_pgpgout 189246 [ 3147.506471][T28958] total_pgfault 383638 [ 3147.510601][T28958] total_pgmajfault 49198 [ 3147.514840][T28958] total_inactive_anon 0 [ 3147.519000][T28958] total_active_anon 0 [ 3147.522968][T28958] total_inactive_file 0 [ 3147.527118][T28958] total_active_file 0 [ 3147.531084][T28958] total_unevictable 0 [ 3147.535131][T28958] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28958,uid=0 [ 3147.550399][T28958] Memory cgroup out of memory: Killed process 28958 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3147.576058][T28964] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3147.589688][T28964] CPU: 0 PID: 28964 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3147.600102][T28964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3147.610155][T28964] Call Trace: [ 3147.613425][T28964] [ 3147.616411][T28964] dump_stack_lvl+0xda/0x130 [ 3147.621006][T28964] dump_stack+0x15/0x20 [ 3147.625190][T28964] dump_header+0x82/0x2d0 [ 3147.629635][T28964] oom_kill_process+0x33a/0x4c0 [ 3147.634485][T28964] out_of_memory+0x9ca/0xbf0 [ 3147.639077][T28964] mem_cgroup_out_of_memory+0x139/0x190 [ 3147.644625][T28964] try_charge_memcg+0x75c/0xd30 [ 3147.649479][T28964] obj_cgroup_charge_pages+0xab/0x130 [ 3147.654899][T28964] __memcg_kmem_charge_page+0x9c/0x170 [ 3147.660353][T28964] __alloc_pages+0x1bb/0x340 [ 3147.664933][T28964] alloc_pages_mpol+0xb1/0x1d0 [ 3147.669741][T28964] alloc_pages+0xe0/0x100 [ 3147.674192][T28964] __vmalloc_node_range+0x6d2/0xea0 [ 3147.679398][T28964] kvmalloc_node+0x121/0x160 [ 3147.683979][T28964] ? xt_alloc_table_info+0x3d/0x80 [ 3147.689108][T28964] xt_alloc_table_info+0x3d/0x80 [ 3147.694570][T28964] do_arpt_set_ctl+0x634/0x13b0 [ 3147.699442][T28964] ? __futex_wait+0x227/0x280 [ 3147.704112][T28964] ? __futex_wake_mark+0x70/0x70 [ 3147.709041][T28964] ? tcp_release_cb+0xfe/0x370 [ 3147.713828][T28964] ? _raw_spin_unlock_bh+0x36/0x40 [ 3147.719025][T28964] nf_setsockopt+0x18d/0x1b0 [ 3147.723641][T28964] ip_setsockopt+0xe6/0x100 [ 3147.728160][T28964] tcp_setsockopt+0x90/0xa0 [ 3147.732687][T28964] sock_common_setsockopt+0x61/0x70 [ 3147.737898][T28964] ? sock_common_recvmsg+0xe0/0xe0 [ 3147.743021][T28964] __sys_setsockopt+0x1d4/0x240 [ 3147.747872][T28964] __x64_sys_setsockopt+0x66/0x80 [ 3147.752888][T28964] do_syscall_64+0x44/0x110 [ 3147.757383][T28964] ? syscall_exit_to_user_mode+0x38/0x140 [ 3147.763098][T28964] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3147.769024][T28964] RIP: 0033:0x7f2cd3f63ae9 [ 3147.773478][T28964] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3147.793126][T28964] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3147.801526][T28964] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3147.809485][T28964] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3147.817448][T28964] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3147.825497][T28964] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3147.833501][T28964] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3147.841466][T28964] [ 3147.844588][T28964] memory: usage 307200kB, limit 307200kB, failcnt 162088 [ 3147.851661][T28964] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 3147.859622][T28964] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 3147.866972][T28964] Memory cgroup stats for /syz2: [ 3147.867886][T28964] cache 0 [ 3147.875767][T28964] rss 0 [ 3147.878541][T28964] shmem 0 [ 3147.881636][T28964] mapped_file 0 [ 3147.885114][T28964] dirty 0 [ 3147.888066][T28964] writeback 0 [ 3147.891340][T28964] workingset_refault_anon 110856 [ 3147.896479][T28964] workingset_refault_file 41 [ 3147.901529][T28964] swap 192512 [ 3147.904954][T28964] swapcached 45056 [ 3147.908672][T28964] pgpgin 206500 [ 3147.912196][T28964] pgpgout 206489 [ 3147.915762][T28964] pgfault 416987 [ 3147.919296][T28964] pgmajfault 46671 [ 3147.923018][T28964] inactive_anon 45056 [ 3147.927023][T28964] active_anon 0 [ 3147.930482][T28964] inactive_file 0 [ 3147.934191][T28964] active_file 0 [ 3147.937661][T28964] unevictable 0 [ 3147.941112][T28964] hierarchical_memory_limit 314572800 [ 3147.946529][T28964] hierarchical_memsw_limit 9223372036854771712 [ 3147.952677][T28964] total_cache 0 [ 3147.956225][T28964] total_rss 0 [ 3147.959501][T28964] total_shmem 0 [ 3147.963072][T28964] total_mapped_file 0 [ 3147.967061][T28964] total_dirty 0 [ 3147.970520][T28964] total_writeback 0 [ 3147.974355][T28964] total_workingset_refault_anon 110856 [ 3147.979834][T28964] total_workingset_refault_file 41 [ 3147.985061][T28964] total_swap 192512 [ 3147.988921][T28964] total_swapcached 45056 [ 3147.993150][T28964] total_pgpgin 206500 [ 3147.997237][T28964] total_pgpgout 206489 [ 3148.001298][T28964] total_pgfault 416987 [ 3148.005390][T28964] total_pgmajfault 46671 [ 3148.009674][T28964] total_inactive_anon 45056 [ 3148.014149][T28964] total_active_anon 0 [ 3148.018208][T28964] total_inactive_file 0 [ 3148.022362][T28964] total_active_file 0 00:21:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1d00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:19 executing program 1: pipe2(&(0x7f0000000d00), 0x80) [ 3148.026371][T28964] total_unevictable 0 [ 3148.030346][T28964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28963,uid=0 [ 3148.046012][T28964] Memory cgroup out of memory: Killed process 28963 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:19 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) read$ptp(r0, 0x0, 0x0) 00:21:19 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000007fffffff00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x41]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0xd}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:19 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000008c0)=0x1) 00:21:19 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000840)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1f"}}, 0x119) 00:21:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:21:19 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f00000011c0)) 00:21:19 executing program 1: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r1) 00:21:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) [ 3148.300527][T29008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29008 comm=syz-executor.1 [ 3148.334324][T29011] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3148.356664][ T27] audit: type=1400 audit(1701217279.481:485): avc: denied { getopt } for pid=29009 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 00:21:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1e00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:20 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe8800000000000000f0ffffff00000104000600fe00"/124], 0x84}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000180)) [ 3149.177249][T29002] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3149.188797][T29002] CPU: 1 PID: 29002 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3149.199327][T29002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3149.209400][T29002] Call Trace: [ 3149.212678][T29002] [ 3149.215614][T29002] dump_stack_lvl+0xda/0x130 [ 3149.220217][T29002] dump_stack+0x15/0x20 [ 3149.224388][T29002] dump_header+0x82/0x2d0 [ 3149.228727][T29002] oom_kill_process+0x33a/0x4c0 [ 3149.233615][T29002] out_of_memory+0x9ca/0xbf0 [ 3149.238217][T29002] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3149.244328][T29002] mem_cgroup_out_of_memory+0x139/0x190 [ 3149.249939][T29002] try_charge_memcg+0x75c/0xd30 [ 3149.254846][T29002] ? __swap_duplicate+0x29b/0x2b0 [ 3149.259943][T29002] ? radix_tree_lookup+0xf9/0x150 [ 3149.264985][T29002] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3149.271100][T29002] __read_swap_cache_async+0x2f6/0x550 [ 3149.276673][T29002] swap_cluster_readahead+0x27c/0x4c0 [ 3149.282128][T29002] swapin_readahead+0xe9/0x7f0 [ 3149.286997][T29002] ? __filemap_get_folio+0x41a/0x5a0 [ 3149.292369][T29002] ? swap_cache_get_folio+0x6e/0x200 [ 3149.297681][T29002] do_swap_page+0x4a0/0x1670 [ 3149.302402][T29002] ? asm_exc_page_fault+0x26/0x30 [ 3149.307540][T29002] ? __rcu_read_lock+0x35/0x50 [ 3149.312660][T29002] ? pte_offset_map_nolock+0x124/0x1d0 [ 3149.318172][T29002] handle_mm_fault+0xa36/0x2dd0 [ 3149.323042][T29002] exc_page_fault+0x3ff/0x6c0 [ 3149.327805][T29002] asm_exc_page_fault+0x26/0x30 [ 3149.332709][T29002] RIP: 0033:0x7f2cd3f0e228 [ 3149.337141][T29002] Code: 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 89 38 <48> 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 8d 3d [ 3149.356881][T29002] RSP: 002b:00007ffcf5b11348 EFLAGS: 00010287 [ 3149.362963][T29002] RAX: 0000001b2cc2225c RBX: 0000000000000001 RCX: 0000001b2cc20000 [ 3149.370940][T29002] RDX: 0000001b2cc22260 RSI: 0000000000000000 RDI: 000000000badf00d [ 3149.378930][T29002] RBP: 00000000000003e7 R08: 0000001b2d020000 R09: 00007ffcf5b320b0 [ 3149.386979][T29002] R10: 00007ffcf5b32080 R11: 00000000000934ec R12: 0000000000300d29 [ 3149.394960][T29002] R13: 00007f2cd4082f80 R14: 00007f2cd3ae7000 R15: 00000000003009e8 [ 3149.402984][T29002] [ 3149.406259][T29002] memory: usage 307200kB, limit 307200kB, failcnt 162221 [ 3149.413283][T29002] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 3149.421234][T29002] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3149.428584][T29002] Memory cgroup stats for /syz2: [ 3149.431424][T29002] cache 0 [ 3149.439334][T29002] rss 0 [ 3149.442093][T29002] shmem 0 [ 3149.445091][T29002] mapped_file 0 [ 3149.448633][T29002] dirty 0 [ 3149.451661][T29002] writeback 8192 [ 3149.455309][T29002] workingset_refault_anon 110921 [ 3149.460243][T29002] workingset_refault_file 41 [ 3149.464911][T29002] swap 225280 [ 3149.468322][T29002] swapcached 12288 [ 3149.472054][T29002] pgpgin 206589 [ 3149.475604][T29002] pgpgout 206586 [ 3149.479151][T29002] pgfault 417142 [ 3149.482744][T29002] pgmajfault 46694 [ 3149.486494][T29002] inactive_anon 0 [ 3149.490130][T29002] active_anon 0 [ 3149.493658][T29002] inactive_file 0 [ 3149.497313][T29002] active_file 0 [ 3149.500812][T29002] unevictable 0 [ 3149.504297][T29002] hierarchical_memory_limit 314572800 [ 3149.509688][T29002] hierarchical_memsw_limit 9223372036854771712 [ 3149.515862][T29002] total_cache 0 [ 3149.519374][T29002] total_rss 0 [ 3149.522659][T29002] total_shmem 0 [ 3149.526218][T29002] total_mapped_file 0 [ 3149.530240][T29002] total_dirty 0 [ 3149.533730][T29002] total_writeback 8192 [ 3149.537847][T29002] total_workingset_refault_anon 110921 [ 3149.543387][T29002] total_workingset_refault_file 41 [ 3149.548612][T29002] total_swap 225280 [ 3149.552474][T29002] total_swapcached 12288 [ 3149.556735][T29002] total_pgpgin 206589 [ 3149.560709][T29002] total_pgpgout 206586 [ 3149.564831][T29002] total_pgfault 417142 [ 3149.568922][T29002] total_pgmajfault 46694 [ 3149.573160][T29002] total_inactive_anon 0 [ 3149.577423][T29002] total_active_anon 0 [ 3149.581412][T29002] total_inactive_file 0 [ 3149.585592][T29002] total_active_file 0 [ 3149.589625][T29002] total_unevictable 0 [ 3149.593594][T29002] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29002,uid=0 [ 3149.608991][T29002] Memory cgroup out of memory: Killed process 29002 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:21 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0xf}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:21 executing program 0: pipe2(0x0, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 00:21:21 executing program 1: syz_io_uring_setup(0x10ee, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x0, 0x0) 00:21:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x42]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0xe}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'erspan0\x00', 0x0}) 00:21:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0af384ab3cecc3c218571500000000775f890317199f3b40947aa68172030fa798e4881e1cf51e4135c68286b995beb0b06a3805e8153b4769f816bfe981118cafd1799c3125e593ee75764348bbc45f6f558c54ff137136550ba4c40397b05152c7827191ba06b20e2eca16e736191da24cafff0077ecf403061dfd64bde37a3057b07410a53bd5f3f2d784cf34f460923ad0b2aefe35a2eeb03c5189664dae34fdf0263633ae76b0134c3d39a46605ae04e9cf9c2a2ff35e7f114578af09512bae0f90f41599cbe21f4cf3515f18e5482fa56089939ca55d13c4f911f3a9c5011fb2e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) socket$inet(0x2, 0x4000000000000001, 0x0) 00:21:21 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x10}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:21 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 00:21:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x2c}}, 0x0) 00:21:21 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x14}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:21 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x140}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:21 executing program 1: r0 = epoll_create(0x8) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x80000000]}, 0x8) 00:21:21 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0xec0}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3150.034051][T29055] __nla_validate_parse: 1 callbacks suppressed [ 3150.034117][T29055] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3150.133089][T29060] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xd6]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:22 executing program 1: r0 = gettid() pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r0, 0x7, r1, &(0x7f00000000c0)) 00:21:22 executing program 0: r0 = gettid() pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r1, &(0x7f00000000c0)={r2}) 00:21:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x12}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:22 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x33fe0}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:22 executing program 1: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 00:21:22 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 3150.950098][T29066] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:22 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2}) 00:21:22 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0xfffffdef}, 0x1, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:22 executing program 1: syz_io_uring_setup(0x10ee, &(0x7f00000000c0)={0x0, 0x0, 0x1016, 0x4}, 0x0, 0x0) 00:21:22 executing program 0: io_uring_setup(0x2119, &(0x7f0000000d80)) syz_io_uring_setup(0x67cb, &(0x7f0000000e40)={0x0, 0x770d, 0x8}, &(0x7f0000000ec0), &(0x7f0000000f00)) [ 3150.988452][ T27] audit: type=1400 audit(1701217282.121:486): avc: denied { read } for pid=29068 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3151.797472][T29072] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3151.811111][T29072] CPU: 0 PID: 29072 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3151.821721][T29072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3151.831784][T29072] Call Trace: [ 3151.835069][T29072] [ 3151.837995][T29072] dump_stack_lvl+0xda/0x130 [ 3151.842627][T29072] dump_stack+0x15/0x20 [ 3151.847123][T29072] dump_header+0x82/0x2d0 [ 3151.851497][T29072] oom_kill_process+0x33a/0x4c0 [ 3151.856343][T29072] out_of_memory+0x9ca/0xbf0 [ 3151.861191][T29072] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3151.867335][T29072] mem_cgroup_out_of_memory+0x139/0x190 [ 3151.872891][T29072] try_charge_memcg+0x75c/0xd30 [ 3151.877740][T29072] obj_cgroup_charge_pages+0xab/0x130 [ 3151.883167][T29072] __memcg_kmem_charge_page+0x9c/0x170 [ 3151.888694][T29072] __alloc_pages+0x1bb/0x340 [ 3151.893277][T29072] alloc_pages_mpol+0xb1/0x1d0 [ 3151.898041][T29072] alloc_pages+0xe0/0x100 [ 3151.902384][T29072] __vmalloc_node_range+0x6d2/0xea0 [ 3151.907667][T29072] kvmalloc_node+0x121/0x160 [ 3151.912259][T29072] ? xt_alloc_table_info+0x3d/0x80 [ 3151.917366][T29072] xt_alloc_table_info+0x3d/0x80 [ 3151.922385][T29072] do_arpt_set_ctl+0x634/0x13b0 [ 3151.927238][T29072] ? __futex_wait+0x227/0x280 [ 3151.931924][T29072] ? __futex_wake_mark+0x70/0x70 [ 3151.936851][T29072] ? tcp_release_cb+0xfe/0x370 [ 3151.941608][T29072] ? _raw_spin_unlock_bh+0x36/0x40 [ 3151.946777][T29072] nf_setsockopt+0x18d/0x1b0 [ 3151.951362][T29072] ip_setsockopt+0xe6/0x100 [ 3151.955921][T29072] tcp_setsockopt+0x90/0xa0 [ 3151.960425][T29072] sock_common_setsockopt+0x61/0x70 [ 3151.965649][T29072] ? sock_common_recvmsg+0xe0/0xe0 [ 3151.970759][T29072] __sys_setsockopt+0x1d4/0x240 [ 3151.975622][T29072] __x64_sys_setsockopt+0x66/0x80 [ 3151.980661][T29072] do_syscall_64+0x44/0x110 [ 3151.985170][T29072] ? syscall_exit_to_user_mode+0x38/0x140 [ 3151.990897][T29072] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3151.996814][T29072] RIP: 0033:0x7f2cd3f63ae9 [ 3152.001224][T29072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3152.020957][T29072] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3152.029370][T29072] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3152.037343][T29072] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3152.045440][T29072] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3152.053516][T29072] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3152.061481][T29072] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3152.069450][T29072] [ 3152.072560][T29072] memory: usage 307192kB, limit 307200kB, failcnt 162503 [ 3152.079701][T29072] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 3152.087618][T29072] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3152.094898][T29072] Memory cgroup stats for /syz2: [ 3152.112802][T29072] cache 0 [ 3152.120729][T29072] rss 0 [ 3152.123558][T29072] shmem 0 [ 3152.126585][T29072] mapped_file 0 [ 3152.130032][T29072] dirty 0 [ 3152.132965][T29072] writeback 0 [ 3152.136261][T29072] workingset_refault_anon 111043 [ 3152.141190][T29072] workingset_refault_file 41 [ 3152.145797][T29072] swap 233472 [ 3152.149075][T29072] swapcached 4096 [ 3152.152691][T29072] pgpgin 206759 [ 3152.156217][T29072] pgpgout 206758 [ 3152.159755][T29072] pgfault 417455 [ 3152.163386][T29072] pgmajfault 46734 [ 3152.167128][T29072] inactive_anon 0 [ 3152.170828][T29072] active_anon 0 [ 3152.174271][T29072] inactive_file 0 [ 3152.177931][T29072] active_file 0 [ 3152.181378][T29072] unevictable 0 [ 3152.184904][T29072] hierarchical_memory_limit 314572800 [ 3152.190288][T29072] hierarchical_memsw_limit 9223372036854771712 [ 3152.196446][T29072] total_cache 0 [ 3152.199960][T29072] total_rss 0 [ 3152.203231][T29072] total_shmem 0 [ 3152.206685][T29072] total_mapped_file 0 [ 3152.210715][T29072] total_dirty 0 [ 3152.214161][T29072] total_writeback 0 [ 3152.218022][T29072] total_workingset_refault_anon 111043 [ 3152.223466][T29072] total_workingset_refault_file 41 [ 3152.228576][T29072] total_swap 233472 [ 3152.232377][T29072] total_swapcached 4096 [ 3152.236620][T29072] total_pgpgin 206759 [ 3152.240599][T29072] total_pgpgout 206758 [ 3152.244661][T29072] total_pgfault 417455 [ 3152.248748][T29072] total_pgmajfault 46734 [ 3152.252977][T29072] total_inactive_anon 0 [ 3152.257173][T29072] total_active_anon 0 [ 3152.261143][T29072] total_inactive_file 0 [ 3152.265379][T29072] total_active_file 0 [ 3152.269403][T29072] total_unevictable 0 [ 3152.273419][T29072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29067,uid=0 [ 3152.288790][T29072] Memory cgroup out of memory: Killed process 29067 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:23 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x2, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5433, 0x0) 00:21:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xd7]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) [ 3152.370558][T29089] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:23 executing program 1: r0 = socket(0x10, 0x80803, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x37fe0}}, 0x0) 00:21:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5433, 0x0) 00:21:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x16}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:23 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x3, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5433, 0x0) 00:21:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30020000110001"], 0x230}}, 0x0) 00:21:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5433, 0x0) 00:21:23 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x9, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3152.546137][T29099] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3152.562073][T29106] netlink: 528 bytes leftover after parsing attributes in process `syz-executor.1'. 00:21:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x12, 0x0, 0x0) 00:21:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x13, 0x0, 0x0) [ 3152.590787][T29112] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xd8]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:24 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0xc, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:24 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000320023ef"], 0x34}}, 0x0) [ 3153.452201][T29122] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3153.476245][T29120] tc_dump_action: action bad kind 00:21:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 00:21:24 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x10, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:24 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'caif0\x00'}) 00:21:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x1b}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:24 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 00:21:24 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='macvlan0\x00'}) accept4(r0, &(0x7f0000000140)=@nfc, &(0x7f0000000080)=0x80, 0x80800) 00:21:24 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x25, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:24 executing program 0: r0 = socket(0x10, 0x2, 0xc) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800000010"], 0x37fe0}}, 0x0) [ 3153.734056][T29134] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3153.789497][ T27] audit: type=1400 audit(1701217284.921:487): avc: denied { accept } for pid=29139 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:21:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:25 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x7ffffff2, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:25 executing program 1: bpf$BPF_PROG_DETACH(0xa, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) [ 3154.482829][T29127] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3154.494345][T29127] CPU: 1 PID: 29127 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3154.504764][T29127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3154.514878][T29127] Call Trace: [ 3154.518151][T29127] [ 3154.521068][T29127] dump_stack_lvl+0xda/0x130 [ 3154.525736][T29127] dump_stack+0x15/0x20 [ 3154.529900][T29127] dump_header+0x82/0x2d0 [ 3154.534258][T29127] oom_kill_process+0x33a/0x4c0 [ 3154.539190][T29127] out_of_memory+0x9ca/0xbf0 [ 3154.543800][T29127] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3154.549919][T29127] mem_cgroup_out_of_memory+0x139/0x190 [ 3154.555539][T29127] try_charge_memcg+0x75c/0xd30 [ 3154.560384][T29127] ? __swap_duplicate+0x29b/0x2b0 [ 3154.565528][T29127] ? radix_tree_lookup+0xf9/0x150 [ 3154.570553][T29127] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3154.576635][T29127] __read_swap_cache_async+0x2f6/0x550 [ 3154.582353][T29127] swap_cluster_readahead+0x27c/0x4c0 [ 3154.587774][T29127] swapin_readahead+0xe9/0x7f0 [ 3154.592649][T29127] ? __filemap_get_folio+0x41a/0x5a0 [ 3154.598021][T29127] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3154.603666][T29127] ? swap_cache_get_folio+0x6e/0x200 [ 3154.608995][T29127] do_swap_page+0x4a0/0x1670 [ 3154.613586][T29127] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3154.618869][T29127] ? __rcu_read_lock+0x35/0x50 [ 3154.623631][T29127] ? pte_offset_map_nolock+0x124/0x1d0 [ 3154.629151][T29127] handle_mm_fault+0xa36/0x2dd0 [ 3154.634057][T29127] exc_page_fault+0x3ff/0x6c0 [ 3154.638731][T29127] asm_exc_page_fault+0x26/0x30 [ 3154.643640][T29127] RIP: 0033:0x7f2cd3f1dae4 [ 3154.648070][T29127] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3154.667666][T29127] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010206 [ 3154.673735][T29127] RAX: 0000000000000000 RBX: 00007f2cd4082f80 RCX: 0000000000000000 [ 3154.681792][T29127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556726788 [ 3154.689752][T29127] RBP: 00007f2cd4084980 R08: 0000000000000000 R09: 00007ffcf5b320b0 [ 3154.697780][T29127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000302273 [ 3154.705812][T29127] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 0000000000301f32 [ 3154.713845][T29127] [ 3154.716943][T29127] memory: usage 307200kB, limit 307200kB, failcnt 162695 [ 3154.723971][T29127] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 3154.731973][T29127] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3154.739430][T29127] Memory cgroup stats for /syz2: [ 3154.752913][T29127] cache 0 [ 3154.760849][T29127] rss 8192 [ 3154.763946][T29127] shmem 0 [ 3154.766917][T29127] mapped_file 0 [ 3154.770376][T29127] dirty 0 [ 3154.773335][T29127] writeback 12288 [ 3154.776976][T29127] workingset_refault_anon 111125 [ 3154.781911][T29127] workingset_refault_file 41 [ 3154.786751][T29127] swap 217088 [ 3154.790031][T29127] swapcached 20480 [ 3154.793745][T29127] pgpgin 206889 [ 3154.797246][T29127] pgpgout 206884 [ 3154.800820][T29127] pgfault 417758 [ 3154.804493][T29127] pgmajfault 46780 [ 3154.808346][T29127] inactive_anon 0 [ 3154.811973][T29127] active_anon 4096 [ 3154.815777][T29127] inactive_file 0 [ 3154.820336][T29127] active_file 0 [ 3154.823852][T29127] unevictable 0 [ 3154.827416][T29127] hierarchical_memory_limit 314572800 [ 3154.832875][T29127] hierarchical_memsw_limit 9223372036854771712 [ 3154.839101][T29127] total_cache 0 [ 3154.842604][T29127] total_rss 8192 [ 3154.846190][T29127] total_shmem 0 [ 3154.849728][T29127] total_mapped_file 0 [ 3154.853822][T29127] total_dirty 0 [ 3154.857361][T29127] total_writeback 12288 [ 3154.861561][T29127] total_workingset_refault_anon 111125 [ 3154.867056][T29127] total_workingset_refault_file 41 [ 3154.872200][T29127] total_swap 217088 [ 3154.876417][T29127] total_swapcached 20480 [ 3154.880661][T29127] total_pgpgin 206889 [ 3154.884709][T29127] total_pgpgout 206884 [ 3154.888813][T29127] total_pgfault 417758 [ 3154.892878][T29127] total_pgmajfault 46780 [ 3154.897170][T29127] total_inactive_anon 0 [ 3154.901380][T29127] total_active_anon 4096 [ 3154.905723][T29127] total_inactive_file 0 [ 3154.910030][T29127] total_active_file 0 [ 3154.914053][T29127] total_unevictable 0 [ 3154.918063][T29127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29127,uid=0 [ 3154.933561][T29127] Memory cgroup out of memory: Killed process 29127 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3154.951036][T29135] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3154.964545][T29135] CPU: 0 PID: 29135 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3154.974996][T29135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3154.985219][T29135] Call Trace: [ 3154.988497][T29135] [ 3154.991417][T29135] dump_stack_lvl+0xda/0x130 [ 3154.996113][T29135] dump_stack+0x15/0x20 [ 3155.000263][T29135] dump_header+0x82/0x2d0 [ 3155.004762][T29135] oom_kill_process+0x33a/0x4c0 [ 3155.009696][T29135] out_of_memory+0x9ca/0xbf0 [ 3155.014316][T29135] mem_cgroup_out_of_memory+0x139/0x190 [ 3155.019875][T29135] try_charge_memcg+0x75c/0xd30 [ 3155.024780][T29135] obj_cgroup_charge_pages+0xab/0x130 [ 3155.030176][T29135] __memcg_kmem_charge_page+0x9c/0x170 [ 3155.035636][T29135] __alloc_pages+0x1bb/0x340 [ 3155.040338][T29135] alloc_pages_mpol+0xb1/0x1d0 [ 3155.045126][T29135] alloc_pages+0xe0/0x100 [ 3155.049447][T29135] __vmalloc_node_range+0x6d2/0xea0 [ 3155.054646][T29135] kvmalloc_node+0x121/0x160 [ 3155.059300][T29135] ? xt_alloc_table_info+0x3d/0x80 [ 3155.064414][T29135] xt_alloc_table_info+0x3d/0x80 [ 3155.069410][T29135] do_arpt_set_ctl+0x634/0x13b0 [ 3155.074316][T29135] ? __futex_wait+0x227/0x280 [ 3155.078985][T29135] ? __futex_wake_mark+0x70/0x70 [ 3155.084102][T29135] ? tcp_release_cb+0xfe/0x370 [ 3155.088865][T29135] ? _raw_spin_unlock_bh+0x36/0x40 [ 3155.093973][T29135] nf_setsockopt+0x18d/0x1b0 [ 3155.098566][T29135] ip_setsockopt+0xe6/0x100 [ 3155.103069][T29135] tcp_setsockopt+0x90/0xa0 [ 3155.107624][T29135] sock_common_setsockopt+0x61/0x70 [ 3155.112821][T29135] ? sock_common_recvmsg+0xe0/0xe0 [ 3155.117938][T29135] __sys_setsockopt+0x1d4/0x240 [ 3155.122782][T29135] __x64_sys_setsockopt+0x66/0x80 [ 3155.127797][T29135] do_syscall_64+0x44/0x110 [ 3155.132304][T29135] ? syscall_exit_to_user_mode+0x38/0x140 [ 3155.138084][T29135] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3155.143992][T29135] RIP: 0033:0x7f0beb3a7ae9 [ 3155.148447][T29135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3155.168045][T29135] RSP: 002b:00007f0bea72a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3155.176452][T29135] RAX: ffffffffffffffda RBX: 00007f0beb4c6f80 RCX: 00007f0beb3a7ae9 [ 3155.184426][T29135] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3155.192463][T29135] RBP: 00007f0beb3f347a R08: 0000000000000438 R09: 0000000000000000 [ 3155.200429][T29135] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3155.208387][T29135] R13: 000000000000000b R14: 00007f0beb4c6f80 R15: 00007ffe134d2ca8 [ 3155.216439][T29135] [ 3155.219503][T29135] memory: usage 307196kB, limit 307200kB, failcnt 171501 [ 3155.226573][T29135] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 3155.234492][T29135] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3155.241812][T29135] Memory cgroup stats for /syz5: [ 3155.242005][T29135] cache 0 [ 3155.249956][T29135] rss 12288 [ 3155.253136][T29135] shmem 0 [ 3155.256135][T29135] mapped_file 0 [ 3155.259602][T29135] dirty 0 [ 3155.262550][T29135] writeback 0 [ 3155.265877][T29135] workingset_refault_anon 110853 [ 3155.270836][T29135] workingset_refault_file 28 [ 3155.275473][T29135] swap 245760 [ 3155.278867][T29135] swapcached 12288 [ 3155.282584][T29135] pgpgin 189638 [ 3155.286075][T29135] pgpgout 189635 [ 3155.289614][T29135] pgfault 384460 [ 3155.293162][T29135] pgmajfault 49293 [ 3155.296912][T29135] inactive_anon 4096 [ 3155.300797][T29135] active_anon 8192 [ 3155.304510][T29135] inactive_file 0 [ 3155.308239][T29135] active_file 0 [ 3155.311803][T29135] unevictable 0 [ 3155.315273][T29135] hierarchical_memory_limit 314572800 [ 3155.320634][T29135] hierarchical_memsw_limit 9223372036854771712 [ 3155.326807][T29135] total_cache 0 [ 3155.330262][T29135] total_rss 12288 [ 3155.333987][T29135] total_shmem 0 [ 3155.337488][T29135] total_mapped_file 0 [ 3155.341461][T29135] total_dirty 0 [ 3155.344986][T29135] total_writeback 0 [ 3155.348790][T29135] total_workingset_refault_anon 110853 [ 3155.354326][T29135] total_workingset_refault_file 28 [ 3155.359626][T29135] total_swap 245760 [ 3155.363422][T29135] total_swapcached 12288 [ 3155.367865][T29135] total_pgpgin 189638 [ 3155.371839][T29135] total_pgpgout 189635 [ 3155.375931][T29135] total_pgfault 384460 [ 3155.379992][T29135] total_pgmajfault 49293 [ 3155.384278][T29135] total_inactive_anon 4096 [ 3155.388788][T29135] total_active_anon 8192 [ 3155.393027][T29135] total_inactive_file 0 [ 3155.397436][T29135] total_active_file 0 [ 3155.401423][T29135] total_unevictable 0 [ 3155.405411][T29135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29133,uid=0 [ 3155.420757][T29135] Memory cgroup out of memory: Killed process 29133 (syz-executor.5) total-vm:46428kB, anon-rss:504kB, file-rss:8916kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2300, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000002c0)='h', 0x1}], 0x2}}], 0x1, 0x0) 00:21:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000a5b0b3"], 0x14}}, 0x0) 00:21:26 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x7ffffff8, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x1c}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:26 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x7ffffff9, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:26 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @link_id}, 0x20) 00:21:26 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x7ffffffe, 0x10}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x8, 0x0, 0x0) [ 3155.710707][T29162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45221 sclass=netlink_tcpdiag_socket pid=29162 comm=syz-executor.1 00:21:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:26 executing program 0: bpf$BPF_PROG_DETACH(0xe, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) 00:21:26 executing program 1: socketpair(0x1e, 0x80802, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) [ 3156.712042][T29177] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3156.723421][T29177] CPU: 1 PID: 29177 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3156.733832][T29177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3156.743981][T29177] Call Trace: [ 3156.747252][T29177] [ 3156.750268][T29177] dump_stack_lvl+0xda/0x130 [ 3156.754938][T29177] dump_stack+0x15/0x20 [ 3156.759118][T29177] dump_header+0x82/0x2d0 [ 3156.763448][T29177] oom_kill_process+0x33a/0x4c0 [ 3156.768357][T29177] out_of_memory+0x9ca/0xbf0 [ 3156.772948][T29177] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3156.779016][T29177] mem_cgroup_out_of_memory+0x139/0x190 [ 3156.784565][T29177] try_charge_memcg+0x75c/0xd30 [ 3156.789502][T29177] ? __swap_duplicate+0x29b/0x2b0 [ 3156.794588][T29177] ? radix_tree_lookup+0xf9/0x150 [ 3156.799754][T29177] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3156.805811][T29177] __read_swap_cache_async+0x2f6/0x550 [ 3156.811287][T29177] swap_cluster_readahead+0x27c/0x4c0 [ 3156.816647][T29177] swapin_readahead+0xe9/0x7f0 [ 3156.821413][T29177] ? __filemap_get_folio+0x41a/0x5a0 [ 3156.826740][T29177] ? xfd_validate_state+0x46/0xf0 [ 3156.831758][T29177] ? swap_cache_get_folio+0x6e/0x200 [ 3156.837151][T29177] do_swap_page+0x4a0/0x1670 [ 3156.841817][T29177] ? __rcu_read_lock+0x35/0x50 [ 3156.846593][T29177] ? pte_offset_map_nolock+0x124/0x1d0 [ 3156.852037][T29177] handle_mm_fault+0xa36/0x2dd0 [ 3156.856883][T29177] ? mt_find+0x1d9/0x310 [ 3156.861120][T29177] exc_page_fault+0x2f7/0x6c0 [ 3156.865892][T29177] asm_exc_page_fault+0x26/0x30 [ 3156.870723][T29177] RIP: 0010:__get_user_8+0x11/0x20 [ 3156.875849][T29177] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 3156.895459][T29177] RSP: 0018:ffffc90000e17e38 EFLAGS: 00050202 [ 3156.901579][T29177] RAX: 0000555555ea7da8 RBX: ffffc90000e17e40 RCX: ffffffff814442c3 [ 3156.909551][T29177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881a87a2a50 [ 3156.917736][T29177] RBP: ffffc90000e17ef8 R08: 00018881a87a2a57 R09: 0000000000000000 [ 3156.925698][T29177] R10: 0001ffffffffffff R11: 0001c90000e17ec0 R12: ffff8881a87a2080 [ 3156.933721][T29177] R13: ffff8881a87a2a50 R14: ffffc90000e17f58 R15: ffffc90000e17fd8 [ 3156.941777][T29177] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 3156.947675][T29177] __rseq_handle_notify_resume+0xc7/0xbf0 [ 3156.953378][T29177] ? __rcu_read_unlock+0x4d/0x70 [ 3156.958314][T29177] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 3156.964200][T29177] exit_to_user_mode_loop+0xcc/0xe0 [ 3156.969386][T29177] exit_to_user_mode_prepare+0x6c/0xb0 [ 3156.974887][T29177] irqentry_exit_to_user_mode+0x9/0x20 [ 3156.980458][T29177] irqentry_exit+0x12/0x40 [ 3156.984885][T29177] asm_exc_page_fault+0x26/0x30 [ 3156.989720][T29177] RIP: 0033:0x7f6f320edae4 [ 3156.994170][T29177] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3157.013791][T29177] RSP: 002b:00007fff798851a0 EFLAGS: 00010202 [ 3157.019844][T29177] RAX: 0000000000000000 RBX: 00007f6f32252f80 RCX: 0000000000000000 [ 3157.027828][T29177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3157.035785][T29177] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3157.043738][T29177] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000302ac6 [ 3157.051711][T29177] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 0000000000302785 [ 3157.059665][T29177] 00:21:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x2}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x22}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:28 executing program 1: r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 00:21:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) [ 3157.062980][T29177] memory: usage 307200kB, limit 307200kB, failcnt 87735 [ 3157.069974][T29177] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 3157.077882][T29177] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3157.084617][T29181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3157.085195][T29177] Memory cgroup stats for /syz3: [ 3157.101654][T29177] cache 0 [ 3157.109552][T29177] rss 8192 [ 3157.112572][T29177] shmem 0 [ 3157.115554][T29177] mapped_file 0 [ 3157.119045][T29177] dirty 0 [ 3157.121978][T29177] writeback 8192 [ 3157.125551][T29177] workingset_refault_anon 73538 [ 3157.130401][T29177] workingset_refault_file 64 [ 3157.135054][T29177] swap 299008 [ 3157.138331][T29177] swapcached 8192 [ 3157.141947][T29177] pgpgin 477648 [ 3157.145166][ T27] audit: type=1400 audit(1701217288.261:488): avc: denied { read } for pid=29184 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3157.145413][T29177] pgpgout 477646 [ 3157.169658][T29177] pgfault 903989 [ 3157.173216][T29177] pgmajfault 30972 [ 3157.176966][T29177] inactive_anon 0 [ 3157.180596][T29177] active_anon 0 [ 3157.181206][T29191] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3157.184090][T29177] inactive_file 0 [ 3157.184098][T29177] active_file 0 [ 3157.184104][T29177] unevictable 0 [ 3157.203997][T29177] hierarchical_memory_limit 314572800 [ 3157.209380][T29177] hierarchical_memsw_limit 9223372036854771712 [ 3157.210777][T29193] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3157.215525][T29177] total_cache 0 [ 3157.215534][T29177] total_rss 8192 [ 3157.231814][T29177] total_shmem 0 [ 3157.235283][T29177] total_mapped_file 0 [ 3157.239254][T29177] total_dirty 0 [ 3157.242708][T29177] total_writeback 8192 [ 3157.246871][T29177] total_workingset_refault_anon 73538 [ 3157.252338][T29177] total_workingset_refault_file 64 [ 3157.257486][T29177] total_swap 299008 00:21:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x3}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 00:21:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x24, 0x0, 0x0) 00:21:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x4}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3157.261292][T29177] total_swapcached 8192 [ 3157.265530][T29177] total_pgpgin 477648 [ 3157.269507][T29177] total_pgpgout 477646 [ 3157.273561][T29177] total_pgfault 903989 [ 3157.277640][T29177] total_pgmajfault 30972 [ 3157.281939][T29177] total_inactive_anon 0 [ 3157.286208][T29177] total_active_anon 0 [ 3157.290187][T29177] total_inactive_file 0 [ 3157.294344][T29177] total_active_file 0 [ 3157.298363][T29177] total_unevictable 0 [ 3157.302331][T29177] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29177,uid=0 [ 3157.317611][T29177] Memory cgroup out of memory: Killed process 29177 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x5}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) [ 3157.847962][T29204] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3158.014515][T29187] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3158.026020][T29187] CPU: 1 PID: 29187 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3158.036443][T29187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3158.046505][T29187] Call Trace: [ 3158.049795][T29187] [ 3158.052723][T29187] dump_stack_lvl+0xda/0x130 [ 3158.057322][T29187] dump_stack+0x15/0x20 [ 3158.061517][T29187] dump_header+0x82/0x2d0 [ 3158.065913][T29187] oom_kill_process+0x33a/0x4c0 [ 3158.070776][T29187] out_of_memory+0x9ca/0xbf0 [ 3158.075379][T29187] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3158.081541][T29187] mem_cgroup_out_of_memory+0x139/0x190 [ 3158.087134][T29187] try_charge_memcg+0x75c/0xd30 [ 3158.092025][T29187] ? __swap_duplicate+0x29b/0x2b0 [ 3158.097095][T29187] ? radix_tree_lookup+0xf9/0x150 [ 3158.102227][T29187] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3158.108473][T29187] __read_swap_cache_async+0x2f6/0x550 [ 3158.113985][T29187] swap_cluster_readahead+0x27c/0x4c0 [ 3158.119378][T29187] swapin_readahead+0xe9/0x7f0 [ 3158.124219][T29187] ? __filemap_get_folio+0x41a/0x5a0 [ 3158.129513][T29187] ? swap_cache_get_folio+0x6e/0x200 [ 3158.134801][T29187] do_swap_page+0x4a0/0x1670 [ 3158.139440][T29187] ? __rcu_read_lock+0x35/0x50 [ 3158.144197][T29187] ? pte_offset_map_nolock+0x124/0x1d0 [ 3158.149661][T29187] handle_mm_fault+0xa36/0x2dd0 [ 3158.154524][T29187] ? mt_find+0x1d9/0x310 [ 3158.158797][T29187] exc_page_fault+0x2f7/0x6c0 [ 3158.163495][T29187] asm_exc_page_fault+0x26/0x30 [ 3158.168416][T29187] RIP: 0010:__get_user_8+0x11/0x20 [ 3158.173551][T29187] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 3158.193202][T29187] RSP: 0018:ffffc90000ac7e38 EFLAGS: 00050202 [ 3158.199266][T29187] RAX: 0000555556726da8 RBX: ffffc90000ac7e40 RCX: ffffffff814442c3 [ 3158.207235][T29187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881924c2a50 [ 3158.215204][T29187] RBP: ffffc90000ac7ef8 R08: 00018881924c2a57 R09: 0000000000000000 [ 3158.223170][T29187] R10: 0001ffffffffffff R11: 00018881924c2710 R12: ffff8881924c2080 [ 3158.231140][T29187] R13: ffff8881924c2a50 R14: ffffc90000ac7f58 R15: ffffc90000ac7fd8 [ 3158.239166][T29187] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 3158.245092][T29187] __rseq_handle_notify_resume+0xc7/0xbf0 [ 3158.250956][T29187] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 3158.256859][T29187] exit_to_user_mode_loop+0xcc/0xe0 [ 3158.262135][T29187] exit_to_user_mode_prepare+0x6c/0xb0 [ 3158.267593][T29187] irqentry_exit_to_user_mode+0x9/0x20 [ 3158.273104][T29187] irqentry_exit+0x12/0x40 [ 3158.277504][T29187] asm_exc_page_fault+0x26/0x30 [ 3158.282334][T29187] RIP: 0033:0x7f2cd3f1dae4 [ 3158.286732][T29187] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3158.306729][T29187] RSP: 002b:00007ffcf5b11390 EFLAGS: 00010283 [ 3158.312780][T29187] RAX: 0000000000000000 RBX: 00007f2cd4084090 RCX: 0000000000000000 [ 3158.320819][T29187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556726788 [ 3158.328866][T29187] RBP: 00007f2cd4084980 R08: 0000000000000000 R09: 00007ffcf5b320b0 [ 3158.336919][T29187] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000030301d [ 3158.345062][T29187] R13: ffffffffffffffff R14: 00007f2cd3ae7000 R15: 0000000000302cdc [ 3158.353036][T29187] [ 3158.356219][T29187] memory: usage 307200kB, limit 307200kB, failcnt 162900 [ 3158.363353][T29187] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 3158.371279][T29187] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3158.378769][T29187] Memory cgroup stats for /syz2: [ 3158.379225][T29187] cache 0 [ 3158.387234][T29187] rss 8192 [ 3158.390258][T29187] shmem 0 [ 3158.393218][T29187] mapped_file 0 [ 3158.396687][T29187] dirty 0 [ 3158.399618][T29187] writeback 8192 [ 3158.403156][T29187] workingset_refault_anon 111226 [ 3158.408102][T29187] workingset_refault_file 41 [ 3158.412680][T29187] swap 229376 [ 3158.415968][T29187] swapcached 8192 [ 3158.419586][T29187] pgpgin 207038 [ 3158.423038][T29187] pgpgout 207036 [ 3158.426599][T29187] pgfault 418106 [ 3158.430139][T29187] pgmajfault 46815 [ 3158.433884][T29187] inactive_anon 0 [ 3158.437619][T29187] active_anon 0 [ 3158.441071][T29187] inactive_file 0 [ 3158.444688][T29187] active_file 0 [ 3158.448296][T29187] unevictable 0 [ 3158.451779][T29187] hierarchical_memory_limit 314572800 [ 3158.457153][T29187] hierarchical_memsw_limit 9223372036854771712 [ 3158.463518][T29187] total_cache 0 [ 3158.467015][T29187] total_rss 8192 [ 3158.470546][T29187] total_shmem 0 [ 3158.473993][T29187] total_mapped_file 0 [ 3158.477981][T29187] total_dirty 0 [ 3158.481538][T29187] total_writeback 8192 [ 3158.485771][T29187] total_workingset_refault_anon 111226 [ 3158.491227][T29187] total_workingset_refault_file 41 [ 3158.496376][T29187] total_swap 229376 [ 3158.500175][T29187] total_swapcached 8192 [ 3158.504320][T29187] total_pgpgin 207038 [ 3158.508323][T29187] total_pgpgout 207036 [ 3158.512387][T29187] total_pgfault 418106 [ 3158.516485][T29187] total_pgmajfault 46815 [ 3158.520713][T29187] total_inactive_anon 0 [ 3158.524853][T29187] total_active_anon 0 [ 3158.528847][T29187] total_inactive_file 0 [ 3158.532997][T29187] total_active_file 0 [ 3158.536986][T29187] total_unevictable 0 [ 3158.541092][T29187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29187,uid=0 [ 3158.556457][T29187] Memory cgroup out of memory: Killed process 29187 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3158.611671][T29198] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3158.623308][T29198] CPU: 1 PID: 29198 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3158.633723][T29198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3158.643776][T29198] Call Trace: [ 3158.647044][T29198] [ 3158.650059][T29198] dump_stack_lvl+0xda/0x130 [ 3158.654780][T29198] dump_stack+0x15/0x20 [ 3158.658925][T29198] dump_header+0x82/0x2d0 [ 3158.663257][T29198] oom_kill_process+0x33a/0x4c0 [ 3158.668164][T29198] out_of_memory+0x9ca/0xbf0 [ 3158.672882][T29198] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3158.678947][T29198] mem_cgroup_out_of_memory+0x139/0x190 [ 3158.684509][T29198] try_charge_memcg+0x75c/0xd30 [ 3158.689409][T29198] ? __swap_duplicate+0x29b/0x2b0 [ 3158.694426][T29198] ? radix_tree_lookup+0xf9/0x150 [ 3158.699450][T29198] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3158.705534][T29198] __read_swap_cache_async+0x2f6/0x550 [ 3158.710993][T29198] swap_cluster_readahead+0x452/0x4c0 [ 3158.716419][T29198] swapin_readahead+0xe9/0x7f0 [ 3158.721179][T29198] ? __filemap_get_folio+0x41a/0x5a0 [ 3158.726628][T29198] ? swap_cache_get_folio+0x6e/0x200 [ 3158.731908][T29198] do_swap_page+0x4a0/0x1670 [ 3158.736551][T29198] ? asm_exc_page_fault+0x26/0x30 [ 3158.741721][T29198] ? __rcu_read_lock+0x35/0x50 [ 3158.746489][T29198] ? pte_offset_map_nolock+0x124/0x1d0 [ 3158.752011][T29198] handle_mm_fault+0xa36/0x2dd0 [ 3158.756861][T29198] exc_page_fault+0x3ff/0x6c0 [ 3158.761664][T29198] asm_exc_page_fault+0x26/0x30 [ 3158.766562][T29198] RIP: 0033:0x7f0beb3637f1 [ 3158.770967][T29198] Code: f8 c1 e8 04 31 f8 69 c0 2d eb d4 27 89 c7 c1 ef 0f 31 f8 48 31 d0 25 ff 0f 00 00 09 c5 80 3d be ce c8 00 00 0f 85 6f ff ff ff <44> 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 [ 3158.790615][T29198] RSP: 002b:00007ffe134d2cf0 EFLAGS: 00010246 [ 3158.796683][T29198] RAX: 00000000000001d1 RBX: 00007f0beb4c7018 RCX: 000000000000002a [ 3158.804653][T29198] RDX: ffffffff83ff161e RSI: 0000000080000000 RDI: 000000000000e7d3 [ 3158.812773][T29198] RBP: 0000000083ff11d1 R08: 0000001b2da20000 R09: 00000000000017d1 [ 3158.820753][T29198] R10: 0000000083ff17d5 R11: 0000000000093bc8 R12: 000000000000002a [ 3158.828739][T29198] R13: 0000000000000001 R14: 00007f0beb4bb000 R15: ffffffff83ff161e [ 3158.836710][T29198] ? tcp_release_cb+0xfe/0x370 [ 3158.841511][T29198] ? tcp_release_cb+0xfe/0x370 [ 3158.846295][T29198] [ 3158.849416][T29198] memory: usage 307200kB, limit 307200kB, failcnt 172008 [ 3158.856448][T29198] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0 [ 3158.864343][T29198] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 3158.871663][T29198] Memory cgroup stats for /syz5: [ 3158.915257][T29198] cache 0 [ 3158.923219][T29198] rss 0 [ 3158.926067][T29198] shmem 0 [ 3158.929026][T29198] mapped_file 0 [ 3158.932487][T29198] dirty 0 [ 3158.935433][T29198] writeback 0 [ 3158.938791][T29198] workingset_refault_anon 111076 [ 3158.943837][T29198] workingset_refault_file 28 [ 3158.948446][T29198] swap 331776 [ 3158.951724][T29198] swapcached 0 [ 3158.955184][T29198] pgpgin 189909 [ 3158.958909][T29198] pgpgout 189909 [ 3158.962451][T29198] pgfault 384885 [ 3158.966064][T29198] pgmajfault 49398 [ 3158.969826][T29198] inactive_anon 0 [ 3158.973442][T29198] active_anon 0 [ 3158.976949][T29198] inactive_file 0 [ 3158.980577][T29198] active_file 0 [ 3158.984089][T29198] unevictable 0 [ 3158.987558][T29198] hierarchical_memory_limit 314572800 [ 3158.992920][T29198] hierarchical_memsw_limit 9223372036854771712 [ 3158.999083][T29198] total_cache 0 [ 3159.002599][T29198] total_rss 0 [ 3159.005913][T29198] total_shmem 0 [ 3159.009407][T29198] total_mapped_file 0 [ 3159.013406][T29198] total_dirty 0 [ 3159.016883][T29198] total_writeback 0 [ 3159.020687][T29198] total_workingset_refault_anon 111076 [ 3159.026184][T29198] total_workingset_refault_file 28 [ 3159.031332][T29198] total_swap 331776 [ 3159.035154][T29198] total_swapcached 0 [ 3159.039125][T29198] total_pgpgin 189909 [ 3159.043169][T29198] total_pgpgout 189909 [ 3159.047249][T29198] total_pgfault 384885 [ 3159.051308][T29198] total_pgmajfault 49398 [ 3159.055558][T29198] total_inactive_anon 0 [ 3159.059831][T29198] total_active_anon 0 [ 3159.063804][T29198] total_inactive_file 0 [ 3159.067980][T29198] total_active_file 0 [ 3159.072026][T29198] total_unevictable 0 [ 3159.076056][T29198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29198,uid=0 [ 3159.091475][T29198] Memory cgroup out of memory: Killed process 29198 (syz-executor.5) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 00:21:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x29}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:30 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x6}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000210023"], 0x34}}, 0x0) 00:21:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b71, &(0x7f0000000000)) 00:21:30 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x7}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 3159.260065][T29215] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}}, &(0x7f0000001200)=""/4103, 0x32, 0x1007, 0x1}, 0x20) 00:21:30 executing program 0: bpf$BPF_GET_BTF_INFO(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 00:21:30 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x8}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3159.342355][T29225] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x0, 0x0, 0x0, 0x0, 0x14, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) [ 3159.426963][T29233] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3160.148092][T29210] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3160.159524][T29210] CPU: 0 PID: 29210 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3160.169968][T29210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3160.180028][T29210] Call Trace: [ 3160.183307][T29210] [ 3160.186235][T29210] dump_stack_lvl+0xda/0x130 [ 3160.190890][T29210] dump_stack+0x15/0x20 [ 3160.195083][T29210] dump_header+0x82/0x2d0 [ 3160.199471][T29210] oom_kill_process+0x33a/0x4c0 [ 3160.204353][T29210] out_of_memory+0x9ca/0xbf0 [ 3160.208992][T29210] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3160.215140][T29210] mem_cgroup_out_of_memory+0x139/0x190 [ 3160.220688][T29210] try_charge_memcg+0x75c/0xd30 [ 3160.225535][T29210] ? __swap_duplicate+0x29b/0x2b0 [ 3160.230668][T29210] ? radix_tree_lookup+0xf9/0x150 [ 3160.235692][T29210] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3160.241920][T29210] __read_swap_cache_async+0x2f6/0x550 [ 3160.247443][T29210] swap_cluster_readahead+0x27c/0x4c0 [ 3160.252812][T29210] shmem_swapin_folio+0x343/0x830 [ 3160.257887][T29210] shmem_get_folio_gfp+0x242/0xb40 [ 3160.263023][T29210] shmem_fault+0x100/0x250 [ 3160.267550][T29210] ? put_swap_device+0xb0/0xb0 [ 3160.272305][T29210] handle_mm_fault+0x17db/0x2dd0 [ 3160.277318][T29210] exc_page_fault+0x3ff/0x6c0 [ 3160.282041][T29210] asm_exc_page_fault+0x26/0x30 [ 3160.286953][T29210] RIP: 0033:0x7f6f320de226 [ 3160.291365][T29210] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 3160.311182][T29210] RSP: 002b:00007fff79885158 EFLAGS: 00010287 [ 3160.317248][T29210] RAX: 0000001b2d721724 RBX: 0000000000000001 RCX: 0000001b2d720000 [ 3160.325208][T29210] RDX: 0000001b2d721728 RSI: 0000000000000000 RDI: 0000000000000001 [ 3160.333174][T29210] RBP: 00000000000003e7 R08: 0000001b2db20000 R09: 00007fff798f70b0 [ 3160.341137][T29210] R10: 00007fff798f7080 R11: 0000000000093d16 R12: 0000000000303802 [ 3160.349101][T29210] R13: 00007f6f32252f80 R14: 00007f6f31cb7000 R15: 00000000003034c1 [ 3160.357063][T29210] [ 3160.360182][T29210] memory: usage 307200kB, limit 307200kB, failcnt 88840 [ 3160.367162][T29210] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3160.375057][T29210] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3160.382334][T29210] Memory cgroup stats for /syz3: [ 3160.386823][T29210] cache 0 [ 3160.394746][T29210] rss 8192 [ 3160.397776][T29210] shmem 0 [ 3160.400699][T29210] mapped_file 0 [ 3160.404240][T29210] dirty 0 [ 3160.407203][T29210] writeback 0 [ 3160.410485][T29210] workingset_refault_anon 73640 [ 3160.415377][T29210] workingset_refault_file 64 [ 3160.419950][T29210] swap 299008 [ 3160.423224][T29210] swapcached 8192 [ 3160.426893][T29210] pgpgin 477799 [ 3160.430465][T29210] pgpgout 477797 [ 3160.433994][T29210] pgfault 904313 [ 3160.437624][T29210] pgmajfault 31026 [ 3160.441333][T29210] inactive_anon 8192 [ 3160.445236][T29210] active_anon 0 [ 3160.448682][T29210] inactive_file 0 [ 3160.452369][T29210] active_file 0 [ 3160.455883][T29210] unevictable 0 [ 3160.459381][T29210] hierarchical_memory_limit 314572800 [ 3160.464761][T29210] hierarchical_memsw_limit 9223372036854771712 [ 3160.471103][T29210] total_cache 0 [ 3160.474549][T29210] total_rss 8192 [ 3160.478109][T29210] total_shmem 0 [ 3160.481552][T29210] total_mapped_file 0 [ 3160.485574][T29210] total_dirty 0 [ 3160.489122][T29210] total_writeback 0 [ 3160.492915][T29210] total_workingset_refault_anon 73640 00:21:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3160.498286][T29210] total_workingset_refault_file 64 [ 3160.503445][T29210] total_swap 299008 [ 3160.507288][T29210] total_swapcached 8192 [ 3160.511429][T29210] total_pgpgin 477799 [ 3160.515455][T29210] total_pgpgout 477797 [ 3160.519518][T29210] total_pgfault 904313 [ 3160.523649][T29210] total_pgmajfault 31026 [ 3160.527909][T29210] total_inactive_anon 8192 [ 3160.532381][T29210] total_active_anon 0 [ 3160.536493][T29210] total_inactive_file 0 [ 3160.540635][T29210] total_active_file 0 [ 3160.544639][T29210] total_unevictable 0 00:21:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x3e}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:31 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x9}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3160.548795][T29210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29210,uid=0 [ 3160.564141][T29210] Memory cgroup out of memory: Killed process 29210 (syz-executor.3) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3160.616130][T29241] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:31 executing program 1: fsopen(0x0, 0xa229a13c70a520a9) 00:21:31 executing program 0: bpf$BPF_GET_BTF_INFO(0x7, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 00:21:31 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0xa}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:32 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0xb}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {{0x1b}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:21:32 executing program 1: r0 = getpgrp(0x0) ptrace$setopts(0x4206, r0, 0x8, 0x0) [ 3160.851650][T29247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:32 executing program 0: io_setup(0x3ff, &(0x7f0000000100)=0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r0, 0x1, &(0x7f0000001980)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:21:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3160.897824][T29256] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3161.387807][T29237] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3161.400901][T29237] CPU: 1 PID: 29237 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3161.411312][T29237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3161.421442][T29237] Call Trace: [ 3161.424805][T29237] [ 3161.427738][T29237] dump_stack_lvl+0xda/0x130 [ 3161.432392][T29237] dump_stack+0x15/0x20 [ 3161.436639][T29237] dump_header+0x82/0x2d0 [ 3161.441030][T29237] oom_kill_process+0x33a/0x4c0 [ 3161.445915][T29237] out_of_memory+0x9ca/0xbf0 [ 3161.450606][T29237] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3161.456766][T29237] mem_cgroup_out_of_memory+0x139/0x190 [ 3161.462408][T29237] try_charge_memcg+0x75c/0xd30 [ 3161.467341][T29237] ? __swap_duplicate+0x29b/0x2b0 [ 3161.472421][T29237] ? radix_tree_lookup+0xf9/0x150 [ 3161.477514][T29237] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3161.483592][T29237] __read_swap_cache_async+0x2f6/0x550 [ 3161.489186][T29237] swap_cluster_readahead+0x27c/0x4c0 [ 3161.494566][T29237] swapin_readahead+0xe9/0x7f0 [ 3161.499462][T29237] ? __filemap_get_folio+0x41a/0x5a0 [ 3161.504744][T29237] ? swap_cache_get_folio+0x6e/0x200 [ 3161.510083][T29237] do_swap_page+0x4a0/0x1670 [ 3161.514672][T29237] ? asm_exc_page_fault+0x26/0x30 [ 3161.519781][T29237] ? __rcu_read_lock+0x35/0x50 [ 3161.524839][T29237] ? pte_offset_map_nolock+0x124/0x1d0 [ 3161.530299][T29237] handle_mm_fault+0xa36/0x2dd0 [ 3161.535158][T29237] exc_page_fault+0x3ff/0x6c0 [ 3161.539860][T29237] asm_exc_page_fault+0x26/0x30 [ 3161.544713][T29237] RIP: 0033:0x7f0beb3d2ea3 [ 3161.549212][T29237] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 4e 40 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 3161.568830][T29237] RSP: 002b:00007ffe134d2d48 EFLAGS: 00010293 [ 3161.574908][T29237] RAX: 00000000fffffffa RBX: 00007f0beb4c6f80 RCX: 0000000000000000 [ 3161.582964][T29237] RDX: 00007ffe134d2d60 RSI: 0000000000000000 RDI: 0000000000000000 [ 3161.590957][T29237] RBP: 00007f0beb4c8980 R08: 0000000000000010 R09: 00007ffe135670b0 [ 3161.598927][T29237] R10: 0000000000000000 R11: 0000000000093df4 R12: 0000000000303d23 [ 3161.606900][T29237] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 00000000003039e2 [ 3161.614878][T29237] [ 3161.618085][T29237] memory: usage 307200kB, limit 307200kB, failcnt 172227 [ 3161.625187][T29237] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 3161.633227][T29237] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3161.640563][T29237] Memory cgroup stats for /syz5: [ 3161.646431][T29237] cache 0 [ 3161.654297][T29237] rss 12288 [ 3161.657425][T29237] shmem 0 [ 3161.660394][T29237] mapped_file 0 [ 3161.663844][T29237] dirty 0 [ 3161.666788][T29237] writeback 12288 [ 3161.670424][T29237] workingset_refault_anon 111162 [ 3161.675366][T29237] workingset_refault_file 28 [ 3161.679955][T29237] swap 241664 [ 3161.683305][T29237] swapcached 16384 [ 3161.687148][T29237] pgpgin 190043 [ 3161.690604][T29237] pgpgout 190039 [ 3161.694189][T29237] pgfault 385195 [ 3161.697795][T29237] pgmajfault 49444 [ 3161.701507][T29237] inactive_anon 0 [ 3161.705209][T29237] active_anon 0 [ 3161.708666][T29237] inactive_file 0 [ 3161.712291][T29237] active_file 0 [ 3161.715803][T29237] unevictable 0 [ 3161.719255][T29237] hierarchical_memory_limit 314572800 [ 3161.724613][T29237] hierarchical_memsw_limit 9223372036854771712 [ 3161.730812][T29237] total_cache 0 [ 3161.734262][T29237] total_rss 12288 [ 3161.737910][T29237] total_shmem 0 [ 3161.741464][T29237] total_mapped_file 0 [ 3161.745466][T29237] total_dirty 0 [ 3161.748918][T29237] total_writeback 12288 [ 3161.753078][T29237] total_workingset_refault_anon 111162 [ 3161.758555][T29237] total_workingset_refault_file 28 [ 3161.763765][T29237] total_swap 241664 [ 3161.767645][T29237] total_swapcached 16384 [ 3161.771877][T29237] total_pgpgin 190043 [ 3161.775895][T29237] total_pgpgout 190039 [ 3161.780004][T29237] total_pgfault 385195 [ 3161.784061][T29237] total_pgmajfault 49444 [ 3161.788314][T29237] total_inactive_anon 0 [ 3161.792504][T29237] total_active_anon 0 [ 3161.796527][T29237] total_inactive_file 0 [ 3161.800671][T29237] total_active_file 0 [ 3161.804630][T29237] total_unevictable 0 [ 3161.808613][T29237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29237,uid=0 [ 3161.823965][T29237] Memory cgroup out of memory: Killed process 29237 (syz-executor.5) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3161.841285][T29253] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3161.852792][T29253] CPU: 0 PID: 29253 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3161.863548][T29253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3161.873605][T29253] Call Trace: [ 3161.876883][T29253] [ 3161.879829][T29253] dump_stack_lvl+0xda/0x130 [ 3161.884425][T29253] dump_stack+0x15/0x20 [ 3161.888590][T29253] dump_header+0x82/0x2d0 [ 3161.893038][T29253] oom_kill_process+0x33a/0x4c0 [ 3161.897949][T29253] out_of_memory+0x9ca/0xbf0 [ 3161.902557][T29253] mem_cgroup_out_of_memory+0x139/0x190 [ 3161.908151][T29253] try_charge_memcg+0x75c/0xd30 [ 3161.913184][T29253] ? __swap_duplicate+0x29b/0x2b0 [ 3161.918286][T29253] ? radix_tree_lookup+0xf9/0x150 [ 3161.923383][T29253] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3161.929518][T29253] __read_swap_cache_async+0x2f6/0x550 [ 3161.934976][T29253] swap_cluster_readahead+0x27c/0x4c0 [ 3161.940362][T29253] swapin_readahead+0xe9/0x7f0 [ 3161.945138][T29253] ? __filemap_get_folio+0x41a/0x5a0 [ 3161.950475][T29253] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 3161.956100][T29253] ? swap_cache_get_folio+0x6e/0x200 [ 3161.961398][T29253] do_swap_page+0x4a0/0x1670 [ 3161.965988][T29253] ? cgroup_rstat_updated+0x8c/0x1c0 [ 3161.971270][T29253] ? __rcu_read_lock+0x35/0x50 [ 3161.976111][T29253] ? pte_offset_map_nolock+0x124/0x1d0 [ 3161.981596][T29253] handle_mm_fault+0xa36/0x2dd0 [ 3161.986447][T29253] exc_page_fault+0x3ff/0x6c0 [ 3161.991201][T29253] asm_exc_page_fault+0x26/0x30 [ 3161.996176][T29253] RIP: 0033:0x7f6f320edae4 [ 3162.000588][T29253] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3162.020438][T29253] RSP: 002b:00007fff798851a0 EFLAGS: 00010283 [ 3162.026505][T29253] RAX: 0000000000000000 RBX: 00007f6f32253050 RCX: 0000000000000000 [ 3162.034463][T29253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ea7788 [ 3162.042468][T29253] RBP: 00007f6f32254980 R08: 0000000000000000 R09: 00007fff798f70b0 [ 3162.050429][T29253] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000303e6c [ 3162.058455][T29253] R13: ffffffffffffffff R14: 00007f6f31cb7000 R15: 0000000000303b2b [ 3162.066472][T29253] [ 3162.069615][T29253] memory: usage 307200kB, limit 307200kB, failcnt 88942 [ 3162.076662][T29253] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 3162.084623][T29253] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3162.091964][T29253] Memory cgroup stats for /syz3: [ 3162.093000][T29253] cache 0 [ 3162.100895][T29253] rss 20480 [ 3162.104073][T29253] shmem 0 [ 3162.107104][T29253] mapped_file 0 [ 3162.110555][T29253] dirty 0 [ 3162.113482][T29253] writeback 0 [ 3162.116773][T29253] workingset_refault_anon 73688 [ 3162.121614][T29253] workingset_refault_file 64 [ 3162.126266][T29253] swap 286720 [ 3162.129542][T29253] swapcached 20480 [ 3162.133250][T29253] pgpgin 477871 [ 3162.136715][T29253] pgpgout 477866 [ 3162.140297][T29253] pgfault 904463 [ 3162.143830][T29253] pgmajfault 31045 [ 3162.147634][T29253] inactive_anon 12288 [ 3162.151604][T29253] active_anon 8192 [ 3162.155340][T29253] inactive_file 0 [ 3162.158967][T29253] active_file 0 [ 3162.162434][T29253] unevictable 0 [ 3162.165958][T29253] hierarchical_memory_limit 314572800 [ 3162.171318][T29253] hierarchical_memsw_limit 9223372036854771712 [ 3162.177482][T29253] total_cache 0 [ 3162.180989][T29253] total_rss 20480 [ 3162.184610][T29253] total_shmem 0 [ 3162.188082][T29253] total_mapped_file 0 [ 3162.192053][T29253] total_dirty 0 [ 3162.195523][T29253] total_writeback 0 [ 3162.199461][T29253] total_workingset_refault_anon 73688 [ 3162.204820][T29253] total_workingset_refault_file 64 [ 3162.209963][T29253] total_swap 286720 [ 3162.213758][T29253] total_swapcached 20480 [ 3162.218056][T29253] total_pgpgin 477871 [ 3162.222031][T29253] total_pgpgout 477866 [ 3162.226182][T29253] total_pgfault 904463 [ 3162.230245][T29253] total_pgmajfault 31045 [ 3162.234482][T29253] total_inactive_anon 12288 [ 3162.239065][T29253] total_active_anon 8192 [ 3162.243296][T29253] total_inactive_file 0 [ 3162.247450][T29253] total_active_file 0 [ 3162.251421][T29253] total_unevictable 0 [ 3162.255421][T29253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29253,uid=0 [ 3162.270796][T29253] Memory cgroup out of memory: Killed process 29253 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 3162.308507][T29242] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3162.322100][T29242] CPU: 0 PID: 29242 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3162.332564][T29242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3162.342697][T29242] Call Trace: [ 3162.346020][T29242] [ 3162.348992][T29242] dump_stack_lvl+0xda/0x130 [ 3162.353583][T29242] dump_stack+0x15/0x20 [ 3162.357733][T29242] dump_header+0x82/0x2d0 [ 3162.362060][T29242] oom_kill_process+0x33a/0x4c0 [ 3162.366968][T29242] out_of_memory+0x9ca/0xbf0 [ 3162.371622][T29242] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3162.377750][T29242] mem_cgroup_out_of_memory+0x139/0x190 [ 3162.383328][T29242] try_charge_memcg+0x75c/0xd30 [ 3162.388177][T29242] obj_cgroup_charge_pages+0xab/0x130 [ 3162.393570][T29242] __memcg_kmem_charge_page+0x9c/0x170 [ 3162.399023][T29242] __alloc_pages+0x1bb/0x340 [ 3162.403628][T29242] alloc_pages_mpol+0xb1/0x1d0 [ 3162.408382][T29242] alloc_pages+0xe0/0x100 [ 3162.412755][T29242] __vmalloc_node_range+0x6d2/0xea0 [ 3162.418033][T29242] kvmalloc_node+0x121/0x160 [ 3162.422617][T29242] ? xt_alloc_table_info+0x3d/0x80 [ 3162.427925][T29242] xt_alloc_table_info+0x3d/0x80 [ 3162.433653][T29242] do_arpt_set_ctl+0x634/0x13b0 [ 3162.438507][T29242] ? __futex_wait+0x227/0x280 [ 3162.443175][T29242] ? __futex_wake_mark+0x70/0x70 [ 3162.448259][T29242] ? tcp_release_cb+0xfe/0x370 [ 3162.453034][T29242] ? _raw_spin_unlock_bh+0x36/0x40 [ 3162.458145][T29242] nf_setsockopt+0x18d/0x1b0 [ 3162.462733][T29242] ip_setsockopt+0xe6/0x100 [ 3162.467276][T29242] tcp_setsockopt+0x90/0xa0 [ 3162.471778][T29242] sock_common_setsockopt+0x61/0x70 [ 3162.477015][T29242] ? sock_common_recvmsg+0xe0/0xe0 [ 3162.482124][T29242] __sys_setsockopt+0x1d4/0x240 [ 3162.487001][T29242] __x64_sys_setsockopt+0x66/0x80 [ 3162.492021][T29242] do_syscall_64+0x44/0x110 [ 3162.496550][T29242] ? syscall_exit_to_user_mode+0x38/0x140 [ 3162.502320][T29242] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3162.508287][T29242] RIP: 0033:0x7f2cd3f63ae9 [ 3162.512690][T29242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3162.532324][T29242] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3162.540772][T29242] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3162.548734][T29242] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3162.556768][T29242] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3162.564860][T29242] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3162.572839][T29242] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3162.580832][T29242] [ 3162.584051][T29242] memory: usage 307200kB, limit 307200kB, failcnt 163245 [ 3162.591278][T29242] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 3162.599308][T29242] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3162.606632][T29242] Memory cgroup stats for /syz2: [ 3162.609715][T29242] cache 0 [ 3162.617592][T29242] rss 8192 [ 3162.620612][T29242] shmem 0 [ 3162.623695][T29242] mapped_file 0 [ 3162.627200][T29242] dirty 0 [ 3162.630129][T29242] writeback 0 [ 3162.633401][T29242] workingset_refault_anon 111310 [ 3162.638414][T29242] workingset_refault_file 41 [ 3162.643012][T29242] swap 221184 [ 3162.646398][T29242] swapcached 16384 [ 3162.650107][T29242] pgpgin 207170 [ 3162.653578][T29242] pgpgout 207166 [ 3162.657142][T29242] pgfault 418408 [ 3162.660699][T29242] pgmajfault 46858 [ 3162.664478][T29242] inactive_anon 8192 [ 3162.668388][T29242] active_anon 0 [ 3162.671926][T29242] inactive_file 0 [ 3162.675636][T29242] active_file 0 [ 3162.679190][T29242] unevictable 0 [ 3162.682729][T29242] hierarchical_memory_limit 314572800 [ 3162.688111][T29242] hierarchical_memsw_limit 9223372036854771712 [ 3162.694295][T29242] total_cache 0 [ 3162.697770][T29242] total_rss 8192 [ 3162.701306][T29242] total_shmem 0 [ 3162.704755][T29242] total_mapped_file 0 [ 3162.708794][T29242] total_dirty 0 [ 3162.712247][T29242] total_writeback 0 [ 3162.716076][T29242] total_workingset_refault_anon 111310 [ 3162.721973][T29242] total_workingset_refault_file 41 [ 3162.727097][T29242] total_swap 221184 [ 3162.730892][T29242] total_swapcached 16384 [ 3162.735162][T29242] total_pgpgin 207170 [ 3162.739171][T29242] total_pgpgout 207166 [ 3162.743236][T29242] total_pgfault 418408 [ 3162.747326][T29242] total_pgmajfault 46858 [ 3162.751564][T29242] total_inactive_anon 8192 [ 3162.756078][T29242] total_active_anon 0 [ 3162.760053][T29242] total_inactive_file 0 [ 3162.764205][T29242] total_active_file 0 [ 3162.768252][T29242] total_unevictable 0 [ 3162.772228][T29242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29240,uid=0 [ 3162.787541][T29242] Memory cgroup out of memory: Killed process 29240 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:34 executing program 1: io_setup(0x3ff, &(0x7f0000000100)=0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r0, 0x2, &(0x7f0000001980)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x810}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 00:21:34 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0xc}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') write$9p(r0, &(0x7f0000000100)="3f839a77ec9a2006", 0x8) 00:21:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x67}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:34 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0xd}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:34 executing program 0: io_setup(0x3ff, &(0x7f0000000100)=0x0) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000740)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:21:34 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0xe}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0xfffffffe, 0x0, 0x1}, 0x48) [ 3162.996258][T29274] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3163.006179][T29272] SELinux: Context ?ƒšwìš  is not valid (left unmapped). [ 3163.033107][T29278] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:34 executing program 1: syz_clone3(&(0x7f00000005c0)={0x148024000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 00:21:34 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0xf}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3163.106083][T29283] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3163.180125][T29290] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x5, 0x0, &(0x7f00000003c0)) 00:21:35 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000a80)) 00:21:35 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x11}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) [ 3163.994909][T29293] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x69}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:35 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x12}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:35 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b00), 0x240, 0x0) 00:21:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') 00:21:35 executing program 0: request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000001300)={'syz', 0x1}, &(0x7f0000001240)='-\x00', 0xffffffffffffffff) 00:21:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, &(0x7f00000003c0)) 00:21:35 executing program 0: add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "88e5d9d5901506a685940b0118dafed4cb310326940f9cde4e764c8433b712f30a56f7ea79c6ad0557f943b3859eca12f557d6c479db32eb392c5ab808511543"}, 0x48, 0xfffffffffffffffb) [ 3164.128782][T29306] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3164.138164][ T27] audit: type=1400 audit(1701217295.261:489): avc: denied { create } for pid=29305 comm="syz-executor.1" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 3164.856162][T29296] ================================================================== [ 3164.864278][T29296] BUG: KCSAN: data-race in drain_all_stock / try_charge_memcg [ 3164.871743][T29296] [ 3164.874066][T29296] write to 0xffff888237d2a3c0 of 4 bytes by task 29301 on cpu 1: [ 3164.881780][T29296] try_charge_memcg+0xb49/0xd30 [ 3164.886635][T29296] obj_cgroup_charge_pages+0xab/0x130 [ 3164.892011][T29296] __memcg_kmem_charge_page+0x9c/0x170 [ 3164.897474][T29296] __alloc_pages+0x1bb/0x340 [ 3164.902057][T29296] alloc_pages_mpol+0xb1/0x1d0 [ 3164.906822][T29296] alloc_pages+0xe0/0x100 [ 3164.911145][T29296] __vmalloc_node_range+0x6d2/0xea0 [ 3164.916347][T29296] kvmalloc_node+0x121/0x160 [ 3164.920939][T29296] xt_alloc_table_info+0x3d/0x80 [ 3164.925879][T29296] do_arpt_set_ctl+0x634/0x13b0 [ 3164.930780][T29296] nf_setsockopt+0x18d/0x1b0 [ 3164.935461][T29296] ip_setsockopt+0xe6/0x100 [ 3164.939998][T29296] tcp_setsockopt+0x90/0xa0 [ 3164.944503][T29296] sock_common_setsockopt+0x61/0x70 [ 3164.949711][T29296] __sys_setsockopt+0x1d4/0x240 [ 3164.954560][T29296] __x64_sys_setsockopt+0x66/0x80 [ 3164.959584][T29296] do_syscall_64+0x44/0x110 [ 3164.964085][T29296] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3164.969988][T29296] [ 3164.972305][T29296] read to 0xffff888237d2a3c0 of 4 bytes by task 29296 on cpu 0: [ 3164.979956][T29296] drain_all_stock+0xd3/0x2d0 [ 3164.984640][T29296] try_charge_memcg+0x6c5/0xd30 [ 3164.989493][T29296] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3164.995566][T29296] __read_swap_cache_async+0x2f6/0x550 [ 3165.001020][T29296] swap_cluster_readahead+0x27c/0x4c0 [ 3165.006396][T29296] swapin_readahead+0xe9/0x7f0 [ 3165.011170][T29296] do_swap_page+0x4a0/0x1670 [ 3165.015858][T29296] handle_mm_fault+0xa36/0x2dd0 [ 3165.020805][T29296] exc_page_fault+0x3ff/0x6c0 [ 3165.025495][T29296] asm_exc_page_fault+0x26/0x30 [ 3165.026840][T29301] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3165.030336][T29296] [ 3165.030340][T29296] value changed: 0x0000000a -> 0x00000004 [ 3165.030350][T29296] [ 3165.030353][T29296] Reported by Kernel Concurrency Sanitizer on: [ 3165.043789][T29301] CPU: 1 PID: 29301 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3165.046078][T29296] CPU: 0 PID: 29296 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3165.051772][T29301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3165.054075][T29296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3165.060206][T29301] Call Trace: [ 3165.070588][T29296] ================================================================== [ 3165.112673][T29301] [ 3165.115597][T29301] dump_stack_lvl+0xda/0x130 [ 3165.120179][T29301] dump_stack+0x15/0x20 [ 3165.124363][T29301] dump_header+0x82/0x2d0 [ 3165.128718][T29301] oom_kill_process+0x33a/0x4c0 [ 3165.133605][T29301] out_of_memory+0x9ca/0xbf0 [ 3165.138218][T29301] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3165.144400][T29301] mem_cgroup_out_of_memory+0x139/0x190 [ 3165.149983][T29301] try_charge_memcg+0x75c/0xd30 [ 3165.154838][T29301] obj_cgroup_charge_pages+0xab/0x130 [ 3165.160280][T29301] __memcg_kmem_charge_page+0x9c/0x170 [ 3165.165726][T29301] __alloc_pages+0x1bb/0x340 [ 3165.170350][T29301] alloc_pages_mpol+0xb1/0x1d0 [ 3165.175165][T29301] alloc_pages+0xe0/0x100 [ 3165.179495][T29301] __vmalloc_node_range+0x6d2/0xea0 [ 3165.184710][T29301] kvmalloc_node+0x121/0x160 [ 3165.190253][T29301] ? xt_alloc_table_info+0x3d/0x80 [ 3165.195371][T29301] xt_alloc_table_info+0x3d/0x80 [ 3165.200293][T29301] do_arpt_set_ctl+0x634/0x13b0 [ 3165.205179][T29301] ? __futex_wait+0x227/0x280 [ 3165.210028][T29301] ? __futex_wake_mark+0x70/0x70 [ 3165.214963][T29301] ? tcp_release_cb+0xfe/0x370 [ 3165.219811][T29301] ? _raw_spin_unlock_bh+0x36/0x40 [ 3165.225002][T29301] nf_setsockopt+0x18d/0x1b0 [ 3165.229685][T29301] ip_setsockopt+0xe6/0x100 [ 3165.234319][T29301] tcp_setsockopt+0x90/0xa0 [ 3165.238820][T29301] sock_common_setsockopt+0x61/0x70 [ 3165.244012][T29301] ? sock_common_recvmsg+0xe0/0xe0 [ 3165.249112][T29301] __sys_setsockopt+0x1d4/0x240 [ 3165.253955][T29301] __x64_sys_setsockopt+0x66/0x80 [ 3165.258974][T29301] do_syscall_64+0x44/0x110 [ 3165.263462][T29301] ? syscall_exit_to_user_mode+0x38/0x140 [ 3165.269223][T29301] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3165.275474][T29301] RIP: 0033:0x7f6f32133ae9 [ 3165.279869][T29301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3165.299461][T29301] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3165.307854][T29301] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3165.315808][T29301] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3165.323834][T29301] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3165.331862][T29301] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3165.339892][T29301] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3165.347927][T29301] [ 3165.351067][T29301] memory: usage 307200kB, limit 307200kB, failcnt 89156 [ 3165.358148][T29301] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0 [ 3165.366370][T29301] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 3165.373761][T29301] Memory cgroup stats for /syz3: [ 3165.373977][T29301] cache 0 [ 3165.381969][T29301] rss 0 [ 3165.384783][T29301] shmem 0 [ 3165.387755][T29301] mapped_file 0 [ 3165.391291][T29301] dirty 0 [ 3165.394255][T29301] writeback 0 [ 3165.397688][T29301] workingset_refault_anon 73765 [ 3165.402585][T29301] workingset_refault_file 64 [ 3165.407201][T29301] swap 311296 [ 3165.410473][T29301] swapcached 0 [ 3165.413823][T29301] pgpgin 477996 [ 3165.417345][T29301] pgpgout 477996 [ 3165.420931][T29301] pgfault 904706 [ 3165.424483][T29301] pgmajfault 31083 [ 3165.428296][T29301] inactive_anon 0 [ 3165.431915][T29301] active_anon 0 [ 3165.435439][T29301] inactive_file 0 [ 3165.439106][T29301] active_file 0 [ 3165.442623][T29301] unevictable 0 [ 3165.446206][T29301] hierarchical_memory_limit 314572800 [ 3165.451584][T29301] hierarchical_memsw_limit 9223372036854771712 [ 3165.457770][T29301] total_cache 0 [ 3165.461272][T29301] total_rss 0 [ 3165.464627][T29301] total_shmem 0 [ 3165.468170][T29301] total_mapped_file 0 [ 3165.472171][T29301] total_dirty 0 [ 3165.475652][T29301] total_writeback 0 [ 3165.479501][T29301] total_workingset_refault_anon 73765 [ 3165.484965][T29301] total_workingset_refault_file 64 [ 3165.490182][T29301] total_swap 311296 [ 3165.494016][T29301] total_swapcached 0 [ 3165.498000][T29301] total_pgpgin 477996 [ 3165.502086][T29301] total_pgpgout 477996 [ 3165.506182][T29301] total_pgfault 904706 [ 3165.510304][T29301] total_pgmajfault 31083 [ 3165.514601][T29301] total_inactive_anon 0 [ 3165.518792][T29301] total_active_anon 0 [ 3165.522794][T29301] total_inactive_file 0 [ 3165.526957][T29301] total_active_file 0 [ 3165.530971][T29301] total_unevictable 0 [ 3165.535024][T29301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29300,uid=0 [ 3165.550405][T29301] Memory cgroup out of memory: Killed process 29300 (syz-executor.3) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3165.567977][T29308] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3165.579432][T29308] CPU: 0 PID: 29308 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3165.589895][T29308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3165.600018][T29308] Call Trace: [ 3165.603302][T29308] [ 3165.606229][T29308] dump_stack_lvl+0xda/0x130 [ 3165.610827][T29308] dump_stack+0x15/0x20 [ 3165.615037][T29308] dump_header+0x82/0x2d0 [ 3165.619403][T29308] oom_kill_process+0x33a/0x4c0 [ 3165.624356][T29308] out_of_memory+0x9ca/0xbf0 [ 3165.629063][T29308] mem_cgroup_out_of_memory+0x139/0x190 [ 3165.634644][T29308] try_charge_memcg+0x75c/0xd30 [ 3165.639548][T29308] ? __swap_duplicate+0x29b/0x2b0 [ 3165.644566][T29308] ? radix_tree_lookup+0xf9/0x150 [ 3165.649670][T29308] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3165.655729][T29308] __read_swap_cache_async+0x2f6/0x550 [ 3165.661207][T29308] swap_cluster_readahead+0x27c/0x4c0 [ 3165.666581][T29308] shmem_swapin_folio+0x343/0x830 [ 3165.671595][T29308] shmem_get_folio_gfp+0x242/0xb40 [ 3165.676773][T29308] ? folio_unlock+0xdc/0x120 [ 3165.681351][T29308] ? page_add_anon_rmap+0x1a2/0x300 [ 3165.686630][T29308] shmem_fault+0x100/0x250 [ 3165.691033][T29308] ? put_swap_device+0xb0/0xb0 [ 3165.695790][T29308] handle_mm_fault+0x17db/0x2dd0 [ 3165.700734][T29308] exc_page_fault+0x3ff/0x6c0 [ 3165.705409][T29308] asm_exc_page_fault+0x26/0x30 [ 3165.710301][T29308] RIP: 0033:0x7f2cd3f0e226 [ 3165.714723][T29308] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 3165.734399][T29308] RSP: 002b:00007ffcf5b11348 EFLAGS: 00010287 [ 3165.740464][T29308] RAX: 0000001b2cc22900 RBX: 0000000000000001 RCX: 0000001b2cc20000 [ 3165.748433][T29308] RDX: 0000001b2cc22904 RSI: 0000000000000000 RDI: 000000000badf00d [ 3165.756392][T29308] RBP: 00000000000003e7 R08: 0000001b2d020000 R09: 00007ffcf5b320b0 [ 3165.764353][T29308] R10: 00007ffcf5b32080 R11: 0000000000094062 R12: 0000000000304b33 [ 3165.772363][T29308] R13: 00007f2cd4082f80 R14: 00007f2cd3ae7000 R15: 00000000003047f2 [ 3165.780330][T29308] [ 3165.783496][T29308] memory: usage 307004kB, limit 307200kB, failcnt 163589 [ 3165.790533][T29308] memory+swap: usage 307244kB, limit 9007199254740988kB, failcnt 0 [ 3165.798507][T29308] kmem: usage 306992kB, limit 9007199254740988kB, failcnt 0 [ 3165.805804][T29308] Memory cgroup stats for /syz2: [ 3165.807684][T29308] cache 0 [ 3165.815609][T29308] rss 8192 [ 3165.818710][T29308] shmem 0 [ 3165.821637][T29308] mapped_file 0 [ 3165.825097][T29308] dirty 0 [ 3165.828120][T29308] writeback 0 [ 3165.831399][T29308] workingset_refault_anon 111406 [ 3165.836352][T29308] workingset_refault_file 41 [ 3165.840938][T29308] swap 245760 [ 3165.844209][T29308] swapcached 8192 [ 3165.847930][T29308] pgpgin 207314 [ 3165.851380][T29308] pgpgout 207312 [ 3165.854992][T29308] pgfault 418764 [ 3165.858527][T29308] pgmajfault 46896 [ 3165.862240][T29308] inactive_anon 0 [ 3165.865901][T29308] active_anon 8192 [ 3165.869610][T29308] inactive_file 0 [ 3165.873239][T29308] active_file 0 [ 3165.876919][T29308] unevictable 0 [ 3165.880372][T29308] hierarchical_memory_limit 314572800 [ 3165.886114][T29308] hierarchical_memsw_limit 9223372036854771712 [ 3165.892338][T29308] total_cache 0 [ 3165.895827][T29308] total_rss 8192 [ 3165.899363][T29308] total_shmem 0 [ 3165.902812][T29308] total_mapped_file 0 [ 3165.906802][T29308] total_dirty 0 [ 3165.910252][T29308] total_writeback 0 [ 3165.914055][T29308] total_workingset_refault_anon 111406 [ 3165.919528][T29308] total_workingset_refault_file 41 [ 3165.924631][T29308] total_swap 245760 [ 3165.928515][T29308] total_swapcached 8192 [ 3165.932724][T29308] total_pgpgin 207314 [ 3165.936890][T29308] total_pgpgout 207312 [ 3165.940949][T29308] total_pgfault 418764 [ 3165.945024][T29308] total_pgmajfault 46896 [ 3165.949272][T29308] total_inactive_anon 0 [ 3165.953481][T29308] total_active_anon 8192 [ 3165.957725][T29308] total_inactive_file 0 [ 3165.961878][T29308] total_active_file 0 [ 3165.965886][T29308] total_unevictable 0 [ 3165.969884][T29308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29308,uid=0 [ 3165.985232][T29308] Memory cgroup out of memory: Killed process 29308 (syz-executor.2) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3166.003619][T29299] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3166.017181][T29299] CPU: 1 PID: 29299 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3166.027594][T29299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3166.037701][T29299] Call Trace: [ 3166.040970][T29299] [ 3166.043917][T29299] dump_stack_lvl+0xda/0x130 [ 3166.048553][T29299] dump_stack+0x15/0x20 [ 3166.052746][T29299] dump_header+0x82/0x2d0 [ 3166.057282][T29299] oom_kill_process+0x33a/0x4c0 [ 3166.062128][T29299] out_of_memory+0x9ca/0xbf0 [ 3166.066722][T29299] mem_cgroup_out_of_memory+0x139/0x190 [ 3166.072265][T29299] try_charge_memcg+0x75c/0xd30 [ 3166.077142][T29299] obj_cgroup_charge_pages+0xab/0x130 [ 3166.082517][T29299] __memcg_kmem_charge_page+0x9c/0x170 [ 3166.088028][T29299] __alloc_pages+0x1bb/0x340 [ 3166.092610][T29299] alloc_pages_mpol+0xb1/0x1d0 [ 3166.097369][T29299] alloc_pages+0xe0/0x100 [ 3166.101728][T29299] __vmalloc_node_range+0x6d2/0xea0 [ 3166.107034][T29299] kvmalloc_node+0x121/0x160 [ 3166.111635][T29299] ? xt_alloc_table_info+0x3d/0x80 [ 3166.116866][T29299] xt_alloc_table_info+0x3d/0x80 [ 3166.121876][T29299] do_arpt_set_ctl+0x634/0x13b0 [ 3166.126721][T29299] ? __futex_wait+0x227/0x280 [ 3166.131463][T29299] ? __futex_wake_mark+0x70/0x70 [ 3166.136419][T29299] ? tcp_release_cb+0xfe/0x370 [ 3166.141182][T29299] ? _raw_spin_unlock_bh+0x36/0x40 [ 3166.146317][T29299] nf_setsockopt+0x18d/0x1b0 [ 3166.150907][T29299] ip_setsockopt+0xe6/0x100 [ 3166.155477][T29299] tcp_setsockopt+0x90/0xa0 [ 3166.159981][T29299] sock_common_setsockopt+0x61/0x70 [ 3166.165177][T29299] ? sock_common_recvmsg+0xe0/0xe0 [ 3166.170294][T29299] __sys_setsockopt+0x1d4/0x240 [ 3166.175167][T29299] __x64_sys_setsockopt+0x66/0x80 [ 3166.180183][T29299] do_syscall_64+0x44/0x110 [ 3166.184737][T29299] ? syscall_exit_to_user_mode+0x38/0x140 [ 3166.190452][T29299] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3166.196454][T29299] RIP: 0033:0x7f0beb3a7ae9 [ 3166.200857][T29299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3166.220469][T29299] RSP: 002b:00007f0bea72a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3166.228994][T29299] RAX: ffffffffffffffda RBX: 00007f0beb4c6f80 RCX: 00007f0beb3a7ae9 [ 3166.236954][T29299] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3166.245009][T29299] RBP: 00007f0beb3f347a R08: 0000000000000438 R09: 0000000000000000 [ 3166.252991][T29299] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3166.260966][T29299] R13: 000000000000000b R14: 00007f0beb4c6f80 R15: 00007ffe134d2ca8 [ 3166.268989][T29299] [ 3166.272152][T29299] memory: usage 307200kB, limit 307200kB, failcnt 172524 [ 3166.279239][T29299] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 3166.287159][T29299] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3166.294435][T29299] Memory cgroup stats for /syz5: [ 3166.297580][T29299] cache 0 [ 3166.305499][T29299] rss 12288 [ 3166.308614][T29299] shmem 0 [ 3166.311598][T29299] mapped_file 0 [ 3166.315124][T29299] dirty 0 [ 3166.318057][T29299] writeback 0 [ 3166.321332][T29299] workingset_refault_anon 111285 [ 3166.326282][T29299] workingset_refault_file 28 [ 3166.330863][T29299] swap 241664 [ 3166.334136][T29299] swapcached 16384 [ 3166.337904][T29299] pgpgin 190214 [ 3166.341354][T29299] pgpgout 190210 [ 3166.344887][T29299] pgfault 385541 [ 3166.348499][T29299] pgmajfault 49485 [ 3166.352206][T29299] inactive_anon 4096 [ 3166.356143][T29299] active_anon 12288 [ 3166.359944][T29299] inactive_file 0 [ 3166.363568][T29299] active_file 0 [ 3166.367056][T29299] unevictable 0 [ 3166.370505][T29299] hierarchical_memory_limit 314572800 [ 3166.375881][T29299] hierarchical_memsw_limit 9223372036854771712 [ 3166.382025][T29299] total_cache 0 [ 3166.385495][T29299] total_rss 12288 [ 3166.389161][T29299] total_shmem 0 [ 3166.392608][T29299] total_mapped_file 0 [ 3166.396605][T29299] total_dirty 0 [ 3166.400048][T29299] total_writeback 0 [ 3166.403841][T29299] total_workingset_refault_anon 111285 [ 3166.409322][T29299] total_workingset_refault_file 28 [ 3166.414513][T29299] total_swap 241664 [ 3166.418415][T29299] total_swapcached 16384 [ 3166.422650][T29299] total_pgpgin 190214 [ 3166.426637][T29299] total_pgpgout 190210 [ 3166.430698][T29299] total_pgfault 385541 [ 3166.434797][T29299] total_pgmajfault 49485 [ 3166.439053][T29299] total_inactive_anon 4096 [ 3166.443582][T29299] total_active_anon 12288 [ 3166.447950][T29299] total_inactive_file 0 [ 3166.452094][T29299] total_active_file 0 [ 3166.456118][T29299] total_unevictable 0 [ 3166.460142][T29299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29296,uid=0 [ 3166.475467][T29299] Memory cgroup out of memory: Killed process 29296 (syz-executor.5) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:37 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x29}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:37 executing program 1: syz_clone3(&(0x7f0000001200)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:21:37 executing program 0: syz_clone3(&(0x7f0000001700)={0x200040800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:21:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x6a}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2900, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:37 executing program 0: syz_clone3(&(0x7f0000000280)={0xb000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:21:37 executing program 1: bpf$BPF_PROG_DETACH(0x3, 0x0, 0x2b) 00:21:37 executing program 0: syz_clone3(&(0x7f0000000240)={0x20000900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:21:37 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x64}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3166.695506][T29329] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:37 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x458001, 0x0) 00:21:37 executing program 1: syz_emit_ethernet(0xd6, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)) 00:21:37 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udplite\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) [ 3166.814706][T29344] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3167.402839][T29324] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3167.416462][T29324] CPU: 0 PID: 29324 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3167.426888][T29324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3167.437025][T29324] Call Trace: [ 3167.440354][T29324] [ 3167.443358][T29324] dump_stack_lvl+0xda/0x130 [ 3167.447975][T29324] dump_stack+0x15/0x20 [ 3167.452140][T29324] dump_header+0x82/0x2d0 [ 3167.456545][T29324] oom_kill_process+0x33a/0x4c0 [ 3167.461498][T29324] out_of_memory+0x9ca/0xbf0 [ 3167.466093][T29324] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3167.472171][T29324] mem_cgroup_out_of_memory+0x139/0x190 [ 3167.477743][T29324] try_charge_memcg+0x75c/0xd30 [ 3167.482624][T29324] obj_cgroup_charge_pages+0xab/0x130 [ 3167.488039][T29324] __memcg_kmem_charge_page+0x9c/0x170 [ 3167.493514][T29324] __alloc_pages+0x1bb/0x340 [ 3167.498111][T29324] alloc_pages_mpol+0xb1/0x1d0 [ 3167.502880][T29324] alloc_pages+0xe0/0x100 [ 3167.507249][T29324] __vmalloc_node_range+0x6d2/0xea0 [ 3167.512471][T29324] kvmalloc_node+0x121/0x160 [ 3167.517065][T29324] ? xt_alloc_table_info+0x3d/0x80 [ 3167.522187][T29324] xt_alloc_table_info+0x3d/0x80 [ 3167.527136][T29324] do_arpt_set_ctl+0x634/0x13b0 [ 3167.532071][T29324] ? __futex_wait+0x227/0x280 [ 3167.536863][T29324] ? __futex_wake_mark+0x70/0x70 [ 3167.541902][T29324] ? tcp_release_cb+0xfe/0x370 [ 3167.546713][T29324] ? _raw_spin_unlock_bh+0x36/0x40 [ 3167.551880][T29324] nf_setsockopt+0x18d/0x1b0 [ 3167.556600][T29324] ip_setsockopt+0xe6/0x100 [ 3167.561124][T29324] tcp_setsockopt+0x90/0xa0 [ 3167.565705][T29324] sock_common_setsockopt+0x61/0x70 [ 3167.570924][T29324] ? sock_common_recvmsg+0xe0/0xe0 [ 3167.576081][T29324] __sys_setsockopt+0x1d4/0x240 [ 3167.580942][T29324] __x64_sys_setsockopt+0x66/0x80 [ 3167.585978][T29324] do_syscall_64+0x44/0x110 [ 3167.590585][T29324] ? syscall_exit_to_user_mode+0x38/0x140 [ 3167.596316][T29324] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3167.602227][T29324] RIP: 0033:0x7f6f32133ae9 [ 3167.606648][T29324] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3167.626249][T29324] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3167.634657][T29324] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3167.642757][T29324] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3167.650717][T29324] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3167.658835][T29324] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3167.666794][T29324] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3167.674758][T29324] [ 3167.677886][T29324] memory: usage 307196kB, limit 307200kB, failcnt 89350 [ 3167.684819][T29324] memory+swap: usage 307476kB, limit 9007199254740988kB, failcnt 0 [ 3167.692763][T29324] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 00:21:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2a00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:38 executing program 0: syz_clone3(&(0x7f0000001900)={0x2000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0x0], 0x1}, 0x58) 00:21:38 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0xfe}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0xfe}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) [ 3167.700268][T29324] Memory cgroup stats for /syz3: [ 3167.783262][T29324] cache 0 [ 3167.791206][T29324] rss 8192 [ 3167.794215][T29324] shmem 0 [ 3167.797316][T29324] mapped_file 0 [ 3167.800782][T29324] dirty 0 [ 3167.803824][T29324] writeback 0 [ 3167.807239][T29324] workingset_refault_anon 73808 [ 3167.812270][T29324] workingset_refault_file 64 [ 3167.816898][T29324] swap 286720 [ 3167.820179][T29324] swapcached 24576 [ 3167.823899][T29324] pgpgin 478064 [ 3167.827382][T29324] pgpgout 478058 [ 3167.830923][T29324] pgfault 904840 [ 3167.834487][T29324] pgmajfault 31106 [ 3167.838294][T29324] inactive_anon 24576 [ 3167.842330][T29324] active_anon 0 [ 3167.845817][T29324] inactive_file 0 [ 3167.849442][T29324] active_file 0 [ 3167.852906][T29324] unevictable 0 [ 3167.856457][T29324] hierarchical_memory_limit 314572800 [ 3167.861938][T29324] hierarchical_memsw_limit 9223372036854771712 [ 3167.868169][T29324] total_cache 0 [ 3167.870118][T29354] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3167.871681][T29324] total_rss 8192 [ 3167.871689][T29324] total_shmem 0 [ 3167.871696][T29324] total_mapped_file 0 [ 3167.871703][T29324] total_dirty 0 [ 3167.895524][T29324] total_writeback 0 [ 3167.899391][T29324] total_workingset_refault_anon 73808 [ 3167.904768][T29324] total_workingset_refault_file 64 [ 3167.910019][T29324] total_swap 286720 [ 3167.913987][T29324] total_swapcached 24576 [ 3167.918296][T29324] total_pgpgin 478064 [ 3167.922327][T29324] total_pgpgout 478058 [ 3167.926446][T29324] total_pgfault 904840 [ 3167.930521][T29324] total_pgmajfault 31106 [ 3167.934849][T29324] total_inactive_anon 24576 [ 3167.939396][T29324] total_active_anon 0 [ 3167.943463][T29324] total_inactive_file 0 [ 3167.947658][T29324] total_active_file 0 [ 3167.951651][T29324] total_unevictable 0 [ 3167.955671][T29324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29322,uid=0 [ 3167.971022][T29324] Memory cgroup out of memory: Killed process 29322 (syz-executor.3) total-vm:46560kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:39 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) 00:21:39 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x5f5e0ff}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff99) 00:21:39 executing program 0: syz_emit_ethernet(0xd6, &(0x7f0000000000)=ANY=[@ANYBLOB="4ec35904384d7c060058ad0781"], 0x0) 00:21:39 executing program 1: syz_clone3(&(0x7f00000005c0)={0x148024000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:21:39 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x2}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:39 executing program 0: socketpair(0x3b, 0x0, 0x0, &(0x7f0000000000)) [ 3168.282717][T29365] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3168.656006][T29355] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3168.667499][T29355] CPU: 0 PID: 29355 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3168.677982][T29355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3168.688081][T29355] Call Trace: [ 3168.691361][T29355] [ 3168.694315][T29355] dump_stack_lvl+0xda/0x130 [ 3168.698920][T29355] dump_stack+0x15/0x20 [ 3168.703079][T29355] dump_header+0x82/0x2d0 [ 3168.707406][T29355] oom_kill_process+0x33a/0x4c0 [ 3168.712267][T29355] out_of_memory+0x9ca/0xbf0 [ 3168.716912][T29355] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3168.723087][T29355] mem_cgroup_out_of_memory+0x139/0x190 [ 3168.728655][T29355] try_charge_memcg+0x75c/0xd30 [ 3168.733680][T29355] ? __swap_duplicate+0x29b/0x2b0 [ 3168.738728][T29355] ? radix_tree_lookup+0xf9/0x150 [ 3168.743842][T29355] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3168.749954][T29355] __read_swap_cache_async+0x2f6/0x550 [ 3168.755477][T29355] swap_cluster_readahead+0x27c/0x4c0 [ 3168.760952][T29355] swapin_readahead+0xe9/0x7f0 [ 3168.765722][T29355] ? __filemap_get_folio+0x41a/0x5a0 [ 3168.771020][T29355] ? swap_cache_get_folio+0x6e/0x200 [ 3168.776338][T29355] do_swap_page+0x4a0/0x1670 [ 3168.781067][T29355] ? asm_exc_page_fault+0x26/0x30 [ 3168.786164][T29355] ? __rcu_read_lock+0x35/0x50 [ 3168.790970][T29355] ? pte_offset_map_nolock+0x124/0x1d0 [ 3168.796477][T29355] handle_mm_fault+0xa36/0x2dd0 [ 3168.801382][T29355] exc_page_fault+0x3ff/0x6c0 [ 3168.806089][T29355] asm_exc_page_fault+0x26/0x30 [ 3168.810936][T29355] RIP: 0033:0x7f0beb361ae4 [ 3168.815346][T29355] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 3168.835066][T29355] RSP: 002b:00007ffe134d2d90 EFLAGS: 00010283 [ 3168.841264][T29355] RAX: 0000000000000000 RBX: 00007f0beb4c7050 RCX: 0000000000000000 [ 3168.849314][T29355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555fc5788 [ 3168.857298][T29355] RBP: 00007f0beb4c8980 R08: 0000000000000000 R09: 00007ffe135670b0 [ 3168.865406][T29355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000305987 [ 3168.873378][T29355] R13: ffffffffffffffff R14: 00007f0beaf2b000 R15: 0000000000305646 [ 3168.881361][T29355] [ 3168.884437][T29355] memory: usage 307200kB, limit 307200kB, failcnt 172675 [ 3168.891546][T29355] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 3168.899460][T29355] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 3168.906826][T29355] Memory cgroup stats for /syz5: [ 3168.908090][T29355] cache 0 [ 3168.916059][T29355] rss 12288 [ 3168.919167][T29355] shmem 0 [ 3168.922100][T29355] mapped_file 0 [ 3168.925586][T29355] dirty 0 [ 3168.928513][T29355] writeback 8192 [ 3168.932137][T29355] workingset_refault_anon 111410 [ 3168.937095][T29355] workingset_refault_file 28 [ 3168.941675][T29355] swap 237568 [ 3168.944974][T29355] swapcached 24576 [ 3168.948685][T29355] pgpgin 190389 [ 3168.952131][T29355] pgpgout 190383 [ 3168.955685][T29355] pgfault 385807 [ 3168.959248][T29355] pgmajfault 49544 [ 3168.962983][T29355] inactive_anon 0 [ 3168.966631][T29355] active_anon 0 [ 3168.970135][T29355] inactive_file 0 [ 3168.973763][T29355] active_file 0 [ 3168.977232][T29355] unevictable 0 [ 3168.980709][T29355] hierarchical_memory_limit 314572800 [ 3168.986155][T29355] hierarchical_memsw_limit 9223372036854771712 [ 3168.992304][T29355] total_cache 0 [ 3168.995792][T29355] total_rss 12288 [ 3168.999419][T29355] total_shmem 0 [ 3169.002868][T29355] total_mapped_file 0 [ 3169.006895][T29355] total_dirty 0 [ 3169.010435][T29355] total_writeback 8192 [ 3169.014495][T29355] total_workingset_refault_anon 111410 [ 3169.019977][T29355] total_workingset_refault_file 28 [ 3169.025098][T29355] total_swap 237568 [ 3169.029001][T29355] total_swapcached 24576 [ 3169.033229][T29355] total_pgpgin 190389 [ 3169.037212][T29355] total_pgpgout 190383 [ 3169.041296][T29355] total_pgfault 385807 [ 3169.045417][T29355] total_pgmajfault 49544 [ 3169.049740][T29355] total_inactive_anon 0 [ 3169.053981][T29355] total_active_anon 0 [ 3169.058040][T29355] total_inactive_file 0 [ 3169.062185][T29355] total_active_file 0 [ 3169.066233][T29355] total_unevictable 0 [ 3169.070271][T29355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29355,uid=0 [ 3169.085682][T29355] Memory cgroup out of memory: Killed process 29355 (syz-executor.5) total-vm:46560kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3169.106450][T29356] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3169.120005][T29356] CPU: 1 PID: 29356 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3169.130470][T29356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3169.140521][T29356] Call Trace: [ 3169.143797][T29356] [ 3169.146722][T29356] dump_stack_lvl+0xda/0x130 [ 3169.151352][T29356] dump_stack+0x15/0x20 [ 3169.155497][T29356] dump_header+0x82/0x2d0 [ 3169.159857][T29356] oom_kill_process+0x33a/0x4c0 [ 3169.164700][T29356] out_of_memory+0x9ca/0xbf0 [ 3169.169288][T29356] mem_cgroup_out_of_memory+0x139/0x190 [ 3169.174831][T29356] try_charge_memcg+0x75c/0xd30 [ 3169.179739][T29356] obj_cgroup_charge_pages+0xab/0x130 [ 3169.185104][T29356] __memcg_kmem_charge_page+0x9c/0x170 [ 3169.190611][T29356] __alloc_pages+0x1bb/0x340 [ 3169.195190][T29356] alloc_pages_mpol+0xb1/0x1d0 [ 3169.199952][T29356] alloc_pages+0xe0/0x100 [ 3169.204281][T29356] __vmalloc_node_range+0x6d2/0xea0 [ 3169.209614][T29356] kvmalloc_node+0x121/0x160 [ 3169.214262][T29356] ? xt_alloc_table_info+0x3d/0x80 [ 3169.219365][T29356] xt_alloc_table_info+0x3d/0x80 [ 3169.224355][T29356] do_arpt_set_ctl+0x634/0x13b0 [ 3169.229199][T29356] ? __futex_wait+0x227/0x280 [ 3169.233872][T29356] ? __futex_wake_mark+0x70/0x70 [ 3169.238843][T29356] ? tcp_release_cb+0xfe/0x370 [ 3169.243637][T29356] ? _raw_spin_unlock_bh+0x36/0x40 [ 3169.249182][T29356] nf_setsockopt+0x18d/0x1b0 [ 3169.253811][T29356] ip_setsockopt+0xe6/0x100 [ 3169.258352][T29356] tcp_setsockopt+0x90/0xa0 [ 3169.262850][T29356] sock_common_setsockopt+0x61/0x70 [ 3169.268048][T29356] ? sock_common_recvmsg+0xe0/0xe0 [ 3169.273258][T29356] __sys_setsockopt+0x1d4/0x240 [ 3169.279448][T29356] __x64_sys_setsockopt+0x66/0x80 [ 3169.284475][T29356] do_syscall_64+0x44/0x110 [ 3169.288975][T29356] ? syscall_exit_to_user_mode+0x38/0x140 [ 3169.294744][T29356] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3169.300729][T29356] RIP: 0033:0x7f2cd3f63ae9 [ 3169.305131][T29356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3169.324770][T29356] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3169.333171][T29356] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3169.341130][T29356] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3169.349163][T29356] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3169.357179][T29356] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3169.365141][T29356] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3169.373132][T29356] [ 3169.376247][T29356] memory: usage 307200kB, limit 307200kB, failcnt 163696 [ 3169.383346][T29356] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 3169.391274][T29356] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3169.398599][T29356] Memory cgroup stats for /syz2: [ 3169.403896][T29356] cache 0 [ 3169.411802][T29356] rss 8192 [ 3169.414828][T29356] shmem 0 [ 3169.417826][T29356] mapped_file 0 [ 3169.421278][T29356] dirty 0 [ 3169.424284][T29356] writeback 0 [ 3169.427565][T29356] workingset_refault_anon 111484 [ 3169.432491][T29356] workingset_refault_file 41 [ 3169.437092][T29356] swap 274432 [ 3169.440407][T29356] swapcached 8192 [ 3169.444119][T29356] pgpgin 207441 [ 3169.447638][T29356] pgpgout 207439 [ 3169.451205][T29356] pgfault 419053 [ 3169.454751][T29356] pgmajfault 46929 [ 3169.458502][T29356] inactive_anon 8192 [ 3169.462484][T29356] active_anon 0 [ 3169.465954][T29356] inactive_file 0 [ 3169.469575][T29356] active_file 0 [ 3169.473021][T29356] unevictable 0 [ 3169.476482][T29356] hierarchical_memory_limit 314572800 [ 3169.481915][T29356] hierarchical_memsw_limit 9223372036854771712 [ 3169.488149][T29356] total_cache 0 [ 3169.491675][T29356] total_rss 8192 [ 3169.495254][T29356] total_shmem 0 [ 3169.498707][T29356] total_mapped_file 0 [ 3169.502763][T29356] total_dirty 0 [ 3169.506288][T29356] total_writeback 0 [ 3169.510085][T29356] total_workingset_refault_anon 111484 [ 3169.515579][T29356] total_workingset_refault_file 41 [ 3169.520675][T29356] total_swap 274432 [ 3169.524486][T29356] total_swapcached 8192 [ 3169.528724][T29356] total_pgpgin 207441 [ 3169.532781][T29356] total_pgpgout 207439 [ 3169.536937][T29356] total_pgfault 419053 [ 3169.541046][T29356] total_pgmajfault 46929 [ 3169.545295][T29356] total_inactive_anon 8192 [ 3169.549693][T29356] total_active_anon 0 [ 3169.553667][T29356] total_inactive_file 0 [ 3169.557854][T29356] total_active_file 0 [ 3169.561826][T29356] total_unevictable 0 [ 3169.565908][T29356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29353,uid=0 [ 3169.581202][T29356] Memory cgroup out of memory: Killed process 29353 (syz-executor.2) total-vm:46560kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3169.613882][T29375] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3169.627471][T29375] CPU: 0 PID: 29375 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3169.637925][T29375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3169.648012][T29375] Call Trace: [ 3169.651351][T29375] [ 3169.654343][T29375] dump_stack_lvl+0xda/0x130 [ 3169.658945][T29375] dump_stack+0x15/0x20 [ 3169.663141][T29375] dump_header+0x82/0x2d0 [ 3169.667485][T29375] oom_kill_process+0x33a/0x4c0 [ 3169.672370][T29375] out_of_memory+0x9ca/0xbf0 [ 3169.677013][T29375] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3169.683231][T29375] mem_cgroup_out_of_memory+0x139/0x190 [ 3169.688791][T29375] try_charge_memcg+0x75c/0xd30 [ 3169.693651][T29375] obj_cgroup_charge_pages+0xab/0x130 [ 3169.699020][T29375] __memcg_kmem_charge_page+0x9c/0x170 [ 3169.704486][T29375] __alloc_pages+0x1bb/0x340 [ 3169.709062][T29375] alloc_pages_mpol+0xb1/0x1d0 [ 3169.713819][T29375] alloc_pages+0xe0/0x100 [ 3169.718140][T29375] __vmalloc_node_range+0x6d2/0xea0 [ 3169.723344][T29375] kvmalloc_node+0x121/0x160 [ 3169.727937][T29375] ? xt_alloc_table_info+0x3d/0x80 [ 3169.733071][T29375] xt_alloc_table_info+0x3d/0x80 [ 3169.738000][T29375] do_arpt_set_ctl+0x634/0x13b0 [ 3169.742942][T29375] ? __futex_wait+0x227/0x280 [ 3169.747629][T29375] ? __futex_wake_mark+0x70/0x70 [ 3169.752573][T29375] ? tcp_release_cb+0xfe/0x370 [ 3169.757337][T29375] ? _raw_spin_unlock_bh+0x36/0x40 [ 3169.762451][T29375] nf_setsockopt+0x18d/0x1b0 [ 3169.767110][T29375] ip_setsockopt+0xe6/0x100 [ 3169.771625][T29375] tcp_setsockopt+0x90/0xa0 [ 3169.776120][T29375] sock_common_setsockopt+0x61/0x70 [ 3169.781369][T29375] ? sock_common_recvmsg+0xe0/0xe0 [ 3169.786528][T29375] __sys_setsockopt+0x1d4/0x240 [ 3169.791381][T29375] __x64_sys_setsockopt+0x66/0x80 [ 3169.796520][T29375] do_syscall_64+0x44/0x110 [ 3169.801030][T29375] ? syscall_exit_to_user_mode+0x38/0x140 [ 3169.806761][T29375] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3169.812731][T29375] RIP: 0033:0x7f6f32133ae9 [ 3169.817229][T29375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3169.836929][T29375] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3169.845333][T29375] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3169.853632][T29375] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3169.861646][T29375] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3169.869605][T29375] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3169.877577][T29375] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3169.885583][T29375] [ 3169.888667][T29375] memory: usage 307200kB, limit 307200kB, failcnt 89422 [ 3169.895874][T29375] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0 [ 3169.903768][T29375] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 00:21:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2b00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:41 executing program 0: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffa) 00:21:41 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x3}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3169.911072][T29375] Memory cgroup stats for /syz3: [ 3169.923782][T29375] cache 0 [ 3169.931791][T29375] rss 8192 [ 3169.934816][T29375] shmem 0 [ 3169.937823][T29375] mapped_file 0 [ 3169.941270][T29375] dirty 0 [ 3169.944229][T29375] writeback 8192 [ 3169.947858][T29375] workingset_refault_anon 73866 [ 3169.952803][T29375] workingset_refault_file 64 [ 3169.957412][T29375] swap 331776 [ 3169.960690][T29375] swapcached 8192 [ 3169.964313][T29375] pgpgin 478146 [ 3169.967781][T29375] pgpgout 478144 [ 3169.971499][T29375] pgfault 904989 [ 3169.975102][T29375] pgmajfault 31125 [ 3169.978812][T29375] inactive_anon 0 [ 3169.982498][T29375] active_anon 0 [ 3169.985975][T29375] inactive_file 0 [ 3169.989726][T29375] active_file 0 [ 3169.993180][T29375] unevictable 0 [ 3169.996693][T29375] hierarchical_memory_limit 314572800 [ 3170.002056][T29375] hierarchical_memsw_limit 9223372036854771712 [ 3170.008236][T29375] total_cache 0 [ 3170.011744][T29375] total_rss 8192 [ 3170.015304][T29375] total_shmem 0 [ 3170.018815][T29375] total_mapped_file 0 [ 3170.022785][T29375] total_dirty 0 [ 3170.026252][T29375] total_writeback 8192 [ 3170.030308][T29375] total_workingset_refault_anon 73866 [ 3170.035705][T29375] total_workingset_refault_file 64 [ 3170.040812][T29375] total_swap 331776 [ 3170.044601][T29375] total_swapcached 8192 [ 3170.048803][T29375] total_pgpgin 478146 [ 3170.052774][T29375] total_pgpgout 478144 [ 3170.056913][T29375] total_pgfault 904989 [ 3170.061033][T29375] total_pgmajfault 31125 [ 3170.065318][T29375] total_inactive_anon 0 [ 3170.069521][T29375] total_active_anon 0 [ 3170.073503][T29375] total_inactive_file 0 [ 3170.077689][T29375] total_active_file 0 [ 3170.081677][T29375] total_unevictable 0 [ 3170.085682][T29375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29371,uid=0 [ 3170.101015][T29375] Memory cgroup out of memory: Killed process 29371 (syz-executor.3) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0xff}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:41 executing program 1: socketpair(0x0, 0x0, 0x1, &(0x7f0000000800)) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004400)='ns/user\x00') 00:21:41 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x4}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:41 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8905, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 00:21:41 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x5}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:41 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2}}) 00:21:41 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5451, 0x0) 00:21:41 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) [ 3171.020259][T29391] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3171.033926][T29391] CPU: 0 PID: 29391 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3171.044336][T29391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3171.054387][T29391] Call Trace: [ 3171.057689][T29391] [ 3171.060626][T29391] dump_stack_lvl+0xda/0x130 [ 3171.065222][T29391] dump_stack+0x15/0x20 [ 3171.069380][T29391] dump_header+0x82/0x2d0 [ 3171.073808][T29391] oom_kill_process+0x33a/0x4c0 [ 3171.078668][T29391] out_of_memory+0x9ca/0xbf0 [ 3171.083363][T29391] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3171.089443][T29391] mem_cgroup_out_of_memory+0x139/0x190 [ 3171.095001][T29391] try_charge_memcg+0x75c/0xd30 [ 3171.099979][T29391] obj_cgroup_charge_pages+0xab/0x130 [ 3171.105405][T29391] __memcg_kmem_charge_page+0x9c/0x170 [ 3171.110906][T29391] __alloc_pages+0x1bb/0x340 [ 3171.115532][T29391] alloc_pages_mpol+0xb1/0x1d0 [ 3171.120300][T29391] alloc_pages+0xe0/0x100 [ 3171.124743][T29391] __vmalloc_node_range+0x6d2/0xea0 [ 3171.130310][T29391] kvmalloc_node+0x121/0x160 [ 3171.134903][T29391] ? xt_alloc_table_info+0x3d/0x80 [ 3171.140019][T29391] xt_alloc_table_info+0x3d/0x80 [ 3171.145025][T29391] do_arpt_set_ctl+0x634/0x13b0 [ 3171.149889][T29391] ? __futex_wait+0x227/0x280 [ 3171.154679][T29391] ? __futex_wake_mark+0x70/0x70 [ 3171.159623][T29391] ? tcp_release_cb+0xfe/0x370 [ 3171.164399][T29391] ? _raw_spin_unlock_bh+0x36/0x40 [ 3171.169604][T29391] nf_setsockopt+0x18d/0x1b0 [ 3171.174290][T29391] ip_setsockopt+0xe6/0x100 [ 3171.178797][T29391] tcp_setsockopt+0x90/0xa0 [ 3171.183321][T29391] sock_common_setsockopt+0x61/0x70 [ 3171.188611][T29391] ? sock_common_recvmsg+0xe0/0xe0 [ 3171.193774][T29391] __sys_setsockopt+0x1d4/0x240 [ 3171.198628][T29391] __x64_sys_setsockopt+0x66/0x80 [ 3171.203744][T29391] do_syscall_64+0x44/0x110 [ 3171.208362][T29391] ? syscall_exit_to_user_mode+0x38/0x140 [ 3171.214102][T29391] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3171.220059][T29391] RIP: 0033:0x7f2cd3f63ae9 [ 3171.224473][T29391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3171.244136][T29391] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3171.252622][T29391] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3171.261139][T29391] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 00:21:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2c00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:42 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x6}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:42 executing program 1: bpf$BPF_PROG_QUERY(0x1b, 0x0, 0x0) [ 3171.269116][T29391] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3171.277153][T29391] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3171.285129][T29391] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3171.293188][T29391] [ 3171.296282][T29391] memory: usage 307200kB, limit 307200kB, failcnt 164050 [ 3171.303353][T29391] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0 [ 3171.311325][T29391] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 3171.318707][T29391] Memory cgroup stats for /syz2: [ 3171.323911][T29391] cache 0 [ 3171.331875][T29391] rss 4096 [ 3171.334899][T29391] shmem 0 [ 3171.338009][T29391] mapped_file 0 [ 3171.341462][T29391] dirty 0 [ 3171.344400][T29391] writeback 0 [ 3171.347770][T29391] workingset_refault_anon 111557 [ 3171.352710][T29391] workingset_refault_file 41 [ 3171.357333][T29391] swap 233472 [ 3171.360615][T29391] swapcached 4096 [ 3171.364242][T29391] pgpgin 207538 [ 3171.367711][T29391] pgpgout 207537 [ 3171.371250][T29391] pgfault 419245 [ 3171.374844][T29391] pgmajfault 46982 [ 3171.378585][T29391] inactive_anon 4096 [ 3171.382498][T29391] active_anon 0 [ 3171.386008][T29391] inactive_file 0 [ 3171.389638][T29391] active_file 0 [ 3171.393100][T29391] unevictable 0 [ 3171.396647][T29391] hierarchical_memory_limit 314572800 [ 3171.402046][T29391] hierarchical_memsw_limit 9223372036854771712 [ 3171.408283][T29391] total_cache 0 [ 3171.411790][T29391] total_rss 4096 [ 3171.415350][T29391] total_shmem 0 [ 3171.418809][T29391] total_mapped_file 0 [ 3171.422796][T29391] total_dirty 0 [ 3171.426366][T29391] total_writeback 0 [ 3171.430170][T29391] total_workingset_refault_anon 111557 [ 3171.435691][T29391] total_workingset_refault_file 41 [ 3171.440820][T29391] total_swap 233472 [ 3171.444626][T29391] total_swapcached 4096 [ 3171.448942][T29391] total_pgpgin 207538 [ 3171.452939][T29391] total_pgpgout 207537 [ 3171.457091][T29391] total_pgfault 419245 [ 3171.461149][T29391] total_pgmajfault 46982 [ 3171.465409][T29391] total_inactive_anon 4096 [ 3171.469818][T29391] total_active_anon 0 [ 3171.473795][T29391] total_inactive_file 0 [ 3171.477965][T29391] total_active_file 0 [ 3171.481937][T29391] total_unevictable 0 [ 3171.485969][T29391] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29390,uid=0 [ 3171.501317][T29391] Memory cgroup out of memory: Killed process 29390 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3171.519743][T29405] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3171.533509][T29405] CPU: 1 PID: 29405 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3171.543929][T29405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3171.553990][T29405] Call Trace: [ 3171.557334][T29405] [ 3171.560260][T29405] dump_stack_lvl+0xda/0x130 [ 3171.564907][T29405] dump_stack+0x15/0x20 [ 3171.569071][T29405] dump_header+0x82/0x2d0 [ 3171.573453][T29405] oom_kill_process+0x33a/0x4c0 [ 3171.578322][T29405] out_of_memory+0x9ca/0xbf0 [ 3171.583001][T29405] mem_cgroup_out_of_memory+0x139/0x190 [ 3171.588551][T29405] try_charge_memcg+0x75c/0xd30 [ 3171.593590][T29405] obj_cgroup_charge_pages+0xab/0x130 [ 3171.599075][T29405] __memcg_kmem_charge_page+0x9c/0x170 [ 3171.604538][T29405] __alloc_pages+0x1bb/0x340 [ 3171.609118][T29405] alloc_pages_mpol+0xb1/0x1d0 [ 3171.613921][T29405] alloc_pages+0xe0/0x100 [ 3171.618243][T29405] __vmalloc_node_range+0x6d2/0xea0 [ 3171.623444][T29405] kvmalloc_node+0x121/0x160 [ 3171.628073][T29405] ? xt_alloc_table_info+0x3d/0x80 [ 3171.633179][T29405] xt_alloc_table_info+0x3d/0x80 [ 3171.638127][T29405] do_arpt_set_ctl+0x634/0x13b0 [ 3171.643075][T29405] ? __futex_wait+0x227/0x280 [ 3171.647766][T29405] ? __futex_wake_mark+0x70/0x70 [ 3171.652695][T29405] ? tcp_release_cb+0xfe/0x370 [ 3171.657612][T29405] ? _raw_spin_unlock_bh+0x36/0x40 [ 3171.662771][T29405] nf_setsockopt+0x18d/0x1b0 [ 3171.667360][T29405] ip_setsockopt+0xe6/0x100 [ 3171.671928][T29405] tcp_setsockopt+0x90/0xa0 [ 3171.676427][T29405] sock_common_setsockopt+0x61/0x70 [ 3171.681730][T29405] ? sock_common_recvmsg+0xe0/0xe0 [ 3171.686842][T29405] __sys_setsockopt+0x1d4/0x240 [ 3171.691743][T29405] __x64_sys_setsockopt+0x66/0x80 [ 3171.696758][T29405] do_syscall_64+0x44/0x110 [ 3171.701288][T29405] ? syscall_exit_to_user_mode+0x38/0x140 [ 3171.707083][T29405] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3171.713063][T29405] RIP: 0033:0x7f6f32133ae9 [ 3171.717466][T29405] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3171.737145][T29405] RSP: 002b:00007f6f314b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3171.745593][T29405] RAX: ffffffffffffffda RBX: 00007f6f32252f80 RCX: 00007f6f32133ae9 [ 3171.753645][T29405] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3171.761613][T29405] RBP: 00007f6f3217f47a R08: 0000000000000438 R09: 0000000000000000 [ 3171.769620][T29405] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3171.777606][T29405] R13: 000000000000000b R14: 00007f6f32252f80 R15: 00007fff798850b8 [ 3171.785597][T29405] [ 3171.788685][T29405] memory: usage 307200kB, limit 307200kB, failcnt 89627 [ 3171.795768][T29405] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 3171.803708][T29405] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3171.811086][T29405] Memory cgroup stats for /syz3: [ 3171.815461][T29405] cache 0 [ 3171.823422][T29405] rss 8192 [ 3171.826945][T29405] shmem 0 [ 3171.829941][T29405] mapped_file 0 [ 3171.833442][T29405] dirty 0 [ 3171.836387][T29405] writeback 0 [ 3171.839663][T29405] workingset_refault_anon 73917 [ 3171.844504][T29405] workingset_refault_file 64 [ 3171.849188][T29405] swap 299008 [ 3171.852544][T29405] swapcached 8192 [ 3171.856218][T29405] pgpgin 478221 [ 3171.859700][T29405] pgpgout 478219 [ 3171.863293][T29405] pgfault 905151 [ 3171.866927][T29405] pgmajfault 31141 [ 3171.870643][T29405] inactive_anon 8192 [ 3171.874635][T29405] active_anon 0 [ 3171.878112][T29405] inactive_file 0 [ 3171.881793][T29405] active_file 0 [ 3171.885356][T29405] unevictable 0 [ 3171.888883][T29405] hierarchical_memory_limit 314572800 [ 3171.894253][T29405] hierarchical_memsw_limit 9223372036854771712 [ 3171.900510][T29405] total_cache 0 [ 3171.904009][T29405] total_rss 8192 [ 3171.907634][T29405] total_shmem 0 [ 3171.911095][T29405] total_mapped_file 0 [ 3171.915159][T29405] total_dirty 0 [ 3171.918607][T29405] total_writeback 0 [ 3171.922416][T29405] total_workingset_refault_anon 73917 [ 3171.927819][T29405] total_workingset_refault_file 64 [ 3171.932945][T29405] total_swap 299008 [ 3171.936763][T29405] total_swapcached 8192 [ 3171.940920][T29405] total_pgpgin 478221 [ 3171.944913][T29405] total_pgpgout 478219 [ 3171.949045][T29405] total_pgfault 905151 [ 3171.953109][T29405] total_pgmajfault 31141 [ 3171.957407][T29405] total_inactive_anon 8192 [ 3171.961817][T29405] total_active_anon 0 [ 3171.965810][T29405] total_inactive_file 0 [ 3171.969957][T29405] total_active_file 0 [ 3171.973927][T29405] total_unevictable 0 [ 3171.977916][T29405] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29402,uid=0 [ 3171.993208][T29405] Memory cgroup out of memory: Killed process 29402 (syz-executor.3) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:43 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220c0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000140)) 00:21:43 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x7}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa0902, 0x0) write$eventfd(r0, 0x0, 0x0) 00:21:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) 00:21:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffffffffffff19) 00:21:43 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x8}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:43 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) 00:21:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2d00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:43 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220c0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x80, &(0x7f0000000240)) 00:21:43 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220c0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x2, &(0x7f0000000140)) 00:21:43 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0x9}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:43 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 00:21:43 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0xa}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:43 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="7be0d3a5b21c774e2977bf7300e72a84748ad9485185dc22bad47853db1b1c65db2cc680edf4cf3cceb49fe022831ff6e136e79da3b5cc4ad1ffb324", 0x3c}, {&(0x7f0000000100)="a89ad89fdb", 0x5}], 0x2}, 0x20008051) [ 3173.107350][T29429] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3173.120933][T29429] CPU: 1 PID: 29429 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3173.131354][T29429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3173.141500][T29429] Call Trace: [ 3173.144853][T29429] [ 3173.147849][T29429] dump_stack_lvl+0xda/0x130 [ 3173.152508][T29429] dump_stack+0x15/0x20 [ 3173.156673][T29429] dump_header+0x82/0x2d0 [ 3173.161065][T29429] oom_kill_process+0x33a/0x4c0 [ 3173.165923][T29429] out_of_memory+0x9ca/0xbf0 [ 3173.170590][T29429] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3173.176809][T29429] mem_cgroup_out_of_memory+0x139/0x190 [ 3173.182369][T29429] try_charge_memcg+0x75c/0xd30 [ 3173.187235][T29429] obj_cgroup_charge_pages+0xab/0x130 [ 3173.192641][T29429] __memcg_kmem_charge_page+0x9c/0x170 [ 3173.198118][T29429] __alloc_pages+0x1bb/0x340 [ 3173.202790][T29429] alloc_pages_mpol+0xb1/0x1d0 [ 3173.207559][T29429] alloc_pages+0xe0/0x100 [ 3173.211949][T29429] __vmalloc_node_range+0x6d2/0xea0 [ 3173.217294][T29429] kvmalloc_node+0x121/0x160 [ 3173.221888][T29429] ? xt_alloc_table_info+0x3d/0x80 [ 3173.227011][T29429] xt_alloc_table_info+0x3d/0x80 [ 3173.231987][T29429] do_arpt_set_ctl+0x634/0x13b0 [ 3173.236921][T29429] ? __futex_wait+0x227/0x280 [ 3173.241630][T29429] ? __futex_wake_mark+0x70/0x70 [ 3173.246575][T29429] ? tcp_release_cb+0xfe/0x370 [ 3173.251416][T29429] ? _raw_spin_unlock_bh+0x36/0x40 [ 3173.256620][T29429] nf_setsockopt+0x18d/0x1b0 [ 3173.261311][T29429] ip_setsockopt+0xe6/0x100 [ 3173.265896][T29429] tcp_setsockopt+0x90/0xa0 [ 3173.270465][T29429] sock_common_setsockopt+0x61/0x70 [ 3173.275729][T29429] ? sock_common_recvmsg+0xe0/0xe0 [ 3173.281006][T29429] __sys_setsockopt+0x1d4/0x240 [ 3173.285934][T29429] __x64_sys_setsockopt+0x66/0x80 [ 3173.290962][T29429] do_syscall_64+0x44/0x110 [ 3173.295508][T29429] ? syscall_exit_to_user_mode+0x38/0x140 [ 3173.302434][T29429] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3173.308396][T29429] RIP: 0033:0x7f2cd3f63ae9 [ 3173.312814][T29429] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3173.332432][T29429] RSP: 002b:00007f2cd32e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3173.340860][T29429] RAX: ffffffffffffffda RBX: 00007f2cd4082f80 RCX: 00007f2cd3f63ae9 [ 3173.348828][T29429] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3173.356893][T29429] RBP: 00007f2cd3faf47a R08: 0000000000000438 R09: 0000000000000000 [ 3173.364904][T29429] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3173.372939][T29429] R13: 000000000000000b R14: 00007f2cd4082f80 R15: 00007ffcf5b112a8 [ 3173.380995][T29429] [ 3173.384113][T29429] memory: usage 307200kB, limit 307200kB, failcnt 164326 [ 3173.391558][T29429] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 3173.399562][T29429] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3173.406940][T29429] Memory cgroup stats for /syz2: [ 3173.407879][T29429] cache 0 [ 3173.415858][T29429] rss 8192 [ 3173.418876][T29429] shmem 0 [ 3173.421883][T29429] mapped_file 0 [ 3173.425684][T29429] dirty 0 [ 3173.428616][T29429] writeback 0 [ 3173.431981][T29429] workingset_refault_anon 111589 [ 3173.436945][T29429] workingset_refault_file 41 [ 3173.441595][T29429] swap 294912 [ 3173.445043][T29429] swapcached 8192 [ 3173.448676][T29429] pgpgin 207594 [ 3173.452122][T29429] pgpgout 207592 [ 3173.455700][T29429] pgfault 419358 [ 3173.459237][T29429] pgmajfault 46993 [ 3173.462949][T29429] inactive_anon 0 [ 3173.466635][T29429] active_anon 0 [ 3173.470180][T29429] inactive_file 0 [ 3173.473806][T29429] active_file 0 [ 3173.477334][T29429] unevictable 0 [ 3173.480837][T29429] hierarchical_memory_limit 314572800 [ 3173.486262][T29429] hierarchical_memsw_limit 9223372036854771712 [ 3173.492505][T29429] total_cache 0 [ 3173.495987][T29429] total_rss 8192 [ 3173.499623][T29429] total_shmem 0 [ 3173.503141][T29429] total_mapped_file 0 [ 3173.507155][T29429] total_dirty 0 [ 3173.510634][T29429] total_writeback 0 [ 3173.514465][T29429] total_workingset_refault_anon 111589 [ 3173.520012][T29429] total_workingset_refault_file 41 [ 3173.525166][T29429] total_swap 294912 [ 3173.529017][T29429] total_swapcached 8192 [ 3173.533190][T29429] total_pgpgin 207594 [ 3173.537208][T29429] total_pgpgout 207592 [ 3173.541264][T29429] total_pgfault 419358 [ 3173.545352][T29429] total_pgmajfault 46993 [ 3173.549674][T29429] total_inactive_anon 0 [ 3173.553954][T29429] total_active_anon 0 [ 3173.557952][T29429] total_inactive_file 0 [ 3173.562120][T29429] total_active_file 0 [ 3173.566139][T29429] total_unevictable 0 [ 3173.570175][T29429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29426,uid=0 [ 3173.585580][T29429] Memory cgroup out of memory: Killed process 29426 (syz-executor.2) total-vm:46428kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3173.605834][T29435] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 3173.619480][T29435] CPU: 0 PID: 29435 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3173.629903][T29435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3173.639953][T29435] Call Trace: [ 3173.643227][T29435] [ 3173.646146][T29435] dump_stack_lvl+0xda/0x130 [ 3173.650997][T29435] dump_stack+0x15/0x20 [ 3173.655166][T29435] dump_header+0x82/0x2d0 [ 3173.659502][T29435] oom_kill_process+0x33a/0x4c0 [ 3173.664350][T29435] out_of_memory+0x9ca/0xbf0 [ 3173.669007][T29435] mem_cgroup_out_of_memory+0x139/0x190 [ 3173.674557][T29435] try_charge_memcg+0x75c/0xd30 [ 3173.679475][T29435] obj_cgroup_charge_pages+0xab/0x130 [ 3173.684843][T29435] __memcg_kmem_charge_page+0x9c/0x170 [ 3173.690294][T29435] __alloc_pages+0x1bb/0x340 [ 3173.694942][T29435] alloc_pages_mpol+0xb1/0x1d0 [ 3173.699751][T29435] alloc_pages+0xe0/0x100 [ 3173.704152][T29435] __vmalloc_node_range+0x6d2/0xea0 [ 3173.709479][T29435] kvmalloc_node+0x121/0x160 [ 3173.714220][T29435] ? xt_alloc_table_info+0x3d/0x80 [ 3173.719382][T29435] xt_alloc_table_info+0x3d/0x80 [ 3173.724340][T29435] do_arpt_set_ctl+0x634/0x13b0 [ 3173.729246][T29435] ? __futex_wait+0x227/0x280 [ 3173.734069][T29435] ? __futex_wake_mark+0x70/0x70 [ 3173.739053][T29435] ? tcp_release_cb+0xfe/0x370 [ 3173.743810][T29435] ? _raw_spin_unlock_bh+0x36/0x40 [ 3173.749003][T29435] nf_setsockopt+0x18d/0x1b0 [ 3173.753609][T29435] ip_setsockopt+0xe6/0x100 [ 3173.758132][T29435] tcp_setsockopt+0x90/0xa0 [ 3173.762638][T29435] sock_common_setsockopt+0x61/0x70 [ 3173.767923][T29435] ? sock_common_recvmsg+0xe0/0xe0 [ 3173.773075][T29435] __sys_setsockopt+0x1d4/0x240 [ 3173.777916][T29435] __x64_sys_setsockopt+0x66/0x80 [ 3173.782937][T29435] do_syscall_64+0x44/0x110 [ 3173.787466][T29435] ? syscall_exit_to_user_mode+0x38/0x140 [ 3173.793186][T29435] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3173.799081][T29435] RIP: 0033:0x7f0beb3a7ae9 [ 3173.803488][T29435] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3173.823119][T29435] RSP: 002b:00007f0bea72a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3173.831545][T29435] RAX: ffffffffffffffda RBX: 00007f0beb4c6f80 RCX: 00007f0beb3a7ae9 [ 3173.839505][T29435] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 3173.847463][T29435] RBP: 00007f0beb3f347a R08: 0000000000000438 R09: 0000000000000000 [ 3173.855523][T29435] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 3173.863531][T29435] R13: 000000000000000b R14: 00007f0beb4c6f80 R15: 00007ffe134d2ca8 [ 3173.871589][T29435] [ 3173.874698][T29435] memory: usage 307176kB, limit 307200kB, failcnt 173103 [ 3173.881737][T29435] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 3173.889789][T29435] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 3173.897428][T29435] Memory cgroup stats for /syz5: [ 3173.907140][T29435] cache 0 [ 3173.915250][T29435] rss 20480 [ 3173.918439][T29435] shmem 0 [ 3173.921536][T29435] mapped_file 0 [ 3173.925023][T29435] dirty 0 [ 3173.927986][T29435] writeback 0 [ 3173.931351][T29435] workingset_refault_anon 111555 [ 3173.936307][T29435] workingset_refault_file 28 [ 3173.940951][T29435] swap 233472 [ 3173.944233][T29435] swapcached 20480 [ 3173.948070][T29435] pgpgin 190606 [ 3173.951603][T29435] pgpgout 190600 [ 3173.955181][T29435] pgfault 386262 00:21:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0xff03, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, 0x0) [ 3173.958787][T29435] pgmajfault 49611 [ 3173.962500][T29435] inactive_anon 0 [ 3173.966145][T29435] active_anon 0 [ 3173.969725][T29435] inactive_file 0 [ 3173.973376][T29435] active_file 0 [ 3173.976852][T29435] unevictable 0 [ 3173.980306][T29435] hierarchical_memory_limit 314572800 [ 3173.985703][T29435] hierarchical_memsw_limit 9223372036854771712 [ 3173.991933][T29435] total_cache 0 [ 3173.995484][T29435] total_rss 20480 [ 3173.999135][T29435] total_shmem 0 [ 3174.002591][T29435] total_mapped_file 0 [ 3174.006613][T29435] total_dirty 0 00:21:45 executing program 0: symlinkat(&(0x7f0000000840)='./file0\x00', 0xffffffffffffffff, 0x0) 00:21:45 executing program 1: symlinkat(&(0x7f0000000840)='./file0\x00', 0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00') 00:21:45 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0xb}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) [ 3174.010117][T29435] total_writeback 0 [ 3174.013922][T29435] total_workingset_refault_anon 111555 [ 3174.019417][T29435] total_workingset_refault_file 28 [ 3174.024623][T29435] total_swap 233472 [ 3174.028481][T29435] total_swapcached 20480 [ 3174.032713][T29435] total_pgpgin 190606 [ 3174.036709][T29435] total_pgpgout 190600 [ 3174.040836][T29435] total_pgfault 386262 [ 3174.044913][T29435] total_pgmajfault 49611 [ 3174.049180][T29435] total_inactive_anon 0 [ 3174.053324][T29435] total_active_anon 0 [ 3174.057356][T29435] total_inactive_file 0 [ 3174.061519][T29435] total_active_file 0 [ 3174.065512][T29435] total_unevictable 0 [ 3174.069506][T29435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29427,uid=0 [ 3174.085019][T29435] Memory cgroup out of memory: Killed process 29427 (syz-executor.5) total-vm:46428kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:21:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 00:21:45 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)='h', 0x1) 00:21:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x1}, {0x0, 0x2}, {0x0, 0x2, 0x10}]}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086607, &(0x7f0000000040)) 00:21:45 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe78) write$P9_RLOPEN(r0, 0x0, 0x0) 00:21:45 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0xc}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:45 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) 00:21:45 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000400001005913c313030300b6e887cb3c64df00c9ebb2524f1efdb0737168173b09c8dad80cfd3825c3022dc3274f48d44485a4fe972b084801bd000000000000080002000500000014000500fe88000000000000000000000000000104000600fe00"/124], 0x84}, 0x1, 0x10, 0xd}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) 00:21:45 executing program 0: bpf$BPF_PROG_QUERY(0x23, &(0x7f0000000580)={@ifindex, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 3174.801588][T29452] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 3174.813000][T29452] CPU: 0 PID: 29452 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 3174.823452][T29452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3174.833513][T29452] Call Trace: [ 3174.836841][T29452] [ 3174.839777][T29452] dump_stack_lvl+0xda/0x130 [ 3174.844377][T29452] dump_stack+0x15/0x20 [ 3174.848542][T29452] dump_header+0x82/0x2d0 [ 3174.852881][T29452] oom_kill_process+0x33a/0x4c0 [ 3174.857757][T29452] out_of_memory+0x9ca/0xbf0 [ 3174.862407][T29452] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 3174.868541][T29452] mem_cgroup_out_of_memory+0x139/0x190 [ 3174.874140][T29452] try_charge_memcg+0x75c/0xd30 [ 3174.879058][T29452] ? __swap_duplicate+0x29b/0x2b0 [ 3174.884209][T29452] ? radix_tree_lookup+0xf9/0x150 [ 3174.889251][T29452] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 3174.895325][T29452] __read_swap_cache_async+0x2f6/0x550