amily_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2794.931355][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2795.017787][T14046] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2795.091360][T14046] CPU: 0 PID: 14046 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2795.101602][T14046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2795.111683][T14046] Call Trace: [ 2795.114979][T14046] [ 2795.117935][T14046] dump_stack_lvl+0xcd/0x134 [ 2795.122554][T14046] dump_header+0x10b/0x7f9 [ 2795.127014][T14046] oom_kill_process.cold+0x10/0x15 [ 2795.132176][T14046] out_of_memory+0x358/0x14a0 [ 2795.136902][T14046] ? find_held_lock+0x2d/0x110 [ 2795.141701][T14046] ? oom_killer_disable+0x270/0x270 [ 2795.146940][T14046] ? find_held_lock+0x2d/0x110 [ 2795.151748][T14046] mem_cgroup_out_of_memory+0x206/0x270 [ 2795.157349][T14046] ? mem_cgroup_margin+0x130/0x130 [ 2795.162502][T14046] ? lock_downgrade+0x6e0/0x6e0 [ 2795.167415][T14046] try_charge_memcg+0xf67/0x13f0 [ 2795.172416][T14046] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2795.178450][T14046] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2795.184218][T14046] ? lock_downgrade+0x6e0/0x6e0 [ 2795.189137][T14046] obj_cgroup_charge+0x2ab/0x5e0 [ 2795.194130][T14046] ? __anon_vma_prepare+0x60/0x560 [ 2795.199282][T14046] kmem_cache_alloc+0x96/0x3b0 [ 2795.204097][T14046] __anon_vma_prepare+0x60/0x560 [ 2795.209081][T14046] ? __pmd_alloc+0x2ff/0x5c0 [ 2795.213723][T14046] __handle_mm_fault+0x340e/0x39b0 [ 2795.218887][T14046] ? vm_iomap_memory+0x190/0x190 [ 2795.223892][T14046] handle_mm_fault+0x1c8/0x780 [ 2795.228700][T14046] do_user_addr_fault+0x475/0x1210 [ 2795.233860][T14046] exc_page_fault+0x94/0x170 [ 2795.238485][T14046] asm_exc_page_fault+0x22/0x30 [ 2795.243337][T14046] RIP: 0033:0x7f5161e84695 [ 2795.247774][T14046] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2795.267424][T14046] RSP: 002b:00007f51624cfb98 EFLAGS: 00010202 [ 2795.273530][T14046] RAX: 00000000200003c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2795.281504][T14046] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200003c0 [ 2795.289476][T14046] RBP: 00007f51624cfc58 R08: 00007f51623a0000 R09: 00007f5161fa00c8 [ 2795.297460][T14046] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00000000002aa552 [ 2795.305468][T14046] R13: 00007f51624cfc80 R14: 00007f5161f9bf80 R15: 0000000000000032 [ 2795.313503][T14046] [ 2795.425386][T14046] memory: usage 307200kB, limit 307200kB, failcnt 40961 [ 2795.434803][T14046] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2795.464020][T14046] Memory cgroup stats for /syz2: [ 2795.464268][T14046] anon 143360 [ 2795.464268][T14046] file 221184 [ 2795.464268][T14046] kernel 314175488 [ 2795.464268][T14046] kernel_stack 65536 [ 2795.464268][T14046] pagetables 81920 [ 2795.464268][T14046] percpu 5435744 [ 2795.464268][T14046] sock 0 [ 2795.464268][T14046] vmalloc 16384 [ 2795.464268][T14046] shmem 221184 [ 2795.464268][T14046] zswap 0 [ 2795.464268][T14046] zswapped 0 [ 2795.464268][T14046] file_mapped 221184 [ 2795.464268][T14046] file_dirty 0 [ 2795.464268][T14046] file_writeback 0 [ 2795.464268][T14046] swapcached 0 [ 2795.464268][T14046] anon_thp 0 [ 2795.464268][T14046] file_thp 0 [ 2795.464268][T14046] shmem_thp 0 [ 2795.464268][T14046] inactive_anon 159744 [ 2795.464268][T14046] active_anon 204800 [ 2795.464268][T14046] inactive_file 0 [ 2795.464268][T14046] active_file 0 [ 2795.464268][T14046] unevictable 0 [ 2795.464268][T14046] slab_reclaimable 16760 [ 2795.464268][T14046] slab_unreclaimable 308528784 [ 2795.464268][T14046] slab 308545544 [ 2795.647703][T14046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14046,uid=0 [ 2795.717571][T14046] Memory cgroup out of memory: Killed process 14046 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2795.878658][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:20:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x2b00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:12 executing program 5: r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:12 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000), 0x0, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:12 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:13 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:13 executing program 5: r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2796.072359][T14065] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2796.247803][T14065] CPU: 1 PID: 14065 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2796.258040][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2796.268130][T14065] Call Trace: [ 2796.271419][T14065] [ 2796.274358][T14065] dump_stack_lvl+0xcd/0x134 [ 2796.278967][T14065] dump_header+0x10b/0x7f9 [ 2796.283420][T14065] oom_kill_process.cold+0x10/0x15 [ 2796.288549][T14065] out_of_memory+0x358/0x14a0 [ 2796.293244][T14065] ? find_held_lock+0x2d/0x110 [ 2796.298038][T14065] ? oom_killer_disable+0x270/0x270 [ 2796.303252][T14065] ? find_held_lock+0x2d/0x110 [ 2796.308031][T14065] mem_cgroup_out_of_memory+0x206/0x270 [ 2796.313609][T14065] ? mem_cgroup_margin+0x130/0x130 [ 2796.318822][T14065] ? lock_downgrade+0x6e0/0x6e0 [ 2796.323695][T14065] try_charge_memcg+0xf67/0x13f0 [ 2796.328678][T14065] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2796.334755][T14065] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2796.340486][T14065] ? lock_downgrade+0x6e0/0x6e0 [ 2796.345348][T14065] ? lock_downgrade+0x6e0/0x6e0 [ 2796.350207][T14065] ? rcu_read_unlock+0x9/0x60 [ 2796.354911][T14065] obj_cgroup_charge+0x2ab/0x5e0 [ 2796.359868][T14065] ? copy_process+0x4ce/0x7090 [ 2796.364641][T14065] kmem_cache_alloc_node+0x92/0x3f0 [ 2796.369848][T14065] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2796.375068][T14065] copy_process+0x4ce/0x7090 [ 2796.379764][T14065] ? find_held_lock+0x2d/0x110 [ 2796.384548][T14065] ? __cleanup_sighand+0xb0/0xb0 [ 2796.389519][T14065] kernel_clone+0xe7/0xab0 [ 2796.393947][T14065] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2796.399942][T14065] ? create_io_thread+0xe0/0xe0 [ 2796.404815][T14065] ? find_held_lock+0x2d/0x110 [ 2796.409592][T14065] ? __ct_user_exit+0xff/0x150 [ 2796.414375][T14065] __do_sys_clone+0xba/0x100 [ 2796.418981][T14065] ? kernel_clone+0xab0/0xab0 [ 2796.423683][T14065] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2796.429591][T14065] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2796.435522][T14065] do_syscall_64+0x35/0xb0 [ 2796.439949][T14065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2796.445862][T14065] RIP: 0033:0x7f074148a6a1 [ 2796.450301][T14065] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2796.470008][T14065] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2796.478442][T14065] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2796.486425][T14065] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2796.494519][T14065] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2796.502498][T14065] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2796.510482][T14065] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2796.518522][T14065] [ 2796.537813][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:13 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:13 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) [ 2796.705586][T14065] memory: usage 307196kB, limit 307200kB, failcnt 39985 [ 2796.735965][T14065] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:20:13 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2796.863747][T14065] Memory cgroup stats for /syz3: [ 2796.864181][T14065] anon 159744 [ 2796.864181][T14065] file 143360 [ 2796.864181][T14065] kernel 314265600 [ 2796.864181][T14065] kernel_stack 65536 [ 2796.864181][T14065] pagetables 86016 [ 2796.864181][T14065] percpu 5436928 [ 2796.864181][T14065] sock 0 [ 2796.864181][T14065] vmalloc 0 [ 2796.864181][T14065] shmem 143360 [ 2796.864181][T14065] zswap 0 [ 2796.864181][T14065] zswapped 0 [ 2796.864181][T14065] file_mapped 143360 [ 2796.864181][T14065] file_dirty 0 [ 2796.864181][T14065] file_writeback 0 [ 2796.864181][T14065] swapcached 0 [ 2796.864181][T14065] anon_thp 0 [ 2796.864181][T14065] file_thp 0 [ 2796.864181][T14065] shmem_thp 0 [ 2796.864181][T14065] inactive_anon 176128 [ 2796.864181][T14065] active_anon 126976 [ 2796.864181][T14065] inactive_file 0 [ 2796.864181][T14065] active_file 0 [ 2796.864181][T14065] unevictable 0 [ 2796.864181][T14065] slab_reclaimable 17144 [ 2796.864181][T14065] slab_unreclaimable 308626144 [ 2796.864181][T14065] slab 308643288 [ 2797.122622][T14065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14065,uid=0 [ 2797.154974][T14065] Memory cgroup out of memory: Killed process 14065 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2797.221342][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 11:20:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x0, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2797.410977][T14078] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2797.464663][T14078] CPU: 1 PID: 14078 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2797.474894][T14078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2797.485079][T14078] Call Trace: [ 2797.488395][T14078] [ 2797.491361][T14078] dump_stack_lvl+0xcd/0x134 [ 2797.496037][T14078] dump_header+0x10b/0x7f9 [ 2797.500589][T14078] oom_kill_process.cold+0x10/0x15 [ 2797.505747][T14078] out_of_memory+0x358/0x14a0 [ 2797.510448][T14078] ? find_held_lock+0x2d/0x110 [ 2797.515313][T14078] ? oom_killer_disable+0x270/0x270 [ 2797.520526][T14078] ? find_held_lock+0x2d/0x110 [ 2797.525303][T14078] mem_cgroup_out_of_memory+0x206/0x270 [ 2797.530858][T14078] ? mem_cgroup_margin+0x130/0x130 [ 2797.535977][T14078] ? lock_downgrade+0x6e0/0x6e0 [ 2797.540941][T14078] try_charge_memcg+0xf67/0x13f0 [ 2797.545900][T14078] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2797.551892][T14078] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2797.557640][T14078] ? lock_downgrade+0x6e0/0x6e0 [ 2797.562522][T14078] obj_cgroup_charge+0x2ab/0x5e0 [ 2797.567473][T14078] ? vm_area_dup+0x88/0x3f0 [ 2797.571997][T14078] kmem_cache_alloc+0x96/0x3b0 [ 2797.576829][T14078] vm_area_dup+0x88/0x3f0 [ 2797.581172][T14078] ? mark_lock.part.0+0xee/0x1910 [ 2797.586214][T14078] ? lock_chain_count+0x20/0x20 [ 2797.591073][T14078] ? __vma_adjust+0x109c/0x24a0 [ 2797.595964][T14078] ? __vma_link_rb+0x710/0x710 [ 2797.600746][T14078] ? __lock_acquire+0x166e/0x56d0 [ 2797.605802][T14078] ? vm_area_alloc+0x110/0x110 [ 2797.610583][T14078] ? perf_event_namespaces+0x50/0x50 [ 2797.615881][T14078] ? vma_merge+0x47a/0xeb0 [ 2797.620307][T14078] ? ima_file_mprotect+0x175/0x470 [ 2797.625436][T14078] ? ima_file_mmap+0x130/0x130 [ 2797.630209][T14078] ? vma_wants_writenotify+0x1f8/0x370 [ 2797.635679][T14078] ? __ia32_sys_mmap_pgoff+0x1b0/0x1b0 [ 2797.641149][T14078] ? vma_merge+0x47a/0xeb0 [ 2797.645614][T14078] ? __vma_adjust+0x24a0/0x24a0 [ 2797.650580][T14078] __split_vma+0xa5/0x550 [ 2797.654926][T14078] split_vma+0x95/0xd0 [ 2797.659025][T14078] mprotect_fixup+0x6d9/0x970 [ 2797.663739][T14078] ? change_protection+0x40e0/0x40e0 [ 2797.669180][T14078] ? vmacache_find+0x62/0x330 [ 2797.673935][T14078] do_mprotect_pkey+0x6c5/0x9e0 [ 2797.678818][T14078] ? __ct_user_exit+0xff/0x150 [ 2797.683606][T14078] ? mprotect_fixup+0x970/0x970 [ 2797.688501][T14078] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2797.694416][T14078] __x64_sys_mprotect+0x74/0xb0 [ 2797.699296][T14078] do_syscall_64+0x35/0xb0 [ 2797.703722][T14078] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2797.709631][T14078] RIP: 0033:0x7f5161e89387 [ 2797.714054][T14078] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2797.733690][T14078] RSP: 002b:00007f51624cfab8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2797.742114][T14078] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5161e89387 [ 2797.750094][T14078] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5162f8a000 [ 2797.758075][T14078] RBP: 00007f51624cfb90 R08: 00000000ffffffff R09: 00007f5162fa9700 [ 2797.766071][T14078] R10: 0000000000020022 R11: 0000000000000206 R12: 00007f51624cfcb0 [ 2797.774049][T14078] R13: 00007f5162fa9700 R14: 0000000000000000 R15: 0000000000022000 [ 2797.782063][T14078] [ 2797.988120][T14078] memory: usage 307184kB, limit 307200kB, failcnt 41069 [ 2797.995262][T14078] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2798.076352][T14078] Memory cgroup stats for /syz2: [ 2798.076582][T14078] anon 155648 [ 2798.076582][T14078] file 221184 [ 2798.076582][T14078] kernel 314179584 [ 2798.076582][T14078] kernel_stack 65536 [ 2798.076582][T14078] pagetables 81920 [ 2798.076582][T14078] percpu 5435744 [ 2798.076582][T14078] sock 0 [ 2798.076582][T14078] vmalloc 16384 [ 2798.076582][T14078] shmem 221184 [ 2798.076582][T14078] zswap 0 [ 2798.076582][T14078] zswapped 0 [ 2798.076582][T14078] file_mapped 221184 [ 2798.076582][T14078] file_dirty 0 [ 2798.076582][T14078] file_writeback 0 [ 2798.076582][T14078] swapcached 0 [ 2798.076582][T14078] anon_thp 0 [ 2798.076582][T14078] file_thp 0 [ 2798.076582][T14078] shmem_thp 0 [ 2798.076582][T14078] inactive_anon 172032 [ 2798.076582][T14078] active_anon 204800 [ 2798.076582][T14078] inactive_file 0 [ 2798.076582][T14078] active_file 0 [ 2798.076582][T14078] unevictable 0 [ 2798.076582][T14078] slab_reclaimable 18304 [ 2798.076582][T14078] slab_unreclaimable 308529816 [ 2798.076582][T14078] slab 308548120 [ 2798.126890][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2798.314609][T14078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14078,uid=0 11:20:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x2c00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:15 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:15 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:15 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2798.357749][T14078] Memory cgroup out of memory: Killed process 14078 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2798.443865][T14099] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2798.457649][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:15 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2798.523481][T14099] CPU: 0 PID: 14099 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2798.533800][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2798.543973][T14099] Call Trace: [ 2798.547268][T14099] [ 2798.550216][T14099] dump_stack_lvl+0xcd/0x134 [ 2798.554846][T14099] dump_header+0x10b/0x7f9 [ 2798.559302][T14099] oom_kill_process.cold+0x10/0x15 [ 2798.564460][T14099] out_of_memory+0x358/0x14a0 [ 2798.569214][T14099] ? find_held_lock+0x2d/0x110 [ 2798.574027][T14099] ? oom_killer_disable+0x270/0x270 [ 2798.579283][T14099] ? find_held_lock+0x2d/0x110 [ 2798.584187][T14099] mem_cgroup_out_of_memory+0x206/0x270 [ 2798.589875][T14099] ? mem_cgroup_margin+0x130/0x130 [ 2798.595066][T14099] ? lock_downgrade+0x6e0/0x6e0 [ 2798.599980][T14099] try_charge_memcg+0xf67/0x13f0 [ 2798.604970][T14099] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2798.611000][T14099] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2798.616854][T14099] ? lock_downgrade+0x6e0/0x6e0 [ 2798.621757][T14099] ? lock_downgrade+0x6e0/0x6e0 [ 2798.626675][T14099] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2798.632279][T14099] __alloc_pages+0x1ef/0x510 [ 2798.636922][T14099] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2798.643755][T14099] ? find_held_lock+0x2d/0x110 [ 2798.648606][T14099] alloc_pages+0x1a6/0x270 [ 2798.653159][T14099] pte_alloc_one+0x16/0x230 [ 2798.657703][T14099] __pte_alloc+0x69/0x250 [ 2798.662076][T14099] ? pmd_install+0x150/0x150 [ 2798.666704][T14099] ? hugepage_vma_check+0x44e/0x780 [ 2798.671948][T14099] ? __pmd_alloc+0x2ff/0x5c0 [ 2798.676582][T14099] __handle_mm_fault+0x310b/0x39b0 [ 2798.681745][T14099] ? vm_iomap_memory+0x190/0x190 [ 2798.686751][T14099] handle_mm_fault+0x1c8/0x780 [ 2798.691565][T14099] do_user_addr_fault+0x475/0x1210 [ 2798.696729][T14099] exc_page_fault+0x94/0x170 [ 2798.701369][T14099] asm_exc_page_fault+0x22/0x30 [ 2798.706293][T14099] RIP: 0033:0x7f0741484695 [ 2798.710739][T14099] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2798.730424][T14099] RSP: 002b:00007f0741acfb98 EFLAGS: 00010202 [ 2798.736557][T14099] RAX: 00000000200003c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2798.744571][T14099] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200003c0 [ 2798.752579][T14099] RBP: 00007f0741acfc58 R08: 00007f07419a0000 R09: 00007f07415a00c8 [ 2798.760678][T14099] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00000000002ab30b [ 2798.768689][T14099] R13: 00007f0741acfc80 R14: 00007f074159bf80 R15: 0000000000000032 [ 2798.776729][T14099] 11:20:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x2b00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:15 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:15 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:15 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2799.054817][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2799.106649][T14099] memory: usage 307200kB, limit 307200kB, failcnt 40077 [ 2799.201450][T14099] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2799.316950][T14099] Memory cgroup stats for /syz3: [ 2799.317177][T14099] anon 143360 [ 2799.317177][T14099] file 143360 [ 2799.317177][T14099] kernel 314286080 [ 2799.317177][T14099] kernel_stack 65536 [ 2799.317177][T14099] pagetables 81920 [ 2799.317177][T14099] percpu 5436928 [ 2799.317177][T14099] sock 0 [ 2799.317177][T14099] vmalloc 0 [ 2799.317177][T14099] shmem 143360 [ 2799.317177][T14099] zswap 0 [ 2799.317177][T14099] zswapped 0 [ 2799.317177][T14099] file_mapped 143360 [ 2799.317177][T14099] file_dirty 0 [ 2799.317177][T14099] file_writeback 0 [ 2799.317177][T14099] swapcached 0 [ 2799.317177][T14099] anon_thp 0 [ 2799.317177][T14099] file_thp 0 [ 2799.317177][T14099] shmem_thp 0 [ 2799.317177][T14099] inactive_anon 159744 [ 2799.317177][T14099] active_anon 126976 [ 2799.317177][T14099] inactive_file 0 [ 2799.317177][T14099] active_file 0 [ 2799.317177][T14099] unevictable 0 [ 2799.317177][T14099] slab_reclaimable 29144 [ 2799.317177][T14099] slab_unreclaimable 308637816 [ 2799.317177][T14099] slab 308666960 [ 2799.547532][T14099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14099,uid=0 [ 2799.636316][T14099] Memory cgroup out of memory: Killed process 14099 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2799.806661][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2799.885586][T14113] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2799.901779][T14113] CPU: 0 PID: 14113 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2799.912004][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2799.922098][T14113] Call Trace: [ 2799.925412][T14113] [ 2799.928374][T14113] dump_stack_lvl+0xcd/0x134 [ 2799.933007][T14113] dump_header+0x10b/0x7f9 [ 2799.937457][T14113] oom_kill_process.cold+0x10/0x15 [ 2799.942609][T14113] out_of_memory+0x358/0x14a0 [ 2799.947336][T14113] ? find_held_lock+0x2d/0x110 [ 2799.952134][T14113] ? oom_killer_disable+0x270/0x270 [ 2799.957372][T14113] ? find_held_lock+0x2d/0x110 [ 2799.962186][T14113] mem_cgroup_out_of_memory+0x206/0x270 [ 2799.967778][T14113] ? mem_cgroup_margin+0x130/0x130 [ 2799.972932][T14113] ? lock_downgrade+0x6e0/0x6e0 [ 2799.977844][T14113] try_charge_memcg+0xf67/0x13f0 [ 2799.982838][T14113] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2799.988871][T14113] ? lock_downgrade+0x6e0/0x6e0 [ 2799.993783][T14113] charge_memcg+0x31/0x320 [ 2799.998247][T14113] __mem_cgroup_charge+0x27/0x90 [ 2800.003223][T14113] ? _compound_head+0x5d/0x150 [ 2800.008034][T14113] wp_page_copy+0x27c/0x1b60 [ 2800.012669][T14113] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2800.018166][T14113] ? lock_downgrade+0x6e0/0x6e0 [ 2800.023057][T14113] ? vm_normal_page+0x146/0x2a0 [ 2800.027961][T14113] do_wp_page+0x1d1/0x1910 [ 2800.032421][T14113] __handle_mm_fault+0x1813/0x39b0 [ 2800.037580][T14113] ? vm_iomap_memory+0x190/0x190 [ 2800.042591][T14113] handle_mm_fault+0x1c8/0x780 [ 2800.047416][T14113] do_user_addr_fault+0x475/0x1210 [ 2800.052575][T14113] exc_page_fault+0x94/0x170 [ 2800.057221][T14113] asm_exc_page_fault+0x22/0x30 [ 2800.062100][T14113] RIP: 0033:0x7f5161e374b0 [ 2800.066547][T14113] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2800.086285][T14113] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2800.092367][T14113] RAX: 00000000bd27bad8 RBX: 00007f5161f9c0e8 RCX: 0000001b2f920000 [ 2800.100361][T14113] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008ec0c76 [ 2800.108354][T14113] RBP: 00000000bd27bad8 R08: 0000000000001ad8 R09: 00000000bd27badc [ 2800.116330][T14113] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2800.124489][T14113] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a3270f [ 2800.132484][T14113] ? trace_user_exit.constprop.0+0x13f/0x210 [ 2800.138516][T14113] [ 2800.435083][T14113] memory: usage 307200kB, limit 307200kB, failcnt 41151 [ 2800.455862][T14113] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2800.503647][T14113] Memory cgroup stats for /syz2: [ 2800.503881][T14113] anon 126976 [ 2800.503881][T14113] file 221184 [ 2800.503881][T14113] kernel 314208256 [ 2800.503881][T14113] kernel_stack 98304 [ 2800.503881][T14113] pagetables 73728 [ 2800.503881][T14113] percpu 5435744 [ 2800.503881][T14113] sock 0 [ 2800.503881][T14113] vmalloc 16384 [ 2800.503881][T14113] shmem 221184 [ 2800.503881][T14113] zswap 0 [ 2800.503881][T14113] zswapped 0 [ 2800.503881][T14113] file_mapped 221184 [ 2800.503881][T14113] file_dirty 0 [ 2800.503881][T14113] file_writeback 0 [ 2800.503881][T14113] swapcached 0 [ 2800.503881][T14113] anon_thp 0 [ 2800.503881][T14113] file_thp 0 [ 2800.503881][T14113] shmem_thp 0 [ 2800.503881][T14113] inactive_anon 143360 [ 2800.503881][T14113] active_anon 204800 [ 2800.503881][T14113] inactive_file 0 [ 2800.503881][T14113] active_file 0 [ 2800.503881][T14113] unevictable 0 [ 2800.503881][T14113] slab_reclaimable 16760 [ 2800.503881][T14113] slab_unreclaimable 308537600 [ 2800.503881][T14113] slab 308554360 [ 2800.705600][T14113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14113,uid=0 [ 2800.757422][T14113] Memory cgroup out of memory: Killed process 14113 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2800.846806][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:20:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x2d00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:17 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:17 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:17 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2801.108657][T14135] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2801.151177][T14135] CPU: 1 PID: 14135 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2801.161417][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2801.171523][T14135] Call Trace: [ 2801.174830][T14135] [ 2801.177791][T14135] dump_stack_lvl+0xcd/0x134 [ 2801.182437][T14135] dump_header+0x10b/0x7f9 [ 2801.186905][T14135] oom_kill_process.cold+0x10/0x15 [ 2801.192083][T14135] out_of_memory+0x358/0x14a0 [ 2801.196818][T14135] ? find_held_lock+0x2d/0x110 [ 2801.201620][T14135] ? oom_killer_disable+0x270/0x270 [ 2801.206909][T14135] ? find_held_lock+0x2d/0x110 [ 2801.211723][T14135] mem_cgroup_out_of_memory+0x206/0x270 [ 2801.217314][T14135] ? mem_cgroup_margin+0x130/0x130 [ 2801.222470][T14135] ? lock_downgrade+0x6e0/0x6e0 [ 2801.227379][T14135] try_charge_memcg+0xf67/0x13f0 [ 2801.232367][T14135] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2801.238390][T14135] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2801.244149][T14135] ? lock_downgrade+0x6e0/0x6e0 [ 2801.249046][T14135] ? lock_downgrade+0x6e0/0x6e0 [ 2801.253931][T14135] ? rcu_read_unlock+0x9/0x60 [ 2801.258654][T14135] obj_cgroup_charge+0x2ab/0x5e0 [ 2801.263641][T14135] ? copy_process+0x4ce/0x7090 [ 2801.268443][T14135] kmem_cache_alloc_node+0x92/0x3f0 [ 2801.273676][T14135] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2801.278917][T14135] copy_process+0x4ce/0x7090 [ 2801.283553][T14135] ? find_held_lock+0x2d/0x110 [ 2801.288362][T14135] ? __cleanup_sighand+0xb0/0xb0 [ 2801.293362][T14135] kernel_clone+0xe7/0xab0 [ 2801.297830][T14135] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2801.303863][T14135] ? create_io_thread+0xe0/0xe0 [ 2801.308763][T14135] ? find_held_lock+0x2d/0x110 [ 2801.313567][T14135] ? __ct_user_exit+0xff/0x150 [ 2801.318376][T14135] __do_sys_clone+0xba/0x100 [ 2801.323005][T14135] ? kernel_clone+0xab0/0xab0 [ 2801.327738][T14135] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2801.333674][T14135] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2801.339659][T14135] do_syscall_64+0x35/0xb0 [ 2801.344152][T14135] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2801.350095][T14135] RIP: 0033:0x7f074148a6a1 [ 2801.354547][T14135] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2801.374201][T14135] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2801.382658][T14135] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2801.390681][T14135] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2801.398704][T14135] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2801.406810][T14135] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2801.414819][T14135] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2801.422855][T14135] 11:20:18 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:18 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2801.685107][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2801.686431][T14135] memory: usage 307200kB, limit 307200kB, failcnt 40190 [ 2801.732810][T14135] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2801.746721][T14135] Memory cgroup stats for /syz3: [ 2801.754141][T14135] anon 159744 [ 2801.754141][T14135] file 143360 [ 2801.754141][T14135] kernel 314265600 [ 2801.754141][T14135] kernel_stack 65536 [ 2801.754141][T14135] pagetables 86016 [ 2801.754141][T14135] percpu 5436928 [ 2801.754141][T14135] sock 0 [ 2801.754141][T14135] vmalloc 0 [ 2801.754141][T14135] shmem 143360 [ 2801.754141][T14135] zswap 0 [ 2801.754141][T14135] zswapped 0 [ 2801.754141][T14135] file_mapped 143360 [ 2801.754141][T14135] file_dirty 0 [ 2801.754141][T14135] file_writeback 0 [ 2801.754141][T14135] swapcached 0 [ 2801.754141][T14135] anon_thp 0 [ 2801.754141][T14135] file_thp 0 [ 2801.754141][T14135] shmem_thp 0 [ 2801.754141][T14135] inactive_anon 176128 [ 2801.754141][T14135] active_anon 126976 [ 2801.754141][T14135] inactive_file 0 [ 2801.754141][T14135] active_file 0 [ 2801.754141][T14135] unevictable 0 [ 2801.754141][T14135] slab_reclaimable 17144 [ 2801.754141][T14135] slab_unreclaimable 308626144 [ 2801.754141][T14135] slab 308643288 11:20:18 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2801.972899][T14135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14135,uid=0 [ 2802.005446][T14135] Memory cgroup out of memory: Killed process 14135 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:20:18 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) [ 2802.125274][T14142] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2802.217201][T14142] CPU: 1 PID: 14142 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2802.227410][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2802.237505][T14142] Call Trace: [ 2802.240820][T14142] [ 2802.243774][T14142] dump_stack_lvl+0xcd/0x134 [ 2802.248422][T14142] dump_header+0x10b/0x7f9 [ 2802.252978][T14142] oom_kill_process.cold+0x10/0x15 [ 2802.258136][T14142] out_of_memory+0x358/0x14a0 [ 2802.262867][T14142] ? oom_killer_disable+0x270/0x270 [ 2802.268104][T14142] ? find_held_lock+0x2d/0x110 [ 2802.272886][T14142] mem_cgroup_out_of_memory+0x206/0x270 [ 2802.278490][T14142] ? mem_cgroup_margin+0x130/0x130 [ 2802.283633][T14142] ? lock_downgrade+0x6e0/0x6e0 [ 2802.288536][T14142] try_charge_memcg+0xf67/0x13f0 [ 2802.293523][T14142] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2802.299553][T14142] ? lock_downgrade+0x6e0/0x6e0 [ 2802.304451][T14142] charge_memcg+0x31/0x320 [ 2802.308902][T14142] __mem_cgroup_charge+0x27/0x90 [ 2802.313859][T14142] ? _compound_head+0x5d/0x150 [ 2802.318646][T14142] wp_page_copy+0x27c/0x1b60 [ 2802.323346][T14142] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2802.328815][T14142] ? lock_downgrade+0x6e0/0x6e0 [ 2802.333682][T14142] ? vm_normal_page+0x146/0x2a0 [ 2802.338649][T14142] do_wp_page+0x1d1/0x1910 [ 2802.343091][T14142] __handle_mm_fault+0x1813/0x39b0 [ 2802.348309][T14142] ? vm_iomap_memory+0x190/0x190 [ 2802.353369][T14142] handle_mm_fault+0x1c8/0x780 [ 2802.358156][T14142] do_user_addr_fault+0x475/0x1210 [ 2802.363291][T14142] exc_page_fault+0x94/0x170 [ 2802.367897][T14142] asm_exc_page_fault+0x22/0x30 [ 2802.372756][T14142] RIP: 0033:0x7f5161e374b0 [ 2802.377207][T14142] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2802.396826][T14142] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2802.402923][T14142] RAX: 00000000bd27bad8 RBX: 00007f5161f9c0e8 RCX: 0000001b2f920000 [ 2802.410991][T14142] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008ec0c76 [ 2802.418971][T14142] RBP: 00000000bd27bad8 R08: 0000000000001ad8 R09: 00000000bd27badc [ 2802.426949][T14142] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2802.434928][T14142] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a3270f [ 2802.442907][T14142] ? trace_user_exit.constprop.0+0x13f/0x210 [ 2802.448919][T14142] 11:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:19 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2802.599968][T14142] memory: usage 307200kB, limit 307200kB, failcnt 41185 [ 2802.609509][T14142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2802.616626][T14142] Memory cgroup stats for /syz2: [ 2802.616810][T14142] anon 126976 [ 2802.616810][T14142] file 221184 [ 2802.616810][T14142] kernel 314224640 [ 2802.616810][T14142] kernel_stack 98304 [ 2802.616810][T14142] pagetables 73728 [ 2802.616810][T14142] percpu 5435744 [ 2802.616810][T14142] sock 0 [ 2802.616810][T14142] vmalloc 16384 [ 2802.616810][T14142] shmem 221184 [ 2802.616810][T14142] zswap 0 [ 2802.616810][T14142] zswapped 0 [ 2802.616810][T14142] file_mapped 221184 [ 2802.616810][T14142] file_dirty 0 [ 2802.616810][T14142] file_writeback 0 [ 2802.616810][T14142] swapcached 0 [ 2802.616810][T14142] anon_thp 0 [ 2802.616810][T14142] file_thp 0 [ 2802.616810][T14142] shmem_thp 0 [ 2802.616810][T14142] inactive_anon 143360 [ 2802.616810][T14142] active_anon 204800 [ 2802.616810][T14142] inactive_file 0 [ 2802.616810][T14142] active_file 0 [ 2802.616810][T14142] unevictable 0 [ 2802.616810][T14142] slab_reclaimable 16760 [ 2802.616810][T14142] slab_unreclaimable 308548696 [ 2802.616810][T14142] slab 308565456 [ 2802.711948][T14142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14142,uid=0 [ 2802.728002][T14142] Memory cgroup out of memory: Killed process 14142 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:20:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x2e00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:19 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2802.896948][T14169] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2802.954385][T14169] CPU: 1 PID: 14169 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2802.964763][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2802.974856][T14169] Call Trace: [ 2802.978161][T14169] [ 2802.981122][T14169] dump_stack_lvl+0xcd/0x134 [ 2802.985772][T14169] dump_header+0x10b/0x7f9 [ 2802.990264][T14169] oom_kill_process.cold+0x10/0x15 [ 2802.995404][T14169] out_of_memory+0x358/0x14a0 [ 2803.000162][T14169] ? find_held_lock+0x2d/0x110 [ 2803.004978][T14169] ? oom_killer_disable+0x270/0x270 [ 2803.010248][T14169] ? find_held_lock+0x2d/0x110 [ 2803.015070][T14169] mem_cgroup_out_of_memory+0x206/0x270 [ 2803.020647][T14169] ? mem_cgroup_margin+0x130/0x130 [ 2803.025786][T14169] ? lock_downgrade+0x6e0/0x6e0 [ 2803.030767][T14169] try_charge_memcg+0xf67/0x13f0 [ 2803.035732][T14169] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2803.041743][T14169] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2803.047488][T14169] ? lock_downgrade+0x6e0/0x6e0 [ 2803.052371][T14169] ? lock_downgrade+0x6e0/0x6e0 [ 2803.057248][T14169] obj_cgroup_charge+0x2ab/0x5e0 [ 2803.062209][T14169] kmem_cache_alloc_lru+0x13e/0x720 [ 2803.067436][T14169] ? sock_alloc_inode+0x23/0x1d0 [ 2803.072394][T14169] sock_alloc_inode+0x23/0x1d0 [ 2803.077188][T14169] ? sock_free_inode+0x20/0x20 [ 2803.081959][T14169] alloc_inode+0x61/0x230 [ 2803.086304][T14169] new_inode_pseudo+0x13/0x80 [ 2803.090989][T14169] sock_alloc+0x3c/0x260 [ 2803.095241][T14169] __sock_create+0xb9/0x790 [ 2803.099758][T14169] ? lock_downgrade+0x6e0/0x6e0 [ 2803.104623][T14169] __sys_socket+0x12f/0x240 [ 2803.109138][T14169] ? __sys_socket_file+0x1f0/0x1f0 [ 2803.114283][T14169] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2803.120203][T14169] __x64_sys_socket+0x6f/0xb0 [ 2803.124915][T14169] do_syscall_64+0x35/0xb0 [ 2803.129381][T14169] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2803.135336][T14169] RIP: 0033:0x7f0741489279 [ 2803.139777][T14169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2803.159415][T14169] RSP: 002b:00007f0742632168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2803.167866][T14169] RAX: ffffffffffffffda RBX: 00007f074159bf80 RCX: 00007f0741489279 [ 2803.175963][T14169] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2803.184042][T14169] RBP: 00007f07414e3189 R08: 0000000000000000 R09: 0000000000000000 [ 2803.192085][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2803.200114][T14169] R13: 00007f0741acfb1f R14: 00007f0742632300 R15: 0000000000022000 [ 2803.208125][T14169] [ 2803.455037][T14169] memory: usage 307200kB, limit 307200kB, failcnt 40276 [ 2803.483323][T14169] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2803.504339][T14169] Memory cgroup stats for /syz3: [ 2803.504572][T14169] anon 143360 [ 2803.504572][T14169] file 143360 [ 2803.504572][T14169] kernel 314286080 [ 2803.504572][T14169] kernel_stack 65536 [ 2803.504572][T14169] pagetables 77824 [ 2803.504572][T14169] percpu 5436928 [ 2803.504572][T14169] sock 0 [ 2803.504572][T14169] vmalloc 0 [ 2803.504572][T14169] shmem 143360 [ 2803.504572][T14169] zswap 0 [ 2803.504572][T14169] zswapped 0 [ 2803.504572][T14169] file_mapped 143360 [ 2803.504572][T14169] file_dirty 0 [ 2803.504572][T14169] file_writeback 0 [ 2803.504572][T14169] swapcached 0 [ 2803.504572][T14169] anon_thp 0 [ 2803.504572][T14169] file_thp 0 [ 2803.504572][T14169] shmem_thp 0 [ 2803.504572][T14169] inactive_anon 159744 [ 2803.504572][T14169] active_anon 126976 [ 2803.504572][T14169] inactive_file 0 [ 2803.504572][T14169] active_file 0 [ 2803.504572][T14169] unevictable 0 [ 2803.504572][T14169] slab_reclaimable 30304 [ 2803.504572][T14169] slab_unreclaimable 308638768 [ 2803.504572][T14169] slab 308669072 [ 2803.717181][T14169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14168,uid=0 [ 2803.746129][T14169] Memory cgroup out of memory: Killed process 14168 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2803.774211][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2803.896667][T14176] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2803.907159][T14176] CPU: 0 PID: 14176 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2803.917349][T14176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2803.927438][T14176] Call Trace: [ 2803.930744][T14176] [ 2803.933730][T14176] dump_stack_lvl+0xcd/0x134 [ 2803.938365][T14176] dump_header+0x10b/0x7f9 [ 2803.942827][T14176] oom_kill_process.cold+0x10/0x15 [ 2803.948019][T14176] out_of_memory+0x358/0x14a0 [ 2803.952757][T14176] ? find_held_lock+0x2d/0x110 [ 2803.957560][T14176] ? oom_killer_disable+0x270/0x270 [ 2803.962801][T14176] ? find_held_lock+0x2d/0x110 [ 2803.967607][T14176] mem_cgroup_out_of_memory+0x206/0x270 [ 2803.973195][T14176] ? mem_cgroup_margin+0x130/0x130 [ 2803.978344][T14176] ? lock_downgrade+0x6e0/0x6e0 [ 2803.983247][T14176] try_charge_memcg+0xf67/0x13f0 [ 2803.988283][T14176] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2803.994316][T14176] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2804.000116][T14176] ? lock_downgrade+0x6e0/0x6e0 [ 2804.005007][T14176] ? lock_downgrade+0x6e0/0x6e0 [ 2804.009890][T14176] ? rcu_read_unlock+0x9/0x60 [ 2804.014604][T14176] obj_cgroup_charge+0x2ab/0x5e0 [ 2804.019559][T14176] ? copy_process+0x4ce/0x7090 [ 2804.024390][T14176] kmem_cache_alloc_node+0x92/0x3f0 [ 2804.029631][T14176] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2804.034887][T14176] copy_process+0x4ce/0x7090 [ 2804.039534][T14176] ? find_held_lock+0x2d/0x110 [ 2804.044356][T14176] ? __cleanup_sighand+0xb0/0xb0 [ 2804.049363][T14176] kernel_clone+0xe7/0xab0 [ 2804.053818][T14176] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2804.059829][T14176] ? create_io_thread+0xe0/0xe0 [ 2804.064703][T14176] ? find_held_lock+0x2d/0x110 [ 2804.069492][T14176] ? __ct_user_exit+0xff/0x150 [ 2804.074305][T14176] __do_sys_clone+0xba/0x100 [ 2804.078941][T14176] ? kernel_clone+0xab0/0xab0 [ 2804.083675][T14176] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2804.089617][T14176] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2804.095563][T14176] do_syscall_64+0x35/0xb0 [ 2804.100008][T14176] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2804.105935][T14176] RIP: 0033:0x7f5161e8a6a1 [ 2804.110357][T14176] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2804.129978][T14176] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2804.138400][T14176] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2804.146385][T14176] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2804.154361][T14176] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2804.162341][T14176] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2804.170319][T14176] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2804.178317][T14176] 11:20:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:21 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:21 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 11:20:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2804.334336][T14176] memory: usage 307200kB, limit 307200kB, failcnt 41243 [ 2804.342318][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2804.385940][T14176] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:20:21 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2804.557871][T14176] Memory cgroup stats for /syz2: [ 2804.558051][T14176] anon 159744 [ 2804.558051][T14176] file 221184 [ 2804.558051][T14176] kernel 314191872 [ 2804.558051][T14176] kernel_stack 65536 [ 2804.558051][T14176] pagetables 81920 [ 2804.558051][T14176] percpu 5435744 [ 2804.558051][T14176] sock 0 [ 2804.558051][T14176] vmalloc 16384 [ 2804.558051][T14176] shmem 221184 [ 2804.558051][T14176] zswap 0 [ 2804.558051][T14176] zswapped 0 [ 2804.558051][T14176] file_mapped 221184 [ 2804.558051][T14176] file_dirty 0 [ 2804.558051][T14176] file_writeback 0 [ 2804.558051][T14176] swapcached 0 [ 2804.558051][T14176] anon_thp 0 [ 2804.558051][T14176] file_thp 0 [ 2804.558051][T14176] shmem_thp 0 [ 2804.558051][T14176] inactive_anon 176128 [ 2804.558051][T14176] active_anon 204800 [ 2804.558051][T14176] inactive_file 0 [ 2804.558051][T14176] active_file 0 [ 2804.558051][T14176] unevictable 0 [ 2804.558051][T14176] slab_reclaimable 16760 [ 2804.558051][T14176] slab_unreclaimable 308541192 [ 2804.558051][T14176] slab 308557952 [ 2804.618682][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:20:21 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:21 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) [ 2804.746972][T14176] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14176,uid=0 [ 2804.776994][T14176] Memory cgroup out of memory: Killed process 14176 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:21 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2804.984916][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2804.994481][T14184] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 11:20:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x2f00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2805.038316][T14184] CPU: 0 PID: 14184 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2805.048542][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2805.058630][T14184] Call Trace: [ 2805.061944][T14184] [ 2805.064899][T14184] dump_stack_lvl+0xcd/0x134 [ 2805.069534][T14184] dump_header+0x10b/0x7f9 [ 2805.074001][T14184] oom_kill_process.cold+0x10/0x15 [ 2805.079178][T14184] out_of_memory+0x358/0x14a0 [ 2805.083936][T14184] ? oom_killer_disable+0x270/0x270 [ 2805.089194][T14184] ? find_held_lock+0x2d/0x110 [ 2805.094011][T14184] mem_cgroup_out_of_memory+0x206/0x270 [ 2805.099608][T14184] ? mem_cgroup_margin+0x130/0x130 [ 2805.104768][T14184] ? lock_downgrade+0x6e0/0x6e0 [ 2805.109708][T14184] try_charge_memcg+0xf67/0x13f0 [ 2805.114710][T14184] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2805.120735][T14184] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2805.126497][T14184] ? lock_downgrade+0x6e0/0x6e0 [ 2805.131406][T14184] ? lock_downgrade+0x6e0/0x6e0 [ 2805.136298][T14184] ? rcu_read_unlock+0x9/0x60 [ 2805.141033][T14184] obj_cgroup_charge+0x2ab/0x5e0 [ 2805.146020][T14184] ? copy_process+0x4ce/0x7090 [ 2805.150830][T14184] kmem_cache_alloc_node+0x92/0x3f0 [ 2805.156080][T14184] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2805.161363][T14184] copy_process+0x4ce/0x7090 [ 2805.166008][T14184] ? find_held_lock+0x2d/0x110 [ 2805.170833][T14184] ? __cleanup_sighand+0xb0/0xb0 [ 2805.175847][T14184] kernel_clone+0xe7/0xab0 [ 2805.180303][T14184] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2805.186329][T14184] ? create_io_thread+0xe0/0xe0 [ 2805.191235][T14184] ? find_held_lock+0x2d/0x110 [ 2805.196045][T14184] ? __ct_user_exit+0xff/0x150 [ 2805.200865][T14184] __do_sys_clone+0xba/0x100 [ 2805.205499][T14184] ? kernel_clone+0xab0/0xab0 [ 2805.210235][T14184] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2805.216185][T14184] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2805.222147][T14184] do_syscall_64+0x35/0xb0 [ 2805.226599][T14184] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2805.232537][T14184] RIP: 0033:0x7f074148a6a1 [ 2805.236982][T14184] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2805.256720][T14184] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2805.265262][T14184] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2805.273270][T14184] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2805.281272][T14184] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2805.289273][T14184] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2805.297275][T14184] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2805.305308][T14184] 11:20:22 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:22 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2805.466935][T14184] memory: usage 307196kB, limit 307200kB, failcnt 40337 [ 2805.496952][T14184] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2805.518061][T14184] Memory cgroup stats for /syz3: [ 2805.518287][T14184] anon 159744 [ 2805.518287][T14184] file 143360 [ 2805.518287][T14184] kernel 314265600 [ 2805.518287][T14184] kernel_stack 65536 [ 2805.518287][T14184] pagetables 86016 [ 2805.518287][T14184] percpu 5436928 [ 2805.518287][T14184] sock 0 [ 2805.518287][T14184] vmalloc 0 [ 2805.518287][T14184] shmem 143360 [ 2805.518287][T14184] zswap 0 [ 2805.518287][T14184] zswapped 0 [ 2805.518287][T14184] file_mapped 143360 [ 2805.518287][T14184] file_dirty 0 [ 2805.518287][T14184] file_writeback 0 [ 2805.518287][T14184] swapcached 0 [ 2805.518287][T14184] anon_thp 0 [ 2805.518287][T14184] file_thp 0 [ 2805.518287][T14184] shmem_thp 0 [ 2805.518287][T14184] inactive_anon 176128 [ 2805.518287][T14184] active_anon 126976 [ 2805.518287][T14184] inactive_file 0 [ 2805.518287][T14184] active_file 0 [ 2805.518287][T14184] unevictable 0 [ 2805.518287][T14184] slab_reclaimable 17144 [ 2805.518287][T14184] slab_unreclaimable 308627096 [ 2805.518287][T14184] slab 308644240 [ 2805.683580][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:20:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:22 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) [ 2805.770621][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2805.868491][T14218] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2805.882000][T14184] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14184,uid=0 [ 2805.971839][T14184] Memory cgroup out of memory: Killed process 14184 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2806.096088][T14203] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2806.245984][T14203] CPU: 1 PID: 14203 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2806.256223][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2806.266319][T14203] Call Trace: [ 2806.272070][T14203] [ 2806.275033][T14203] dump_stack_lvl+0xcd/0x134 [ 2806.280107][T14203] dump_header+0x10b/0x7f9 [ 2806.285525][T14203] oom_kill_process.cold+0x10/0x15 [ 2806.290689][T14203] out_of_memory+0x358/0x14a0 [ 2806.295396][T14203] ? oom_killer_disable+0x270/0x270 [ 2806.300611][T14203] ? find_held_lock+0x2d/0x110 [ 2806.305402][T14203] mem_cgroup_out_of_memory+0x206/0x270 [ 2806.310962][T14203] ? mem_cgroup_margin+0x130/0x130 [ 2806.316519][T14203] ? lock_downgrade+0x6e0/0x6e0 [ 2806.321395][T14203] try_charge_memcg+0xf67/0x13f0 [ 2806.326355][T14203] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2806.332346][T14203] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2806.338079][T14203] ? lock_downgrade+0x6e0/0x6e0 [ 2806.342945][T14203] ? lock_downgrade+0x6e0/0x6e0 [ 2806.347894][T14203] ? rcu_read_unlock+0x9/0x60 [ 2806.352599][T14203] obj_cgroup_charge+0x2ab/0x5e0 [ 2806.357555][T14203] ? copy_process+0x4ce/0x7090 [ 2806.362339][T14203] kmem_cache_alloc_node+0x92/0x3f0 [ 2806.367658][T14203] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2806.372895][T14203] copy_process+0x4ce/0x7090 [ 2806.377507][T14203] ? __lock_acquire+0xbc3/0x56d0 [ 2806.382483][T14203] ? __cleanup_sighand+0xb0/0xb0 [ 2806.387490][T14203] kernel_clone+0xe7/0xab0 [ 2806.391951][T14203] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2806.397949][T14203] ? create_io_thread+0xe0/0xe0 [ 2806.402840][T14203] ? find_held_lock+0x2d/0x110 [ 2806.407618][T14203] ? __ct_user_exit+0xff/0x150 [ 2806.412404][T14203] __do_sys_clone+0xba/0x100 [ 2806.417011][T14203] ? kernel_clone+0xab0/0xab0 [ 2806.421711][T14203] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2806.427639][T14203] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2806.433579][T14203] do_syscall_64+0x35/0xb0 [ 2806.438023][T14203] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2806.443943][T14203] RIP: 0033:0x7f5161e8a6a1 [ 2806.448367][T14203] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2806.468174][T14203] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2806.476616][T14203] RAX: ffffffffffffffda RBX: 00007f5162f88700 RCX: 00007f5161e8a6a1 [ 2806.484598][T14203] RDX: 00007f5162f889d0 RSI: 00007f5162f882f0 RDI: 00000000003d0f00 11:20:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x5}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:23 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2806.492587][T14203] RBP: 00007f51624cfcb0 R08: 00007f5162f88700 R09: 00007f5162f88700 [ 2806.500597][T14203] R10: 00007f5162f889d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2806.508663][T14203] R13: 00007f51624cfb1f R14: 00007f5162f88300 R15: 0000000000022000 [ 2806.516657][T14203] [ 2806.548568][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:20:23 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2806.656584][T14203] memory: usage 307200kB, limit 307200kB, failcnt 41326 [ 2806.676682][T14203] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2806.696511][T14203] Memory cgroup stats for /syz2: [ 2806.696693][T14203] anon 118784 [ 2806.696693][T14203] file 221184 [ 2806.696693][T14203] kernel 314232832 [ 2806.696693][T14203] kernel_stack 98304 [ 2806.696693][T14203] pagetables 81920 [ 2806.696693][T14203] percpu 5435744 [ 2806.696693][T14203] sock 0 [ 2806.696693][T14203] vmalloc 16384 [ 2806.696693][T14203] shmem 221184 [ 2806.696693][T14203] zswap 0 [ 2806.696693][T14203] zswapped 0 [ 2806.696693][T14203] file_mapped 221184 [ 2806.696693][T14203] file_dirty 0 [ 2806.696693][T14203] file_writeback 0 [ 2806.696693][T14203] swapcached 0 [ 2806.696693][T14203] anon_thp 0 [ 2806.696693][T14203] file_thp 0 [ 2806.696693][T14203] shmem_thp 0 [ 2806.696693][T14203] inactive_anon 135168 [ 2806.696693][T14203] active_anon 204800 [ 2806.696693][T14203] inactive_file 0 [ 2806.696693][T14203] active_file 0 [ 2806.696693][T14203] unevictable 0 [ 2806.696693][T14203] slab_reclaimable 16760 [ 2806.696693][T14203] slab_unreclaimable 308549360 [ 2806.696693][T14203] slab 308566120 11:20:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2806.913637][T14203] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14203,uid=0 [ 2806.913772][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2806.944907][T14203] Memory cgroup out of memory: Killed process 14203 (syz-executor.2) total-vm:54772kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2807.201552][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:20:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3000}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:24 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xa, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2807.425124][T14229] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2807.454819][T14229] CPU: 1 PID: 14229 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2807.465054][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2807.475156][T14229] Call Trace: [ 2807.478463][T14229] [ 2807.481419][T14229] dump_stack_lvl+0xcd/0x134 [ 2807.486084][T14229] dump_header+0x10b/0x7f9 [ 2807.490544][T14229] oom_kill_process.cold+0x10/0x15 [ 2807.495707][T14229] out_of_memory+0x358/0x14a0 [ 2807.500439][T14229] ? find_held_lock+0x2d/0x110 [ 2807.505235][T14229] ? oom_killer_disable+0x270/0x270 [ 2807.510475][T14229] ? find_held_lock+0x2d/0x110 [ 2807.515279][T14229] mem_cgroup_out_of_memory+0x206/0x270 [ 2807.520869][T14229] ? mem_cgroup_margin+0x130/0x130 [ 2807.526036][T14229] ? lock_downgrade+0x6e0/0x6e0 [ 2807.530945][T14229] try_charge_memcg+0xf67/0x13f0 [ 2807.535942][T14229] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2807.541976][T14229] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2807.547740][T14229] ? lock_downgrade+0x6e0/0x6e0 [ 2807.552636][T14229] ? lock_downgrade+0x6e0/0x6e0 [ 2807.557519][T14229] ? rcu_read_unlock+0x9/0x60 [ 2807.562245][T14229] obj_cgroup_charge+0x2ab/0x5e0 [ 2807.567249][T14229] ? copy_process+0x4ce/0x7090 [ 2807.572044][T14229] kmem_cache_alloc_node+0x92/0x3f0 [ 2807.577277][T14229] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2807.582525][T14229] copy_process+0x4ce/0x7090 [ 2807.587164][T14229] ? find_held_lock+0x2d/0x110 [ 2807.591978][T14229] ? __cleanup_sighand+0xb0/0xb0 [ 2807.596977][T14229] kernel_clone+0xe7/0xab0 [ 2807.601433][T14229] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2807.607453][T14229] ? create_io_thread+0xe0/0xe0 [ 2807.612343][T14229] ? find_held_lock+0x2d/0x110 [ 2807.617146][T14229] ? __ct_user_exit+0xff/0x150 [ 2807.621948][T14229] __do_sys_clone+0xba/0x100 [ 2807.626578][T14229] ? kernel_clone+0xab0/0xab0 [ 2807.631309][T14229] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2807.637242][T14229] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2807.643183][T14229] do_syscall_64+0x35/0xb0 [ 2807.647631][T14229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2807.653571][T14229] RIP: 0033:0x7f074148a6a1 [ 2807.658014][T14229] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2807.677659][T14229] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2807.686111][T14229] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2807.694115][T14229] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2807.696716][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2807.702096][T14229] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2807.702119][T14229] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2807.702134][T14229] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2807.702167][T14229] 11:20:24 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xc901) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:24 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2808.238136][T14229] memory: usage 307184kB, limit 307200kB, failcnt 40462 [ 2808.245385][T14229] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2808.252523][T14229] Memory cgroup stats for /syz3: [ 2808.252755][T14229] anon 159744 [ 2808.252755][T14229] file 143360 [ 2808.252755][T14229] kernel 314253312 [ 2808.252755][T14229] kernel_stack 65536 [ 2808.252755][T14229] pagetables 86016 [ 2808.252755][T14229] percpu 5436928 [ 2808.252755][T14229] sock 0 [ 2808.252755][T14229] vmalloc 0 [ 2808.252755][T14229] shmem 143360 [ 2808.252755][T14229] zswap 0 [ 2808.252755][T14229] zswapped 0 [ 2808.252755][T14229] file_mapped 143360 [ 2808.252755][T14229] file_dirty 0 [ 2808.252755][T14229] file_writeback 0 [ 2808.252755][T14229] swapcached 0 [ 2808.252755][T14229] anon_thp 0 [ 2808.252755][T14229] file_thp 0 [ 2808.252755][T14229] shmem_thp 0 [ 2808.252755][T14229] inactive_anon 176128 [ 2808.252755][T14229] active_anon 126976 [ 2808.252755][T14229] inactive_file 0 [ 2808.252755][T14229] active_file 0 [ 2808.252755][T14229] unevictable 0 [ 2808.252755][T14229] slab_reclaimable 17144 [ 2808.252755][T14229] slab_unreclaimable 308615048 [ 2808.252755][T14229] slab 308632192 [ 2808.446899][T14229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14229,uid=0 [ 2808.473401][T14229] Memory cgroup out of memory: Killed process 14229 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2808.615601][T14251] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2808.626991][T14251] CPU: 0 PID: 14251 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2808.637185][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2808.647248][T14251] Call Trace: [ 2808.650542][T14251] [ 2808.653481][T14251] dump_stack_lvl+0xcd/0x134 [ 2808.658089][T14251] dump_header+0x10b/0x7f9 [ 2808.662525][T14251] oom_kill_process.cold+0x10/0x15 [ 2808.667652][T14251] out_of_memory+0x358/0x14a0 [ 2808.672349][T14251] ? find_held_lock+0x2d/0x110 [ 2808.677220][T14251] ? oom_killer_disable+0x270/0x270 [ 2808.682464][T14251] ? find_held_lock+0x2d/0x110 [ 2808.687252][T14251] mem_cgroup_out_of_memory+0x206/0x270 [ 2808.692823][T14251] ? mem_cgroup_margin+0x130/0x130 [ 2808.697949][T14251] ? lock_downgrade+0x6e0/0x6e0 [ 2808.702846][T14251] try_charge_memcg+0xf67/0x13f0 [ 2808.707805][T14251] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2808.713800][T14251] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2808.719544][T14251] ? lock_downgrade+0x6e0/0x6e0 [ 2808.724410][T14251] ? lock_downgrade+0x6e0/0x6e0 [ 2808.729284][T14251] ? rcu_read_unlock+0x9/0x60 [ 2808.734008][T14251] obj_cgroup_charge+0x2ab/0x5e0 [ 2808.738971][T14251] ? __alloc_file+0x21/0x270 [ 2808.743590][T14251] kmem_cache_alloc+0x96/0x3b0 [ 2808.748364][T14251] ? d_instantiate+0x75/0x90 [ 2808.752982][T14251] __alloc_file+0x21/0x270 [ 2808.757427][T14251] alloc_empty_file+0x6d/0x170 [ 2808.762208][T14251] alloc_file+0x59/0x800 [ 2808.766468][T14251] alloc_file_pseudo+0x165/0x250 [ 2808.771418][T14251] ? alloc_file+0x800/0x800 [ 2808.775940][T14251] ? alloc_fd+0x2f0/0x6f0 [ 2808.780284][T14251] sock_alloc_file+0x4f/0x190 [ 2808.784978][T14251] __sys_socket+0x1a4/0x240 [ 2808.789492][T14251] ? __sys_socket_file+0x1f0/0x1f0 [ 2808.794618][T14251] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2808.800533][T14251] __x64_sys_socket+0x6f/0xb0 [ 2808.805226][T14251] do_syscall_64+0x35/0xb0 [ 2808.809674][T14251] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2808.815604][T14251] RIP: 0033:0x7f5161e89279 [ 2808.820035][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2808.839671][T14251] RSP: 002b:00007f5162fca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2808.848117][T14251] RAX: ffffffffffffffda RBX: 00007f5161f9bf80 RCX: 00007f5161e89279 [ 2808.856187][T14251] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2808.864165][T14251] RBP: 00007f5161ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 2808.872140][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2808.880116][T14251] R13: 00007f51624cfb1f R14: 00007f5162fca300 R15: 0000000000022000 [ 2808.888112][T14251] 11:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x7}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:25 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0xffff0300, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xb, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:25 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xc, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2809.406652][T14251] memory: usage 307188kB, limit 307200kB, failcnt 41497 [ 2809.470823][T14280] __nla_validate_parse: 3 callbacks suppressed [ 2809.470846][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2809.473607][T14251] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2809.624519][T14251] Memory cgroup stats for /syz2: [ 2809.624674][T14251] anon 159744 [ 2809.624674][T14251] file 221184 [ 2809.624674][T14251] kernel 314191872 [ 2809.624674][T14251] kernel_stack 65536 [ 2809.624674][T14251] pagetables 81920 [ 2809.624674][T14251] percpu 5435744 [ 2809.624674][T14251] sock 0 [ 2809.624674][T14251] vmalloc 16384 [ 2809.624674][T14251] shmem 221184 [ 2809.624674][T14251] zswap 0 [ 2809.624674][T14251] zswapped 0 [ 2809.624674][T14251] file_mapped 221184 [ 2809.624674][T14251] file_dirty 0 [ 2809.624674][T14251] file_writeback 0 [ 2809.624674][T14251] swapcached 0 [ 2809.624674][T14251] anon_thp 0 [ 2809.624674][T14251] file_thp 0 [ 2809.624674][T14251] shmem_thp 0 [ 2809.624674][T14251] inactive_anon 172032 [ 2809.624674][T14251] active_anon 204800 [ 2809.624674][T14251] inactive_file 0 [ 2809.624674][T14251] active_file 0 [ 2809.624674][T14251] unevictable 0 [ 2809.624674][T14251] slab_reclaimable 20616 [ 2809.624674][T14251] slab_unreclaimable 308540056 [ 2809.624674][T14251] slab 308560672 [ 2809.825888][T14251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14247,uid=0 [ 2809.875243][T14251] Memory cgroup out of memory: Killed process 14247 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2809.943370][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:20:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xb, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:27 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:27 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xe, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2810.376154][T14274] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 11:20:27 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2810.605934][T14274] CPU: 1 PID: 14274 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2810.616175][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2810.626275][T14274] Call Trace: [ 2810.629578][T14274] [ 2810.632545][T14274] dump_stack_lvl+0xcd/0x134 [ 2810.637188][T14274] dump_header+0x10b/0x7f9 [ 2810.641651][T14274] oom_kill_process.cold+0x10/0x15 [ 2810.646838][T14274] out_of_memory+0x358/0x14a0 [ 2810.651555][T14274] ? find_held_lock+0x2d/0x110 [ 2810.656362][T14274] ? oom_killer_disable+0x270/0x270 [ 2810.661625][T14274] ? find_held_lock+0x2d/0x110 [ 2810.666437][T14274] mem_cgroup_out_of_memory+0x206/0x270 [ 2810.672033][T14274] ? mem_cgroup_margin+0x130/0x130 [ 2810.677205][T14274] ? lock_downgrade+0x6e0/0x6e0 [ 2810.682111][T14274] try_charge_memcg+0xf67/0x13f0 [ 2810.687091][T14274] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2810.693110][T14274] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2810.698876][T14274] ? lock_downgrade+0x6e0/0x6e0 [ 2810.703819][T14274] obj_cgroup_charge+0x2ab/0x5e0 [ 2810.708809][T14274] ? __anon_vma_prepare+0x60/0x560 [ 2810.713959][T14274] kmem_cache_alloc+0x96/0x3b0 [ 2810.718770][T14274] __anon_vma_prepare+0x60/0x560 [ 2810.723773][T14274] __handle_mm_fault+0x340e/0x39b0 [ 2810.728931][T14274] ? vm_iomap_memory+0x190/0x190 [ 2810.733928][T14274] handle_mm_fault+0x1c8/0x780 [ 2810.738745][T14274] do_user_addr_fault+0x475/0x1210 [ 2810.743922][T14274] exc_page_fault+0x94/0x170 [ 2810.748566][T14274] asm_exc_page_fault+0x22/0x30 [ 2810.753462][T14274] RIP: 0033:0x7f074143980f [ 2810.757914][T14274] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 80 fb 04 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 2810.777558][T14274] RSP: 002b:00007f0741acfac0 EFLAGS: 00010246 [ 2810.783667][T14274] RAX: 00007f07425f1000 RBX: 0000000000021000 RCX: 00007f0741489387 [ 2810.791677][T14274] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f07425f2000 [ 2810.799778][T14274] RBP: 00007f0741acfb90 R08: 00000000ffffffff R09: 00007f0742611700 [ 2810.807788][T14274] R10: 0000000000020022 R11: 0000000000000206 R12: 00007f0741acfcb0 [ 2810.815802][T14274] R13: 00007f0742611700 R14: 0000000000000000 R15: 0000000000022000 [ 2810.823840][T14274] [ 2810.863085][T14274] memory: usage 307188kB, limit 307200kB, failcnt 40607 [ 2810.876396][T14274] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2810.893842][T14274] Memory cgroup stats for /syz3: [ 2810.894043][T14274] anon 155648 [ 2810.894043][T14274] file 143360 [ 2810.894043][T14274] kernel 314261504 [ 2810.894043][T14274] kernel_stack 65536 [ 2810.894043][T14274] pagetables 86016 [ 2810.894043][T14274] percpu 5436928 [ 2810.894043][T14274] sock 0 [ 2810.894043][T14274] vmalloc 8192 [ 2810.894043][T14274] shmem 143360 [ 2810.894043][T14274] zswap 0 [ 2810.894043][T14274] zswapped 0 [ 2810.894043][T14274] file_mapped 143360 [ 2810.894043][T14274] file_dirty 0 [ 2810.894043][T14274] file_writeback 0 [ 2810.894043][T14274] swapcached 0 [ 2810.894043][T14274] anon_thp 0 [ 2810.894043][T14274] file_thp 0 [ 2810.894043][T14274] shmem_thp 0 [ 2810.894043][T14274] inactive_anon 172032 [ 2810.894043][T14274] active_anon 126976 [ 2810.894043][T14274] inactive_file 0 [ 2810.894043][T14274] active_file 0 [ 2810.894043][T14274] unevictable 0 [ 2810.894043][T14274] slab_reclaimable 17144 [ 2810.894043][T14274] slab_unreclaimable 308615960 [ 2810.894043][T14274] slab 308633104 [ 2811.095457][T14274] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14274,uid=0 [ 2811.126703][T14274] Memory cgroup out of memory: Killed process 14274 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2811.572421][T14293] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2811.637451][T14293] CPU: 0 PID: 14293 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2811.647690][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2811.657777][T14293] Call Trace: [ 2811.661084][T14293] [ 2811.664031][T14293] dump_stack_lvl+0xcd/0x134 [ 2811.668659][T14293] dump_header+0x10b/0x7f9 [ 2811.673112][T14293] oom_kill_process.cold+0x10/0x15 [ 2811.678263][T14293] out_of_memory+0x358/0x14a0 [ 2811.682978][T14293] ? find_held_lock+0x2d/0x110 [ 2811.687785][T14293] ? oom_killer_disable+0x270/0x270 [ 2811.693020][T14293] ? find_held_lock+0x2d/0x110 [ 2811.697806][T14293] mem_cgroup_out_of_memory+0x206/0x270 [ 2811.703410][T14293] ? mem_cgroup_margin+0x130/0x130 [ 2811.708561][T14293] ? lock_downgrade+0x6e0/0x6e0 [ 2811.713470][T14293] try_charge_memcg+0xf67/0x13f0 [ 2811.718457][T14293] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2811.724480][T14293] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2811.730246][T14293] ? lock_downgrade+0x6e0/0x6e0 [ 2811.735128][T14293] ? lock_downgrade+0x6e0/0x6e0 [ 2811.740099][T14293] ? rcu_read_unlock+0x9/0x60 [ 2811.744812][T14293] obj_cgroup_charge+0x2ab/0x5e0 [ 2811.749797][T14293] ? copy_process+0x4ce/0x7090 [ 2811.754613][T14293] kmem_cache_alloc_node+0x92/0x3f0 [ 2811.759863][T14293] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2811.765117][T14293] copy_process+0x4ce/0x7090 [ 2811.769754][T14293] ? find_held_lock+0x2d/0x110 [ 2811.774572][T14293] ? __cleanup_sighand+0xb0/0xb0 [ 2811.779596][T14293] kernel_clone+0xe7/0xab0 [ 2811.784071][T14293] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2811.790085][T14293] ? create_io_thread+0xe0/0xe0 [ 2811.794993][T14293] ? find_held_lock+0x2d/0x110 [ 2811.799780][T14293] ? __ct_user_exit+0xff/0x150 [ 2811.804595][T14293] __do_sys_clone+0xba/0x100 [ 2811.809246][T14293] ? kernel_clone+0xab0/0xab0 [ 2811.813997][T14293] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2811.819947][T14293] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2811.825919][T14293] do_syscall_64+0x35/0xb0 [ 2811.830376][T14293] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2811.836295][T14293] RIP: 0033:0x7f5161e8a6a1 [ 2811.840709][T14293] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2811.860335][T14293] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2811.868817][T14293] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2811.876824][T14293] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2811.884842][T14293] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2811.892867][T14293] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2811.900871][T14293] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2811.908899][T14293] [ 2812.004776][T14293] memory: usage 307200kB, limit 307200kB, failcnt 41619 [ 2812.015695][T14293] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2812.033265][T14293] Memory cgroup stats for /syz2: [ 2812.033475][T14293] anon 159744 [ 2812.033475][T14293] file 221184 [ 2812.033475][T14293] kernel 314183680 [ 2812.033475][T14293] kernel_stack 65536 [ 2812.033475][T14293] pagetables 81920 [ 2812.033475][T14293] percpu 5435744 [ 2812.033475][T14293] sock 0 [ 2812.033475][T14293] vmalloc 16384 [ 2812.033475][T14293] shmem 221184 [ 2812.033475][T14293] zswap 0 [ 2812.033475][T14293] zswapped 0 [ 2812.033475][T14293] file_mapped 221184 [ 2812.033475][T14293] file_dirty 0 [ 2812.033475][T14293] file_writeback 0 [ 2812.033475][T14293] swapcached 0 [ 2812.033475][T14293] anon_thp 0 [ 2812.033475][T14293] file_thp 0 [ 2812.033475][T14293] shmem_thp 0 [ 2812.033475][T14293] inactive_anon 159744 [ 2812.033475][T14293] active_anon 204800 [ 2812.033475][T14293] inactive_file 0 [ 2812.033475][T14293] active_file 0 [ 2812.033475][T14293] unevictable 0 [ 2812.033475][T14293] slab_reclaimable 16760 [ 2812.033475][T14293] slab_unreclaimable 308531896 [ 2812.033475][T14293] slab 308548656 [ 2812.233236][T14293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14293,uid=0 [ 2812.266333][T14293] Memory cgroup out of memory: Killed process 14293 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2812.596057][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:29 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:29 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2812.993514][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2812.997161][T14302] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2813.013097][T14302] CPU: 1 PID: 14302 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2813.023286][T14302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2813.033466][T14302] Call Trace: [ 2813.036776][T14302] [ 2813.039767][T14302] dump_stack_lvl+0xcd/0x134 [ 2813.044400][T14302] dump_header+0x10b/0x7f9 [ 2813.048871][T14302] oom_kill_process.cold+0x10/0x15 [ 2813.054033][T14302] out_of_memory+0x358/0x14a0 [ 2813.058760][T14302] ? find_held_lock+0x2d/0x110 [ 2813.063572][T14302] ? oom_killer_disable+0x270/0x270 [ 2813.068853][T14302] ? find_held_lock+0x2d/0x110 [ 2813.073667][T14302] mem_cgroup_out_of_memory+0x206/0x270 [ 2813.079259][T14302] ? mem_cgroup_margin+0x130/0x130 [ 2813.084404][T14302] ? lock_downgrade+0x6e0/0x6e0 [ 2813.089324][T14302] try_charge_memcg+0xf67/0x13f0 [ 2813.094319][T14302] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2813.100350][T14302] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2813.106110][T14302] ? lock_downgrade+0x6e0/0x6e0 [ 2813.111003][T14302] ? lock_downgrade+0x6e0/0x6e0 [ 2813.115893][T14302] ? rcu_read_unlock+0x9/0x60 [ 2813.120640][T14302] obj_cgroup_charge+0x2ab/0x5e0 [ 2813.125625][T14302] ? copy_process+0x4ce/0x7090 [ 2813.130426][T14302] kmem_cache_alloc_node+0x92/0x3f0 [ 2813.135660][T14302] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2813.140912][T14302] copy_process+0x4ce/0x7090 [ 2813.145551][T14302] ? __lock_acquire+0xbc3/0x56d0 [ 2813.150545][T14302] ? __cleanup_sighand+0xb0/0xb0 [ 2813.155570][T14302] kernel_clone+0xe7/0xab0 [ 2813.160053][T14302] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2813.166073][T14302] ? create_io_thread+0xe0/0xe0 [ 2813.170973][T14302] ? find_held_lock+0x2d/0x110 [ 2813.175781][T14302] ? __ct_user_exit+0xff/0x150 [ 2813.180593][T14302] __do_sys_clone+0xba/0x100 [ 2813.185224][T14302] ? kernel_clone+0xab0/0xab0 [ 2813.189987][T14302] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2813.195926][T14302] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2813.201878][T14302] do_syscall_64+0x35/0xb0 [ 2813.206346][T14302] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2813.212295][T14302] RIP: 0033:0x7f074148a6a1 [ 2813.216755][T14302] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2813.236403][T14302] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:20:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2813.244856][T14302] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2813.252878][T14302] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2813.260887][T14302] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2813.268980][T14302] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2813.276984][T14302] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2813.285021][T14302] 11:20:30 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2813.314408][T14302] memory: usage 307196kB, limit 307200kB, failcnt 40744 [ 2813.385382][T14302] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2813.392776][T14302] Memory cgroup stats for /syz3: [ 2813.393015][T14302] anon 159744 [ 2813.393015][T14302] file 143360 [ 2813.393015][T14302] kernel 314253312 [ 2813.393015][T14302] kernel_stack 65536 [ 2813.393015][T14302] pagetables 86016 [ 2813.393015][T14302] percpu 5436928 [ 2813.393015][T14302] sock 0 [ 2813.393015][T14302] vmalloc 0 [ 2813.393015][T14302] shmem 143360 [ 2813.393015][T14302] zswap 0 [ 2813.393015][T14302] zswapped 0 [ 2813.393015][T14302] file_mapped 143360 [ 2813.393015][T14302] file_dirty 0 [ 2813.393015][T14302] file_writeback 0 [ 2813.393015][T14302] swapcached 0 [ 2813.393015][T14302] anon_thp 0 [ 2813.393015][T14302] file_thp 0 [ 2813.393015][T14302] shmem_thp 0 [ 2813.393015][T14302] inactive_anon 176128 [ 2813.393015][T14302] active_anon 126976 [ 2813.393015][T14302] inactive_file 0 [ 2813.393015][T14302] active_file 0 [ 2813.393015][T14302] unevictable 0 [ 2813.393015][T14302] slab_reclaimable 17144 [ 2813.393015][T14302] slab_unreclaimable 308616848 [ 2813.393015][T14302] slab 308633992 11:20:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3200}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3000}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xc, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2813.737114][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:30 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2813.841142][T14302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14302,uid=0 [ 2813.859178][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2813.882828][T14302] Memory cgroup out of memory: Killed process 14302 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2813.914825][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2813.929991][T14317] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2813.946305][T14317] CPU: 0 PID: 14317 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2813.956526][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2813.966616][T14317] Call Trace: [ 2813.969957][T14317] [ 2813.972913][T14317] dump_stack_lvl+0xcd/0x134 [ 2813.977580][T14317] dump_header+0x10b/0x7f9 [ 2813.982050][T14317] oom_kill_process.cold+0x10/0x15 [ 2813.987217][T14317] out_of_memory+0x358/0x14a0 11:20:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x10, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2813.991958][T14317] ? oom_killer_disable+0x270/0x270 [ 2813.997205][T14317] ? find_held_lock+0x2d/0x110 [ 2814.002018][T14317] mem_cgroup_out_of_memory+0x206/0x270 [ 2814.007700][T14317] ? mem_cgroup_margin+0x130/0x130 [ 2814.012858][T14317] ? lock_downgrade+0x6e0/0x6e0 [ 2814.017779][T14317] try_charge_memcg+0xf67/0x13f0 [ 2814.022782][T14317] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2814.028826][T14317] ? lock_downgrade+0x6e0/0x6e0 [ 2814.033753][T14317] charge_memcg+0x31/0x320 [ 2814.038254][T14317] __mem_cgroup_charge+0x27/0x90 [ 2814.043236][T14317] ? _compound_head+0x5d/0x150 [ 2814.048047][T14317] wp_page_copy+0x27c/0x1b60 [ 2814.052726][T14317] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2814.058232][T14317] ? lock_downgrade+0x6e0/0x6e0 [ 2814.063133][T14317] ? vm_normal_page+0x146/0x2a0 [ 2814.068065][T14317] do_wp_page+0x1d1/0x1910 [ 2814.072566][T14317] __handle_mm_fault+0x1813/0x39b0 [ 2814.077760][T14317] ? vm_iomap_memory+0x190/0x190 [ 2814.082807][T14317] handle_mm_fault+0x1c8/0x780 [ 2814.087633][T14317] do_user_addr_fault+0x475/0x1210 11:20:31 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2814.092812][T14317] exc_page_fault+0x94/0x170 [ 2814.097455][T14317] asm_exc_page_fault+0x22/0x30 [ 2814.102342][T14317] RIP: 0033:0x7f5161e374b0 [ 2814.106794][T14317] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2814.126471][T14317] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2814.132581][T14317] RAX: 00000000098f1ddc RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2814.140615][T14317] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000d570f0d [ 2814.148619][T14317] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2814.156626][T14317] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2814.164633][T14317] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2814.172689][T14317] ? __x64_sys_socket+0xd/0xb0 [ 2814.177520][T14317] 11:20:31 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 11:20:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x9}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:31 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x10, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2814.456927][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2814.552982][T14317] memory: usage 307148kB, limit 307200kB, failcnt 41706 11:20:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xc, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:31 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2814.897319][T14317] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2814.922177][T14317] Memory cgroup stats for /syz2: [ 2814.922417][T14317] anon 135168 [ 2814.922417][T14317] file 221184 [ 2814.922417][T14317] kernel 314163200 [ 2814.922417][T14317] kernel_stack 65536 [ 2814.922417][T14317] pagetables 73728 [ 2814.922417][T14317] percpu 5435744 [ 2814.922417][T14317] sock 0 [ 2814.922417][T14317] vmalloc 16384 [ 2814.922417][T14317] shmem 221184 [ 2814.922417][T14317] zswap 0 [ 2814.922417][T14317] zswapped 0 [ 2814.922417][T14317] file_mapped 221184 [ 2814.922417][T14317] file_dirty 0 [ 2814.922417][T14317] file_writeback 0 [ 2814.922417][T14317] swapcached 0 [ 2814.922417][T14317] anon_thp 0 [ 2814.922417][T14317] file_thp 0 [ 2814.922417][T14317] shmem_thp 0 [ 2814.922417][T14317] inactive_anon 151552 [ 2814.922417][T14317] active_anon 204800 [ 2814.922417][T14317] inactive_file 0 [ 2814.922417][T14317] active_file 0 [ 2814.922417][T14317] unevictable 0 [ 2814.922417][T14317] slab_reclaimable 14832 [ 2814.922417][T14317] slab_unreclaimable 308528136 [ 2814.922417][T14317] slab 308542968 [ 2815.103814][T14317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14317,uid=0 11:20:32 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2815.277914][T14317] Memory cgroup out of memory: Killed process 14317 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:20:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3300}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:32 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = memfd_create(0x0, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r1, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) 11:20:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x11, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2815.384856][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2815.452173][T14335] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2815.462592][T14335] CPU: 1 PID: 14335 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2815.472789][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2815.482884][T14335] Call Trace: [ 2815.486195][T14335] [ 2815.489161][T14335] dump_stack_lvl+0xcd/0x134 [ 2815.493799][T14335] dump_header+0x10b/0x7f9 11:20:32 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) gettid() r1 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x0, 0x2012, r1, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) [ 2815.498262][T14335] oom_kill_process.cold+0x10/0x15 [ 2815.503419][T14335] out_of_memory+0x358/0x14a0 [ 2815.508141][T14335] ? find_held_lock+0x2d/0x110 [ 2815.512979][T14335] ? oom_killer_disable+0x270/0x270 [ 2815.518236][T14335] ? find_held_lock+0x2d/0x110 [ 2815.523050][T14335] mem_cgroup_out_of_memory+0x206/0x270 [ 2815.528639][T14335] ? mem_cgroup_margin+0x130/0x130 [ 2815.533791][T14335] ? lock_downgrade+0x6e0/0x6e0 [ 2815.538703][T14335] try_charge_memcg+0xf67/0x13f0 [ 2815.543694][T14335] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2815.549718][T14335] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2815.555481][T14335] ? lock_downgrade+0x6e0/0x6e0 [ 2815.560384][T14335] ? lock_downgrade+0x6e0/0x6e0 [ 2815.565276][T14335] ? rcu_read_unlock+0x9/0x60 [ 2815.570018][T14335] obj_cgroup_charge+0x2ab/0x5e0 [ 2815.575009][T14335] ? copy_process+0x4ce/0x7090 [ 2815.579846][T14335] kmem_cache_alloc_node+0x92/0x3f0 [ 2815.585084][T14335] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2815.590338][T14335] copy_process+0x4ce/0x7090 [ 2815.594979][T14335] ? find_held_lock+0x2d/0x110 [ 2815.599796][T14335] ? __cleanup_sighand+0xb0/0xb0 [ 2815.604796][T14335] kernel_clone+0xe7/0xab0 [ 2815.609259][T14335] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2815.615288][T14335] ? create_io_thread+0xe0/0xe0 [ 2815.620206][T14335] ? find_held_lock+0x2d/0x110 [ 2815.625017][T14335] ? __ct_user_exit+0xff/0x150 [ 2815.629837][T14335] __do_sys_clone+0xba/0x100 [ 2815.634476][T14335] ? kernel_clone+0xab0/0xab0 [ 2815.639223][T14335] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2815.645169][T14335] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2815.651160][T14335] do_syscall_64+0x35/0xb0 [ 2815.655655][T14335] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2815.661602][T14335] RIP: 0033:0x7f074148a6a1 [ 2815.666061][T14335] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2815.685716][T14335] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2815.694177][T14335] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2815.702187][T14335] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2815.710195][T14335] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2815.718203][T14335] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2815.726210][T14335] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2815.734332][T14335] 11:20:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xc, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2815.862775][T14335] memory: usage 307196kB, limit 307200kB, failcnt 40822 [ 2815.875966][T14335] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2815.896092][T14335] Memory cgroup stats for /syz3: [ 2815.896326][T14335] anon 159744 [ 2815.896326][T14335] file 143360 [ 2815.896326][T14335] kernel 314265600 [ 2815.896326][T14335] kernel_stack 65536 [ 2815.896326][T14335] pagetables 86016 [ 2815.896326][T14335] percpu 5436928 [ 2815.896326][T14335] sock 0 [ 2815.896326][T14335] vmalloc 0 [ 2815.896326][T14335] shmem 143360 [ 2815.896326][T14335] zswap 0 [ 2815.896326][T14335] zswapped 0 [ 2815.896326][T14335] file_mapped 143360 [ 2815.896326][T14335] file_dirty 0 [ 2815.896326][T14335] file_writeback 0 [ 2815.896326][T14335] swapcached 0 [ 2815.896326][T14335] anon_thp 0 [ 2815.896326][T14335] file_thp 0 [ 2815.896326][T14335] shmem_thp 0 [ 2815.896326][T14335] inactive_anon 176128 [ 2815.896326][T14335] active_anon 126976 [ 2815.896326][T14335] inactive_file 0 [ 2815.896326][T14335] active_file 0 [ 2815.896326][T14335] unevictable 0 [ 2815.896326][T14335] slab_reclaimable 17144 [ 2815.896326][T14335] slab_unreclaimable 308626144 [ 2815.896326][T14335] slab 308643288 [ 2816.083908][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2816.178089][T14335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14335,uid=0 [ 2816.203167][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2816.235160][T14335] Memory cgroup out of memory: Killed process 14335 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:20:33 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x10) 11:20:33 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x10) 11:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xa}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:33 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) [ 2816.775911][T14355] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2816.858267][T14355] CPU: 0 PID: 14355 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2816.868499][T14355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2816.878595][T14355] Call Trace: [ 2816.881916][T14355] [ 2816.884881][T14355] dump_stack_lvl+0xcd/0x134 [ 2816.889528][T14355] dump_header+0x10b/0x7f9 [ 2816.893999][T14355] oom_kill_process.cold+0x10/0x15 [ 2816.899162][T14355] out_of_memory+0x358/0x14a0 [ 2816.903885][T14355] ? find_held_lock+0x2d/0x110 [ 2816.908688][T14355] ? oom_killer_disable+0x270/0x270 [ 2816.913933][T14355] ? find_held_lock+0x2d/0x110 [ 2816.918746][T14355] mem_cgroup_out_of_memory+0x206/0x270 [ 2816.924343][T14355] ? mem_cgroup_margin+0x130/0x130 [ 2816.929516][T14355] ? lock_downgrade+0x6e0/0x6e0 [ 2816.934427][T14355] try_charge_memcg+0xf67/0x13f0 [ 2816.939417][T14355] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2816.945456][T14355] ? lock_downgrade+0x6e0/0x6e0 [ 2816.950370][T14355] charge_memcg+0x31/0x320 [ 2816.954836][T14355] __mem_cgroup_charge+0x27/0x90 [ 2816.959825][T14355] ? _compound_head+0x5d/0x150 [ 2816.964656][T14355] wp_page_copy+0x27c/0x1b60 [ 2816.969293][T14355] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2816.974788][T14355] ? lock_downgrade+0x6e0/0x6e0 [ 2816.979680][T14355] ? vm_normal_page+0x146/0x2a0 [ 2816.984586][T14355] do_wp_page+0x1d1/0x1910 [ 2816.989055][T14355] __handle_mm_fault+0x1813/0x39b0 [ 2816.994209][T14355] ? vm_iomap_memory+0x190/0x190 [ 2816.999206][T14355] handle_mm_fault+0x1c8/0x780 [ 2817.004010][T14355] do_user_addr_fault+0x475/0x1210 [ 2817.009162][T14355] exc_page_fault+0x94/0x170 [ 2817.013784][T14355] asm_exc_page_fault+0x22/0x30 [ 2817.018644][T14355] RIP: 0033:0x7f5161e374b0 [ 2817.023068][T14355] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2817.042687][T14355] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2817.048764][T14355] RAX: 00000000bd27bad8 RBX: 00007f5161f9c0e8 RCX: 0000001b2f920000 11:20:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2817.056758][T14355] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008ec0c76 [ 2817.064739][T14355] RBP: 00000000bd27bad8 R08: 0000000000001ad8 R09: 00000000bd27badc [ 2817.072719][T14355] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2817.080698][T14355] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a3270f [ 2817.088677][T14355] ? trace_user_exit.constprop.0+0x13f/0x210 [ 2817.094692][T14355] 11:20:34 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) [ 2817.162053][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:34 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) [ 2817.593288][T14355] memory: usage 307200kB, limit 307200kB, failcnt 41773 [ 2817.605316][T14355] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2817.646552][T14355] Memory cgroup stats for /syz2: [ 2817.646787][T14355] anon 126976 [ 2817.646787][T14355] file 221184 [ 2817.646787][T14355] kernel 314216448 [ 2817.646787][T14355] kernel_stack 98304 [ 2817.646787][T14355] pagetables 73728 [ 2817.646787][T14355] percpu 5435744 [ 2817.646787][T14355] sock 0 [ 2817.646787][T14355] vmalloc 16384 [ 2817.646787][T14355] shmem 221184 [ 2817.646787][T14355] zswap 0 [ 2817.646787][T14355] zswapped 0 [ 2817.646787][T14355] file_mapped 221184 [ 2817.646787][T14355] file_dirty 0 [ 2817.646787][T14355] file_writeback 0 [ 2817.646787][T14355] swapcached 0 [ 2817.646787][T14355] anon_thp 0 [ 2817.646787][T14355] file_thp 0 [ 2817.646787][T14355] shmem_thp 0 [ 2817.646787][T14355] inactive_anon 143360 [ 2817.646787][T14355] active_anon 204800 [ 2817.646787][T14355] inactive_file 0 [ 2817.646787][T14355] active_file 0 [ 2817.646787][T14355] unevictable 0 [ 2817.646787][T14355] slab_reclaimable 16760 [ 2817.646787][T14355] slab_unreclaimable 308539400 [ 2817.646787][T14355] slab 308556160 [ 2817.913533][T14355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14355,uid=0 [ 2817.974628][T14355] Memory cgroup out of memory: Killed process 14355 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2818.186942][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2818.337824][T14375] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 11:20:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3400}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x24, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:35 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) 11:20:35 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) [ 2818.428867][T14375] CPU: 1 PID: 14375 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2818.439101][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2818.449190][T14375] Call Trace: [ 2818.452495][T14375] [ 2818.455450][T14375] dump_stack_lvl+0xcd/0x134 [ 2818.460087][T14375] dump_header+0x10b/0x7f9 [ 2818.464549][T14375] oom_kill_process.cold+0x10/0x15 [ 2818.469712][T14375] out_of_memory+0x358/0x14a0 [ 2818.474431][T14375] ? find_held_lock+0x2d/0x110 [ 2818.479230][T14375] ? oom_killer_disable+0x270/0x270 [ 2818.484474][T14375] ? find_held_lock+0x2d/0x110 [ 2818.489282][T14375] mem_cgroup_out_of_memory+0x206/0x270 [ 2818.494867][T14375] ? mem_cgroup_margin+0x130/0x130 [ 2818.500003][T14375] ? lock_downgrade+0x6e0/0x6e0 [ 2818.504898][T14375] try_charge_memcg+0xf67/0x13f0 [ 2818.509874][T14375] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2818.515886][T14375] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2818.521640][T14375] ? lock_downgrade+0x6e0/0x6e0 [ 2818.526528][T14375] ? lock_downgrade+0x6e0/0x6e0 [ 2818.531404][T14375] ? rcu_read_unlock+0x9/0x60 [ 2818.536123][T14375] obj_cgroup_charge+0x2ab/0x5e0 [ 2818.541092][T14375] ? copy_process+0x4ce/0x7090 [ 2818.545892][T14375] kmem_cache_alloc_node+0x92/0x3f0 [ 2818.551134][T14375] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2818.556382][T14375] copy_process+0x4ce/0x7090 [ 2818.561023][T14375] ? find_held_lock+0x2d/0x110 [ 2818.565838][T14375] ? __cleanup_sighand+0xb0/0xb0 [ 2818.570850][T14375] kernel_clone+0xe7/0xab0 [ 2818.575304][T14375] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2818.581325][T14375] ? create_io_thread+0xe0/0xe0 [ 2818.586227][T14375] ? find_held_lock+0x2d/0x110 [ 2818.591035][T14375] ? __ct_user_exit+0xff/0x150 [ 2818.595849][T14375] __do_sys_clone+0xba/0x100 [ 2818.600477][T14375] ? kernel_clone+0xab0/0xab0 [ 2818.605214][T14375] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2818.611151][T14375] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2818.617094][T14375] do_syscall_64+0x35/0xb0 [ 2818.621573][T14375] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2818.627510][T14375] RIP: 0033:0x7f074148a6a1 [ 2818.631958][T14375] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2818.651613][T14375] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2818.660069][T14375] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2818.668077][T14375] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2818.676096][T14375] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2818.684106][T14375] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2818.692118][T14375] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2818.700148][T14375] [ 2818.774650][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2818.824583][T14375] memory: usage 307180kB, limit 307200kB, failcnt 40906 [ 2818.845550][T14375] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2818.864987][T14375] Memory cgroup stats for /syz3: [ 2818.865223][T14375] anon 159744 [ 2818.865223][T14375] file 143360 [ 2818.865223][T14375] kernel 314249216 [ 2818.865223][T14375] kernel_stack 65536 [ 2818.865223][T14375] pagetables 86016 [ 2818.865223][T14375] percpu 5436928 [ 2818.865223][T14375] sock 0 [ 2818.865223][T14375] vmalloc 0 [ 2818.865223][T14375] shmem 143360 [ 2818.865223][T14375] zswap 0 [ 2818.865223][T14375] zswapped 0 [ 2818.865223][T14375] file_mapped 143360 [ 2818.865223][T14375] file_dirty 0 [ 2818.865223][T14375] file_writeback 0 [ 2818.865223][T14375] swapcached 0 [ 2818.865223][T14375] anon_thp 0 [ 2818.865223][T14375] file_thp 0 [ 2818.865223][T14375] shmem_thp 0 [ 2818.865223][T14375] inactive_anon 176128 [ 2818.865223][T14375] active_anon 126976 [ 2818.865223][T14375] inactive_file 0 [ 2818.865223][T14375] active_file 0 [ 2818.865223][T14375] unevictable 0 [ 2818.865223][T14375] slab_reclaimable 17144 [ 2818.865223][T14375] slab_unreclaimable 308614744 [ 2818.865223][T14375] slab 308631888 11:20:35 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="77e0c67624bf6bf1ed0f56e46708031daca65e496dbc2fad8a9b9257ae43a2f4eca9f1303a6c30c55fdd4f568d0569b66d99ad753f2b3a6da4de7d6c44f225ec94c13812a55e259f5927284dafaee1850a374b3a18c751aa438730169721e29b80aaa66e08d744d4d1028980404fe25711d06ebf8dd0af190728e1cd91e5018826ef01a37100d2603833864ddb3d65f5d48df88d7b3d0665187940d547cf6cab2e2384df253cd5194947eeab6610ccf3f15cc8a9b8f8f02a5df37540b2b5d2d82ddd7773ef25819099fcf6d45b740fb1417ef8451ea2af84f7d71903b08dad7dd5a8bf4b35b65c67a1e1cb5e16005edc575aea50f61e94d463aa531fa7b6", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) 11:20:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x48, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2819.135394][T14375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14375,uid=0 [ 2819.151829][T14375] Memory cgroup out of memory: Killed process 14375 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:20:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xc}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x24, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:36 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) [ 2819.333128][T14403] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2819.348236][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2819.373766][T14403] CPU: 0 PID: 14403 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2819.384000][T14403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2819.394086][T14403] Call Trace: [ 2819.397387][T14403] [ 2819.400337][T14403] dump_stack_lvl+0xcd/0x134 [ 2819.404964][T14403] dump_header+0x10b/0x7f9 [ 2819.409418][T14403] oom_kill_process.cold+0x10/0x15 [ 2819.414612][T14403] out_of_memory+0x358/0x14a0 [ 2819.419352][T14403] ? oom_killer_disable+0x270/0x270 [ 2819.424605][T14403] ? find_held_lock+0x2d/0x110 [ 2819.429419][T14403] mem_cgroup_out_of_memory+0x206/0x270 [ 2819.435015][T14403] ? mem_cgroup_margin+0x130/0x130 [ 2819.440166][T14403] ? lock_downgrade+0x6e0/0x6e0 [ 2819.445084][T14403] try_charge_memcg+0xf67/0x13f0 [ 2819.450081][T14403] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2819.456118][T14403] ? lock_downgrade+0x6e0/0x6e0 [ 2819.461041][T14403] charge_memcg+0x31/0x320 [ 2819.465504][T14403] __mem_cgroup_charge+0x27/0x90 [ 2819.470479][T14403] ? _compound_head+0x5d/0x150 [ 2819.475305][T14403] wp_page_copy+0x27c/0x1b60 [ 2819.479950][T14403] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2819.485449][T14403] ? lock_downgrade+0x6e0/0x6e0 [ 2819.490345][T14403] ? vm_normal_page+0x146/0x2a0 [ 2819.495290][T14403] do_wp_page+0x1d1/0x1910 [ 2819.499758][T14403] __handle_mm_fault+0x1813/0x39b0 [ 2819.504923][T14403] ? vm_iomap_memory+0x190/0x190 [ 2819.509931][T14403] handle_mm_fault+0x1c8/0x780 [ 2819.514765][T14403] do_user_addr_fault+0x475/0x1210 [ 2819.519929][T14403] exc_page_fault+0x94/0x170 [ 2819.524571][T14403] asm_exc_page_fault+0x22/0x30 [ 2819.529460][T14403] RIP: 0033:0x7f5161e374b0 [ 2819.533935][T14403] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2819.553666][T14403] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2819.559826][T14403] RAX: 000000009baee0a5 RBX: 00007f5161f9c018 RCX: 0000001b2f920000 11:20:36 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) r3 = socket$inet(0x2, 0x4000000805, 0x0) syz_clone(0x0, &(0x7f0000000380)="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", 0xfe, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="28f9153c3b70f6eab6f08ce55f5e473bffed9d3f2a6168f5e96137bef9663170e8542711c535fb4d6ac76b07386c36ac6791f02fb35119852a7068") r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000580)='attr/fscreate\x00') r8 = accept(r7, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0xd9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3f}}, 0x2, 0x8000, 0x587, 0xde, 0x80}, 0x9c) [ 2819.567836][T14403] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008ec0db1 [ 2819.575845][T14403] RBP: 000000009baee0a5 R08: 00000000000000a5 R09: 000000009baee0a9 [ 2819.583859][T14403] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2819.591877][T14403] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81a32736 [ 2819.599890][T14403] ? trace_user_exit.constprop.0+0x166/0x210 [ 2819.605983][T14403] 11:20:36 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) r1 = eventfd2(0x1, 0x801) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000fc0)={{r2}, "0c51dbaf5ba2a6ed44c3aaedd009ff3849e17c44050c5c6cb325d816dd3dd3fa101d3b8ba721da5bb554646fd686d6148042c4839d9295f189942fa7e5fd9f0791b34ddadaa9165ae0b93cead096d41844e6080301930af6c48a214c44800038db4d82a73341d1004b1278348a1721abf3d5cb14c3687d59ce12048112e2c3f6cbdae81e6ebea82718dbc31a0b0b8c6849988c582b5e24ae0bb0cd059c243adfa7b3d7f57cb6e0b719c34b1c71eff232b62ab80621a3981f15983dbcc8a96b59998ddc7b17e8d8d795afaaf82ad47d88bd9468b68d8b49aeae55865203a3488eaffeb38f079c92cd93902d5d952fcec110d54d51f2b1fab09688c5063e61c722426b7c0f4022b06a553de411ccc00f0252ea6500909227bdf8de11571daa4c7779178dbcfac1e0d5269e461d39b345924657f27035b3da3e4b25f3c0c773483eace1aa43879d94fca2bdbd71cf4b075d45173d1295ac6971cd10fc722f9922b8c82b3c686584372d041c493f9f6798821d8f12f5396fd7e437ddd27244133d8817c5d9edb1c24d7af5893c5c0d84a527c5d8126b35b6e0c30ca25441cfcf0acf6cfec664df1c1e4e96cb1aff650f994789906f595abaec4fff94395615d8934acf4e18de37db8109cc00c89da158336ae18e330bcd517d04b741784b327644cfc459cce6be2b95e986f8dd6ef251402bc302b3ae77bca7bb10110f069e5a8b823c0124bef89e3036270d787b40d75294141834463e48d4fa767b45c565dfb70a511170d518be31ad85b2499feb12944d44dfb98de43ade26fb72c178e08d2d73666aca1d9a175a6c28382ad23db7b9116a86bd71e430f7c06633c99fc02bf214ae20c698b43b9aad3578fdcc7b2ed16c9945704274c1f1eb53dc33277d7361a9a0591ab91613ca8c389c4ca9f81a28becbdc48767f46b3d70e2431215aac8b36db12b3ed154c10c17d498c24d7a4e84fb67502c8f8ea12e3d8b7185f80664874940c37a39b2cbb376177c9c36e3784871f9a62db47b434501cd082da7f654eff44caaca1c9757995e07b5c8456bede8e6851b1f844e3d9a19a53fe79922c31e7de9bf82f645874c07e5b2e81f6908d41acf508456190bd45cf65c94124ac31eb21f0944c2f161f6aaa2173709ae268759fb9c7fd61616ce0030c044c4333a1444bf86ec12a770872b628d056a8ae4f3e48b3bbbdcf95c7f0f5ee3e693405dafb7de695fe94949b4cfd4b449560cf2d44ff1421562bdcf9928c46cf1a76c7a64a8327016b045496188a99f96ddac206a80192c9506cf05116b22c5c131c4059d49f7520d01414425595cb96006d610ad14e182548997ebdddd179bbbcbdfa5cb07bf3dd674c2f1717ff22f6b7c719e86503a70271127211f31434e90dd6abc09c4cf888149e942e2ad9582c905f258c14d85635e258aa39863734bc2c53618e4b8d2eb690146331706db45364892b74ba784ef553ea50a77355b7b2445a89da5c90c4d43f21e39a8a4697026b995816127955fc619eac1bd7ac226ca6e6deb22dce6b9f8629f64af3d8e17af69d845e6446ffa6e67ed1321884c62e6eb133308b3f6c72b45bffcbeffe6e697f418699ef14b22dd347688f11c74210aa7417da7f556fea39155d8a7f44d5e6ba2d0b15eb2a3cb4e5a5e37a918a4c12dafa08366c13ccaf6367c75c7a4eddff9acad652c35a5de704010bd4a9895e6a562b5f75b9f214b1da84332cf355cf4537eb8f66f6f5eb3552283e1b6bf4334a742a28c288be1e601884dcff498f60dde228ff6a8b79956f075a516b3c4e0a79863deb5b68278b434a2e686cb6cfc35994d03cb144c08ff7ae7b27460a278514d3cad1a009c7b0f1907fa58809eb1f7a207bde11faf7f3a01bf45633b65ac87281d0e8585adc26f7c6d71742fc5209a6c364c56d1a7f8064e4690398e446d75a0c22ce6c3dff3f2f0b3ef292b074b24725ff3f75dc8147b2d34519459b54c8af8e2b7272bbdfa8ff5cea67d339323bb3aa8ddd8d7a381d6c4b9a823d8e8b48212aeece4f60e398fddf5dae5531ba5aa2ba8949467e20cf897ff92fb752688d4733a0a5d1d0a9f05c7b989c58d1f4cef3ca2658a475ce136bddb77dc5b93a25e9bcfe91dae91df65639a7bf56a504eda0243630d1c41b886fcd09d6f2b175ec74fa2381d30a019965841c9ca70008e50ae7e847bca9804dd4dcc9ec463e308b80168e2dec2c379ef644de933e452c1e3cdbecb337a4b0c921030290989c3dd42d51cc3b7b5df37f073eaf22800d0e8758d2a65dfd30b012084f70109d7a300f35fa24f310fa48351178479b7305999a3be4389689e48cf492195be666e86826f6a1aeda9c05a15587d3b7dfa38c33563349e74185eb11dc0a9d09063e805c9fe29a893f0b5ce6d8a49642e475166f053ebfaf4d329660897e7bb18fc6d9f7e9c954eeb9d586eb9283e57fc41eb6c0d20c88ba3994e682d7c4a3e427ae2014057968e200d7fae4b84c813a42fc098e21e017c8147c0425d2dcfc1d2251e0f117c89b2d6d9de490cbecd7946651418f74873fd075442e67e89e668ff046305e723b35475e00aebe32285910f6df9c0d76c26ba6f423e2186df11f82f9fe327976926704af3cf6c311e2a6e002da27fd1bb7555036c7f4f2638761901b5fce17880e95bd02c525bcf45c37b8ddc76d3e8aa30536d638d18940e38ca08da59b8aae6d05b6d99f50957d8412bee4ef5107e3477280c0d593f841707b29eb95fe54a6d803313f9c611208a2e1b54c0291890362475ff6598adc4abd0d99dac9bcedca12618d1b8b32d58f94bd6e44403b8b3e0ec993649656cd9d66c8ffc460727e6f6037fa2cf5748f8134ae0ab861e05cc7b006456f7b10185104e60377d08751b04ccfe51775609d23b23aaa72530c3b94d151e573ebbdb31a4ae5064cb8b9ced6a827e4a246ee1fc3643603e7c13aff513c618eebd3cec22a0fdfd6d5af1ac1f733c1fc81de41d96ea798dfd89f0320199bc998d573577e32deeb7cd3b350147115dad62440c88d58e7a3fe371c67b3226ff7dd7aac467290d12623fe1bf7f9bea13233230270708084c11fdfd3d2b9c7895ab8ed7d5019b78187a256802d26343413adfb1dc8130080209eaaf8a486ad787f612f704d741a5713f253c633a0bffe873a70f1a2bfedc304a90cdf635628ae4af81700172667a8f0a3d42ca86182e0bda42f6937ab55711da8a35193c9b1b848797f180650991f3eb44838bd7f3e62394550cc61e9bce746cb788e408d906ffb1d18add5ea1b9e63c9714b4bf505e9c00bbaf9d6503700c9aa2402788bdb5e62617988c8c6e366485eb107d54078ba1f6265e6b7870eab4922d3df3e3ba20efbd579850414b66bc4bb31b9911ae9b5c83635ba04226b097352cd1443c59bb0e6501b53a8b12bbf769444687bd9ef58b755de296b789ae9e11c039a286dbb29472756061add619f06bb1e114c484c2e8d09f4e44061fc5d61897d7e7e48dd8a854a75ef102b9b61103cfd79102c9543368126542c41d05110f0bac104bd43c5345d72427ae2a37a63924ea76a11c42d642498679695ab7a67d59326348ba9f4607d79c362791cd09b083da1a539a1b5ea8715e12a0ef37bd48ab7d9c2c0e285c2309fdba8aba6ca802195357b0a9ff1fd17a84a83647ed80da70aacd78904cf7c24a111c774b600ff8e0a9781e8ec13598e56ed174afa927101bf92639df07eff8fdd76fe098bf4aec1f35b31ee8771f4124ada2327c6f016360e3df526eb3a9a3c22f36e1f6c510fbf0a87e3196dc29488960a726b1562c25e557f68cd1651e6a228aceb95877ac0b6cc1d5c1fa07c26c80598df8984fa7edf5a213266e415c7637d4c63733fe7d9343dcd92ef5eb860a98a3d7d68133f5f4858652d329c8c20b12e6cc7bd12f7750e0bb1bac25e76f8585fe2b2fa66649a42652061319b1ee652a1e8814d17321cbd55c04d68c0bca25b9b41d662f93d6e4500e22753b2201619f762564566066e2751ea7a82be69c03221419a966eab738d00f98ca4b9eae91418c071eb0d6f7ce1d3b20e5969c173ac8dd9bd1ce6d3a8a2df9e6033a0348cd9a75d3eb1693847b93a7c11a2ff29c4505b3e5fbaf0d1c0274f33e8c15d838e0cc01fc43fc62aba88825933fb0fac455435f844a51f36fb34c28313be78d0230d105fd055d25ec174662bbfe08735b34c88e033fa41d19d93960a59fe2e9b529f4e09ad96f549b5af98ec3c1b1bac4cfd1d826ece7cb33aa74980932ea044097cfc32efa92889d3a3b1d43e1c8a53e1fedb99e462a6f41378a9341f75eca69d4f5e7ac0139a6d20b854b269ad602828db36e2497eaa78bc9a3cd4092bf34506174bab6d71c40a7a6cbe110ebc96e8a23c6d24a4269776f728e955a8be47f3c732749b243d11d23ec1356b0a50d21e0e817cae561c6574440f08083eb74dca3fec70f052d9ec81dce64485d801e88abca2bbd16b312c3dc2fe93fd3df427c15a642b04ea068471f2555dcb3e87b25a9a375743844317d3d1c43559e337ca8cd0e765fd6dfaa61fc506cc446bffd1d25f7afb28a9cae843608006cac9af5f87c491c286e9bfefef9390eec7f9e17022ae9d79723174860b80c4ed8e122856b5e96ef08ba1db1f8c72452e2c9a00f134cc9f866f9e040ceae8292219a1556d71f60aabc72e6cdc67abe0960554c0f2126fa2e73e03450d184c7bda87194ec3278ba6279a56896584adfa68cfc367e354ee9155c91480b12353d2d1eb43ab49b79ad1a935e1b71e0c8503d9a31806343f4c271526968ba2ab15a4e2969ca56fb871b069fefb6d4f82329ad05571ff74f026da2e46534c175bc6ddc86cd98a22ffa4b4051117d2389a6513e80e7ffc5ee7f47ba6c69b59b1f7fef34ee96ff8719c6fb3f7c82e91b294b4a57744b34df93d395ec0221953ce4fc2a5a42c770c345eab06d739da12022ffd9afd186cc9d924d720d02241da90af17e3c3d7885664ff2f6ebd3eb1f79e4094021e208922d49b0a1e673431c1111bc135c841eb12d01442ddfe57c47163cd5f4f55e2fa288b21be7eeadfc1703e79fa41ebef04825c45b2beac95d4f88fc2c8e56716a334fb1024a9289668d23ca02bf67afbfe63acecd0ebc444723c0a84c704a71007ceff2ab6756a8d9787ab32852e37f91804acd18faba1d63a30f8c3646a564c44fcce9794a893b37ca6e50b1c6e6fd98064447a0771859cb8175691c785eed7297073c53c12d8a938ae4930c24f6990ccc6f0251a6917ca04ac2bf0b9335f59394116801deb614de49306f7a3bcadb5fc00173829a94e13fc06d4aa35062a7d2e6096f00167d7436b0650c52d91973b0c948b33890324ba28c64b830574af025e3bb1ff3686b24181c9ca6f05ca5c015753aea483701cd42fd8e1d7218d793441bce52f8f3e06a821adb5c34d65191e925aaf50b28005d49eb060d109e908e4d075a50be22c30dd095b040f87b573793ef9eae47e1535ca71885fafe5592215fcef98798c575a63497f27f3adea1e48657540f535623c99fa73ef56121b338bba0b171c7477e9a51b4849443e3ef16f9a07235a3dbc42e93ce22a9205843e334163b8330c5d3a9a1d693baa649970328372270e96e547b96056bace339cf2829700063d4c3090ad55a75740949ccafbffa9fa883087e95dbb3415389273111eb570f13d1357f0a25f13629b88fe720307505f3aa50678ee15a4a1b6d9169f17386a7c80af2fcabf13dabe4977545e1efad0d720b22e4fe0d3345d7f157c0e0f4f"}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2819.795806][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2819.935699][T14403] memory: usage 307156kB, limit 307200kB, failcnt 41797 [ 2819.953949][T14403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2819.976536][T14403] Memory cgroup stats for /syz2: [ 2819.976760][T14403] anon 126976 [ 2819.976760][T14403] file 221184 [ 2819.976760][T14403] kernel 314179584 [ 2819.976760][T14403] kernel_stack 65536 [ 2819.976760][T14403] pagetables 73728 [ 2819.976760][T14403] percpu 5435744 [ 2819.976760][T14403] sock 0 [ 2819.976760][T14403] vmalloc 16384 [ 2819.976760][T14403] shmem 221184 [ 2819.976760][T14403] zswap 0 [ 2819.976760][T14403] zswapped 0 [ 2819.976760][T14403] file_mapped 221184 [ 2819.976760][T14403] file_dirty 0 [ 2819.976760][T14403] file_writeback 0 [ 2819.976760][T14403] swapcached 0 [ 2819.976760][T14403] anon_thp 0 [ 2819.976760][T14403] file_thp 0 [ 2819.976760][T14403] shmem_thp 0 [ 2819.976760][T14403] inactive_anon 143360 [ 2819.976760][T14403] active_anon 204800 [ 2819.976760][T14403] inactive_file 0 [ 2819.976760][T14403] active_file 0 [ 2819.976760][T14403] unevictable 0 [ 2819.976760][T14403] slab_reclaimable 14832 [ 2819.976760][T14403] slab_unreclaimable 308539232 [ 2819.976760][T14403] slab 308554064 [ 2820.205709][T14403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14403,uid=0 [ 2820.244266][T14403] Memory cgroup out of memory: Killed process 14403 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:20:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3500}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:37 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) r1 = eventfd2(0x1, 0x801) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000fc0)={{r2}, "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"}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:20:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcc020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x968e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2820.489266][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:20:37 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x4d00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2820.680559][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2820.717280][T14445] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2820.754387][T14445] CPU: 1 PID: 14445 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2820.764620][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2820.774796][T14445] Call Trace: [ 2820.778107][T14445] [ 2820.778408][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2820.781044][T14445] dump_stack_lvl+0xcd/0x134 [ 2820.781085][T14445] dump_header+0x10b/0x7f9 [ 2820.781119][T14445] oom_kill_process.cold+0x10/0x15 [ 2820.804574][T14445] out_of_memory+0x358/0x14a0 [ 2820.809312][T14445] ? find_held_lock+0x2d/0x110 [ 2820.814125][T14445] ? oom_killer_disable+0x270/0x270 [ 2820.819367][T14445] ? find_held_lock+0x2d/0x110 [ 2820.824178][T14445] mem_cgroup_out_of_memory+0x206/0x270 [ 2820.829766][T14445] ? mem_cgroup_margin+0x130/0x130 [ 2820.834916][T14445] ? lock_downgrade+0x6e0/0x6e0 [ 2820.839903][T14445] try_charge_memcg+0xf67/0x13f0 [ 2820.844618][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2820.844857][T14445] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2820.860160][T14445] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2820.866007][T14445] ? lock_downgrade+0x6e0/0x6e0 [ 2820.870908][T14445] ? lock_downgrade+0x6e0/0x6e0 [ 2820.875810][T14445] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2820.881414][T14445] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2820.888966][T14445] copy_process+0x607/0x7090 [ 2820.893606][T14445] ? find_held_lock+0x2d/0x110 [ 2820.898429][T14445] ? __cleanup_sighand+0xb0/0xb0 [ 2820.903470][T14445] kernel_clone+0xe7/0xab0 [ 2820.907927][T14445] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2820.913953][T14445] ? create_io_thread+0xe0/0xe0 [ 2820.918847][T14445] ? find_held_lock+0x2d/0x110 [ 2820.923647][T14445] ? __ct_user_exit+0xff/0x150 [ 2820.928461][T14445] __do_sys_clone+0xba/0x100 [ 2820.933096][T14445] ? kernel_clone+0xab0/0xab0 [ 2820.937820][T14445] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2820.943749][T14445] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2820.949700][T14445] do_syscall_64+0x35/0xb0 [ 2820.954169][T14445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2820.960207][T14445] RIP: 0033:0x7f5161e8a6a1 [ 2820.964656][T14445] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2820.984312][T14445] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2820.992771][T14445] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2821.000785][T14445] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2821.008793][T14445] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2821.016807][T14445] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2821.024842][T14445] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2821.032877][T14445] 11:20:37 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x4d00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2821.126466][T14445] memory: usage 307200kB, limit 307200kB, failcnt 41821 [ 2821.142305][T14445] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2821.154195][T14445] Memory cgroup stats for /syz2: [ 2821.154409][T14445] anon 110592 [ 2821.154409][T14445] file 221184 [ 2821.154409][T14445] kernel 314241024 [ 2821.154409][T14445] kernel_stack 65536 [ 2821.154409][T14445] pagetables 73728 [ 2821.154409][T14445] percpu 5435744 [ 2821.154409][T14445] sock 0 [ 2821.154409][T14445] vmalloc 16384 [ 2821.154409][T14445] shmem 221184 [ 2821.154409][T14445] zswap 0 [ 2821.154409][T14445] zswapped 0 [ 2821.154409][T14445] file_mapped 221184 [ 2821.154409][T14445] file_dirty 0 [ 2821.154409][T14445] file_writeback 0 [ 2821.154409][T14445] swapcached 0 [ 2821.154409][T14445] anon_thp 0 [ 2821.154409][T14445] file_thp 0 [ 2821.154409][T14445] shmem_thp 0 [ 2821.154409][T14445] inactive_anon 122880 [ 2821.154409][T14445] active_anon 204800 [ 2821.154409][T14445] inactive_file 0 [ 2821.154409][T14445] active_file 0 [ 2821.154409][T14445] unevictable 0 [ 2821.154409][T14445] slab_reclaimable 28376 [ 2821.154409][T14445] slab_unreclaimable 308561352 [ 2821.154409][T14445] slab 308589728 [ 2821.465421][T14445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14445,uid=0 [ 2821.546562][T14445] Memory cgroup out of memory: Killed process 14445 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2821.678747][T14431] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2821.689104][T14431] CPU: 0 PID: 14431 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2821.699301][T14431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2821.709402][T14431] Call Trace: [ 2821.712712][T14431] [ 2821.715653][T14431] dump_stack_lvl+0xcd/0x134 [ 2821.720274][T14431] dump_header+0x10b/0x7f9 [ 2821.724703][T14431] oom_kill_process.cold+0x10/0x15 [ 2821.729835][T14431] out_of_memory+0x358/0x14a0 [ 2821.734541][T14431] ? find_held_lock+0x2d/0x110 [ 2821.739339][T14431] ? oom_killer_disable+0x270/0x270 [ 2821.744548][T14431] ? find_held_lock+0x2d/0x110 [ 2821.749342][T14431] mem_cgroup_out_of_memory+0x206/0x270 [ 2821.754938][T14431] ? mem_cgroup_margin+0x130/0x130 [ 2821.760095][T14431] ? lock_downgrade+0x6e0/0x6e0 [ 2821.765100][T14431] try_charge_memcg+0xf67/0x13f0 [ 2821.770100][T14431] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2821.776130][T14431] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2821.781896][T14431] ? lock_downgrade+0x6e0/0x6e0 [ 2821.786788][T14431] ? lock_downgrade+0x6e0/0x6e0 [ 2821.791695][T14431] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2821.797288][T14431] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2821.803522][T14431] copy_process+0x607/0x7090 [ 2821.808195][T14431] ? find_held_lock+0x2d/0x110 [ 2821.813015][T14431] ? __cleanup_sighand+0xb0/0xb0 [ 2821.818029][T14431] kernel_clone+0xe7/0xab0 [ 2821.822493][T14431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2821.828518][T14431] ? create_io_thread+0xe0/0xe0 [ 2821.833414][T14431] ? find_held_lock+0x2d/0x110 [ 2821.838199][T14431] ? __ct_user_exit+0xff/0x150 [ 2821.842966][T14431] __do_sys_clone+0xba/0x100 [ 2821.847575][T14431] ? kernel_clone+0xab0/0xab0 [ 2821.852309][T14431] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2821.858250][T14431] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2821.864198][T14431] do_syscall_64+0x35/0xb0 [ 2821.868662][T14431] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2821.874603][T14431] RIP: 0033:0x7f074148a6a1 [ 2821.879050][T14431] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2821.898864][T14431] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2821.907319][T14431] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2821.915335][T14431] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2821.923343][T14431] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2821.931352][T14431] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2821.939520][T14431] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2821.947627][T14431] [ 2822.074149][T14431] memory: usage 307200kB, limit 307200kB, failcnt 41043 [ 2822.135927][T14431] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2822.215631][T14431] Memory cgroup stats for /syz3: [ 2822.215857][T14431] anon 159744 [ 2822.215857][T14431] file 143360 [ 2822.215857][T14431] kernel 314269696 [ 2822.215857][T14431] kernel_stack 65536 [ 2822.215857][T14431] pagetables 86016 [ 2822.215857][T14431] percpu 5436928 [ 2822.215857][T14431] sock 0 [ 2822.215857][T14431] vmalloc 0 [ 2822.215857][T14431] shmem 143360 [ 2822.215857][T14431] zswap 0 [ 2822.215857][T14431] zswapped 0 [ 2822.215857][T14431] file_mapped 143360 [ 2822.215857][T14431] file_dirty 0 [ 2822.215857][T14431] file_writeback 0 [ 2822.215857][T14431] swapcached 0 [ 2822.215857][T14431] anon_thp 0 [ 2822.215857][T14431] file_thp 0 [ 2822.215857][T14431] shmem_thp 0 [ 2822.215857][T14431] inactive_anon 176128 [ 2822.215857][T14431] active_anon 126976 [ 2822.215857][T14431] inactive_file 0 [ 2822.215857][T14431] active_file 0 [ 2822.215857][T14431] unevictable 0 [ 2822.215857][T14431] slab_reclaimable 17144 [ 2822.215857][T14431] slab_unreclaimable 308622304 [ 2822.215857][T14431] slab 308639448 [ 2822.445651][T14431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14431,uid=0 [ 2822.495100][T14431] Memory cgroup out of memory: Killed process 14431 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:20:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3600}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x958e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x958e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2822.672341][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2822.828215][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2822.878055][T14458] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2822.910625][T14458] CPU: 1 PID: 14458 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2822.920860][T14458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2822.930946][T14458] Call Trace: [ 2822.934251][T14458] [ 2822.937204][T14458] dump_stack_lvl+0xcd/0x134 [ 2822.941840][T14458] dump_header+0x10b/0x7f9 [ 2822.946301][T14458] oom_kill_process.cold+0x10/0x15 [ 2822.951459][T14458] out_of_memory+0x358/0x14a0 [ 2822.956184][T14458] ? find_held_lock+0x2d/0x110 [ 2822.960962][T14458] ? oom_killer_disable+0x270/0x270 [ 2822.966184][T14458] ? find_held_lock+0x2d/0x110 [ 2822.970987][T14458] mem_cgroup_out_of_memory+0x206/0x270 [ 2822.976577][T14458] ? mem_cgroup_margin+0x130/0x130 [ 2822.981742][T14458] ? lock_downgrade+0x6e0/0x6e0 [ 2822.986623][T14458] try_charge_memcg+0xf67/0x13f0 [ 2822.991579][T14458] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2822.997587][T14458] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2823.003320][T14458] ? lock_downgrade+0x6e0/0x6e0 [ 2823.008185][T14458] ? lock_downgrade+0x6e0/0x6e0 [ 2823.013044][T14458] ? rcu_read_unlock+0x9/0x60 [ 2823.017744][T14458] obj_cgroup_charge+0x2ab/0x5e0 [ 2823.022700][T14458] ? copy_process+0x4ce/0x7090 [ 2823.027474][T14458] kmem_cache_alloc_node+0x92/0x3f0 [ 2823.032680][T14458] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2823.037896][T14458] copy_process+0x4ce/0x7090 [ 2823.042506][T14458] ? __lock_acquire+0xbc3/0x56d0 [ 2823.047481][T14458] ? __cleanup_sighand+0xb0/0xb0 [ 2823.052445][T14458] kernel_clone+0xe7/0xab0 [ 2823.056884][T14458] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2823.062879][T14458] ? create_io_thread+0xe0/0xe0 [ 2823.068794][T14458] ? find_held_lock+0x2d/0x110 [ 2823.073572][T14458] ? __ct_user_exit+0xff/0x150 [ 2823.078362][T14458] __do_sys_clone+0xba/0x100 [ 2823.082968][T14458] ? kernel_clone+0xab0/0xab0 [ 2823.087665][T14458] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2823.093570][T14458] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2823.099480][T14458] do_syscall_64+0x35/0xb0 [ 2823.103927][T14458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2823.109859][T14458] RIP: 0033:0x7f5161e8a6a1 [ 2823.114298][T14458] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2823.133911][T14458] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2823.142352][T14458] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2823.150345][T14458] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2823.158323][T14458] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2823.166300][T14458] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2823.174277][T14458] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2823.182271][T14458] [ 2823.297953][T14458] memory: usage 307200kB, limit 307200kB, failcnt 41874 [ 2823.325942][T14458] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2823.341955][T14458] Memory cgroup stats for /syz2: [ 2823.342133][T14458] anon 159744 [ 2823.342133][T14458] file 221184 [ 2823.342133][T14458] kernel 314191872 [ 2823.342133][T14458] kernel_stack 65536 [ 2823.342133][T14458] pagetables 81920 [ 2823.342133][T14458] percpu 5435744 [ 2823.342133][T14458] sock 0 [ 2823.342133][T14458] vmalloc 16384 [ 2823.342133][T14458] shmem 221184 [ 2823.342133][T14458] zswap 0 [ 2823.342133][T14458] zswapped 0 [ 2823.342133][T14458] file_mapped 221184 [ 2823.342133][T14458] file_dirty 0 [ 2823.342133][T14458] file_writeback 0 [ 2823.342133][T14458] swapcached 0 [ 2823.342133][T14458] anon_thp 0 [ 2823.342133][T14458] file_thp 0 [ 2823.342133][T14458] shmem_thp 0 [ 2823.342133][T14458] inactive_anon 176128 [ 2823.342133][T14458] active_anon 204800 [ 2823.342133][T14458] inactive_file 0 [ 2823.342133][T14458] active_file 0 [ 2823.342133][T14458] unevictable 0 [ 2823.342133][T14458] slab_reclaimable 16760 [ 2823.342133][T14458] slab_unreclaimable 308541192 [ 2823.342133][T14458] slab 308557952 11:20:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x60, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2823.345232][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2823.356737][T14458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14458,uid=0 [ 2823.773715][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2823.775805][T14458] Memory cgroup out of memory: Killed process 14458 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3700}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2823.981364][T14468] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2824.007133][T14468] CPU: 1 PID: 14468 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2824.017363][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2824.027449][T14468] Call Trace: [ 2824.030751][T14468] [ 2824.033707][T14468] dump_stack_lvl+0xcd/0x134 [ 2824.038334][T14468] dump_header+0x10b/0x7f9 [ 2824.042790][T14468] oom_kill_process.cold+0x10/0x15 [ 2824.047959][T14468] out_of_memory+0x358/0x14a0 [ 2824.052853][T14468] ? find_held_lock+0x2d/0x110 [ 2824.057830][T14468] ? oom_killer_disable+0x270/0x270 [ 2824.063069][T14468] ? find_held_lock+0x2d/0x110 [ 2824.067872][T14468] mem_cgroup_out_of_memory+0x206/0x270 [ 2824.073457][T14468] ? mem_cgroup_margin+0x130/0x130 [ 2824.078599][T14468] ? lock_downgrade+0x6e0/0x6e0 [ 2824.083610][T14468] try_charge_memcg+0xf67/0x13f0 [ 2824.088576][T14468] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2824.094569][T14468] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2824.100298][T14468] ? lock_downgrade+0x6e0/0x6e0 [ 2824.105161][T14468] ? lock_downgrade+0x6e0/0x6e0 [ 2824.110019][T14468] ? rcu_read_unlock+0x9/0x60 [ 2824.114723][T14468] obj_cgroup_charge+0x2ab/0x5e0 [ 2824.119677][T14468] ? copy_process+0x4ce/0x7090 [ 2824.124453][T14468] kmem_cache_alloc_node+0x92/0x3f0 [ 2824.129677][T14468] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2824.134897][T14468] copy_process+0x4ce/0x7090 [ 2824.139502][T14468] ? __lock_acquire+0xbc3/0x56d0 [ 2824.144473][T14468] ? __cleanup_sighand+0xb0/0xb0 [ 2824.149454][T14468] kernel_clone+0xe7/0xab0 [ 2824.153896][T14468] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2824.159890][T14468] ? create_io_thread+0xe0/0xe0 [ 2824.164760][T14468] ? find_held_lock+0x2d/0x110 [ 2824.169539][T14468] ? __ct_user_exit+0xff/0x150 [ 2824.174320][T14468] __do_sys_clone+0xba/0x100 [ 2824.178920][T14468] ? kernel_clone+0xab0/0xab0 [ 2824.183616][T14468] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2824.189524][T14468] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2824.195436][T14468] do_syscall_64+0x35/0xb0 [ 2824.199860][T14468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2824.205791][T14468] RIP: 0033:0x7f074148a6a1 [ 2824.210211][T14468] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2824.229824][T14468] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2824.238243][T14468] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2824.246226][T14468] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2824.254205][T14468] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2824.262182][T14468] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2824.270157][T14468] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2824.278153][T14468] [ 2824.394454][T14468] memory: usage 307196kB, limit 307200kB, failcnt 41119 [ 2824.418387][T14468] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2824.425610][T14468] Memory cgroup stats for /syz3: [ 2824.425834][T14468] anon 159744 [ 2824.425834][T14468] file 143360 [ 2824.425834][T14468] kernel 314265600 [ 2824.425834][T14468] kernel_stack 65536 11:20:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2824.425834][T14468] pagetables 86016 [ 2824.425834][T14468] percpu 5436928 [ 2824.425834][T14468] sock 0 [ 2824.425834][T14468] vmalloc 0 [ 2824.425834][T14468] shmem 143360 [ 2824.425834][T14468] zswap 0 [ 2824.425834][T14468] zswapped 0 [ 2824.425834][T14468] file_mapped 143360 [ 2824.425834][T14468] file_dirty 0 [ 2824.425834][T14468] file_writeback 0 [ 2824.425834][T14468] swapcached 0 [ 2824.425834][T14468] anon_thp 0 [ 2824.425834][T14468] file_thp 0 [ 2824.425834][T14468] shmem_thp 0 [ 2824.425834][T14468] inactive_anon 176128 [ 2824.425834][T14468] active_anon 126976 [ 2824.425834][T14468] inactive_file 0 [ 2824.425834][T14468] active_file 0 [ 2824.425834][T14468] unevictable 0 [ 2824.425834][T14468] slab_reclaimable 17144 [ 2824.425834][T14468] slab_unreclaimable 308626144 [ 2824.425834][T14468] slab 308643288 11:20:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x948e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x958e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2824.716430][T14468] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14468,uid=0 [ 2824.732651][T14468] Memory cgroup out of memory: Killed process 14468 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2824.846087][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x68, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2824.942949][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2824.959342][T14482] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2824.959380][T14482] CPU: 1 PID: 14482 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2824.959407][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2824.959422][T14482] Call Trace: [ 2824.959429][T14482] [ 2824.959440][T14482] dump_stack_lvl+0xcd/0x134 [ 2824.959475][T14482] dump_header+0x10b/0x7f9 [ 2824.959509][T14482] oom_kill_process.cold+0x10/0x15 [ 2824.959542][T14482] out_of_memory+0x358/0x14a0 [ 2824.959577][T14482] ? find_held_lock+0x2d/0x110 [ 2824.959604][T14482] ? oom_killer_disable+0x270/0x270 [ 2824.959640][T14482] ? find_held_lock+0x2d/0x110 [ 2824.959669][T14482] mem_cgroup_out_of_memory+0x206/0x270 [ 2824.959697][T14482] ? mem_cgroup_margin+0x130/0x130 [ 2824.959720][T14482] ? lock_downgrade+0x6e0/0x6e0 [ 2824.959768][T14482] try_charge_memcg+0xf67/0x13f0 [ 2824.959803][T14482] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2824.959832][T14482] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2824.959859][T14482] ? lock_downgrade+0x6e0/0x6e0 [ 2824.959888][T14482] ? lock_downgrade+0x6e0/0x6e0 [ 2824.959914][T14482] ? rcu_read_unlock+0x9/0x60 [ 2824.959958][T14482] obj_cgroup_charge+0x2ab/0x5e0 [ 2824.959989][T14482] ? copy_process+0x4ce/0x7090 [ 2824.960016][T14482] kmem_cache_alloc_node+0x92/0x3f0 [ 2824.960042][T14482] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2824.960080][T14482] copy_process+0x4ce/0x7090 [ 2824.960113][T14482] ? find_held_lock+0x2d/0x110 [ 2824.960151][T14482] ? __cleanup_sighand+0xb0/0xb0 [ 2824.960200][T14482] kernel_clone+0xe7/0xab0 [ 2824.960226][T14482] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2824.960255][T14482] ? create_io_thread+0xe0/0xe0 [ 2824.960291][T14482] ? find_held_lock+0x2d/0x110 [ 2824.960320][T14482] ? __ct_user_exit+0xff/0x150 [ 2824.960355][T14482] __do_sys_clone+0xba/0x100 [ 2824.960382][T14482] ? kernel_clone+0xab0/0xab0 [ 2824.960424][T14482] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2824.960454][T14482] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2824.960493][T14482] do_syscall_64+0x35/0xb0 [ 2824.960518][T14482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2824.960550][T14482] RIP: 0033:0x7f5161e8a6a1 [ 2824.960571][T14482] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2824.960595][T14482] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2824.960621][T14482] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2824.960639][T14482] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2824.960656][T14482] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2824.960673][T14482] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2824.960691][T14482] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2824.960734][T14482] [ 2824.963125][T14482] memory: usage 307200kB, limit 307200kB, failcnt 41927 [ 2824.963148][T14482] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2824.963165][T14482] Memory cgroup stats for /syz2: [ 2824.963349][T14482] anon 159744 [ 2824.963349][T14482] file 221184 [ 2824.963349][T14482] kernel 314191872 [ 2824.963349][T14482] kernel_stack 65536 [ 2824.963349][T14482] pagetables 81920 [ 2824.963349][T14482] percpu 5435744 [ 2824.963349][T14482] sock 0 [ 2824.963349][T14482] vmalloc 16384 [ 2824.963349][T14482] shmem 221184 [ 2824.963349][T14482] zswap 0 [ 2824.963349][T14482] zswapped 0 [ 2824.963349][T14482] file_mapped 221184 [ 2824.963349][T14482] file_dirty 0 [ 2824.963349][T14482] file_writeback 0 [ 2824.963349][T14482] swapcached 0 [ 2824.963349][T14482] anon_thp 0 [ 2824.963349][T14482] file_thp 0 [ 2824.963349][T14482] shmem_thp 0 [ 2824.963349][T14482] inactive_anon 176128 [ 2824.963349][T14482] active_anon 204800 [ 2824.963349][T14482] inactive_file 0 [ 2824.963349][T14482] active_file 0 [ 2824.963349][T14482] unevictable 0 [ 2824.963349][T14482] slab_reclaimable 16760 [ 2824.963349][T14482] slab_unreclaimable 308541192 [ 2824.963349][T14482] slab 308557952 [ 2824.963407][T14482] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14482,uid=0 [ 2824.963527][T14482] Memory cgroup out of memory: Killed process 14482 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xf}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2825.571361][T14501] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2825.590061][T14501] CPU: 0 PID: 14501 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2825.600288][T14501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2825.610632][T14501] Call Trace: [ 2825.613934][T14501] [ 2825.614436][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2825.616870][T14501] dump_stack_lvl+0xcd/0x134 [ 2825.616909][T14501] dump_header+0x10b/0x7f9 [ 2825.635270][T14501] oom_kill_process.cold+0x10/0x15 [ 2825.640440][T14501] out_of_memory+0x358/0x14a0 [ 2825.645175][T14501] ? find_held_lock+0x2d/0x110 [ 2825.650027][T14501] ? oom_killer_disable+0x270/0x270 [ 2825.655281][T14501] ? find_held_lock+0x2d/0x110 [ 2825.660093][T14501] mem_cgroup_out_of_memory+0x206/0x270 [ 2825.665696][T14501] ? mem_cgroup_margin+0x130/0x130 [ 2825.670847][T14501] ? lock_downgrade+0x6e0/0x6e0 [ 2825.675762][T14501] try_charge_memcg+0xf67/0x13f0 [ 2825.680753][T14501] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2825.686785][T14501] ? lock_downgrade+0x6e0/0x6e0 [ 2825.691694][T14501] charge_memcg+0x31/0x320 [ 2825.696171][T14501] __mem_cgroup_charge+0x27/0x90 [ 2825.701238][T14501] ? _compound_head+0x5d/0x150 [ 2825.706047][T14501] wp_page_copy+0x27c/0x1b60 [ 2825.710694][T14501] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2825.716190][T14501] ? lock_downgrade+0x6e0/0x6e0 [ 2825.721087][T14501] ? vm_normal_page+0x146/0x2a0 [ 2825.725990][T14501] do_wp_page+0x1d1/0x1910 [ 2825.730451][T14501] __handle_mm_fault+0x1813/0x39b0 [ 2825.735609][T14501] ? vm_iomap_memory+0x190/0x190 [ 2825.740879][T14501] handle_mm_fault+0x1c8/0x780 [ 2825.745695][T14501] do_user_addr_fault+0x475/0x1210 [ 2825.750859][T14501] exc_page_fault+0x94/0x170 [ 2825.755578][T14501] asm_exc_page_fault+0x22/0x30 [ 2825.760464][T14501] RIP: 0033:0x7f07414374b0 [ 2825.765004][T14501] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2825.784825][T14501] RSP: 002b:00007f0741acfab0 EFLAGS: 00010246 [ 2825.790934][T14501] RAX: 000000002feed7de RBX: 00007f074159c018 RCX: 0000001b2fa20000 [ 2825.798974][T14501] RDX: 0000000000000000 RSI: 0000001b2fa20018 RDI: 000000000a19aef0 [ 2825.806977][T14501] RBP: 000000002feed7de R08: 00000000000017de R09: 000000002feed7e2 [ 2825.814983][T14501] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00007f0741590000 11:20:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2825.823082][T14501] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83bb623b [ 2825.831126][T14501] ? security_socket_create+0x3b/0xc0 [ 2825.836584][T14501] [ 2825.839798][T14494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2825.966770][T14501] memory: usage 307188kB, limit 307200kB, failcnt 41148 11:20:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x948e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x958e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2826.085158][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2826.219828][T14501] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2826.226976][T14501] Memory cgroup stats for /syz3: [ 2826.227191][T14501] anon 139264 [ 2826.227191][T14501] file 143360 [ 2826.227191][T14501] kernel 314253312 [ 2826.227191][T14501] kernel_stack 65536 [ 2826.227191][T14501] pagetables 77824 [ 2826.227191][T14501] percpu 5436928 [ 2826.227191][T14501] sock 0 [ 2826.227191][T14501] vmalloc 0 [ 2826.227191][T14501] shmem 143360 [ 2826.227191][T14501] zswap 0 [ 2826.227191][T14501] zswapped 0 [ 2826.227191][T14501] file_mapped 143360 [ 2826.227191][T14501] file_dirty 0 [ 2826.227191][T14501] file_writeback 0 [ 2826.227191][T14501] swapcached 0 [ 2826.227191][T14501] anon_thp 0 [ 2826.227191][T14501] file_thp 0 [ 2826.227191][T14501] shmem_thp 0 [ 2826.227191][T14501] inactive_anon 155648 [ 2826.227191][T14501] active_anon 126976 [ 2826.227191][T14501] inactive_file 0 [ 2826.227191][T14501] active_file 0 [ 2826.227191][T14501] unevictable 0 [ 2826.227191][T14501] slab_reclaimable 15216 [ 2826.227191][T14501] slab_unreclaimable 308624184 [ 2826.227191][T14501] slab 308639400 11:20:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x6c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2826.424388][T14511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2826.450723][T14501] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14501,uid=0 [ 2826.467713][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2826.491544][T14501] Memory cgroup out of memory: Killed process 14501 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 11:20:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x10}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2826.702081][T14506] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2826.721077][T14506] CPU: 0 PID: 14506 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2826.731309][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2826.741378][T14506] Call Trace: [ 2826.744664][T14506] [ 2826.747604][T14506] dump_stack_lvl+0xcd/0x134 [ 2826.752304][T14506] dump_header+0x10b/0x7f9 [ 2826.756746][T14506] oom_kill_process.cold+0x10/0x15 [ 2826.761876][T14506] out_of_memory+0x358/0x14a0 [ 2826.766588][T14506] ? find_held_lock+0x2d/0x110 [ 2826.771367][T14506] ? oom_killer_disable+0x270/0x270 [ 2826.776582][T14506] ? find_held_lock+0x2d/0x110 [ 2826.781360][T14506] mem_cgroup_out_of_memory+0x206/0x270 [ 2826.786936][T14506] ? mem_cgroup_margin+0x130/0x130 [ 2826.792092][T14506] ? lock_downgrade+0x6e0/0x6e0 [ 2826.796991][T14506] try_charge_memcg+0xf67/0x13f0 [ 2826.801959][T14506] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2826.808068][T14506] ? lock_downgrade+0x6e0/0x6e0 [ 2826.812967][T14506] charge_memcg+0x31/0x320 [ 2826.817416][T14506] __mem_cgroup_charge+0x27/0x90 [ 2826.822396][T14506] ? _compound_head+0x5d/0x150 [ 2826.827206][T14506] __handle_mm_fault+0x17df/0x39b0 [ 2826.832362][T14506] ? vm_iomap_memory+0x190/0x190 [ 2826.837363][T14506] handle_mm_fault+0x1c8/0x780 [ 2826.842148][T14506] do_user_addr_fault+0x475/0x1210 [ 2826.847640][T14506] exc_page_fault+0x94/0x170 [ 2826.852253][T14506] asm_exc_page_fault+0x22/0x30 [ 2826.857117][T14506] RIP: 0033:0x7f5161e3c011 [ 2826.861556][T14506] Code: 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 44 24 20 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 89 4c 24 28 fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 [ 2826.881286][T14506] RSP: 002b:00007f5162fc9000 EFLAGS: 00010206 [ 2826.887363][T14506] RAX: 0000000000000001 RBX: 00007f5162fc90f0 RCX: 0000000000000000 [ 2826.895439][T14506] RDX: 0000000000000020 RSI: 00007f5162fc9140 RDI: 0000000000000004 [ 2826.903422][T14506] RBP: 0000000000000000 R08: 00007f5162fc9054 R09: 000000000000000c [ 2826.911421][T14506] R10: 0000000000000000 R11: 00000000200003cf R12: 00007f5162fc90a8 [ 2826.919403][T14506] R13: 00007f5162fc9140 R14: 0000000000000004 R15: 0000000000000000 [ 2826.927416][T14506] [ 2827.028043][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x948e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2827.186504][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:20:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2827.231143][T14506] memory: usage 307176kB, limit 307200kB, failcnt 42004 [ 2827.238359][T14506] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2827.293713][T14506] Memory cgroup stats for /syz2: [ 2827.293976][T14506] anon 151552 [ 2827.293976][T14506] file 221184 [ 2827.293976][T14506] kernel 314175488 [ 2827.293976][T14506] kernel_stack 65536 [ 2827.293976][T14506] pagetables 81920 [ 2827.293976][T14506] percpu 5435744 [ 2827.293976][T14506] sock 0 [ 2827.293976][T14506] vmalloc 16384 [ 2827.293976][T14506] shmem 221184 [ 2827.293976][T14506] zswap 0 [ 2827.293976][T14506] zswapped 0 [ 2827.293976][T14506] file_mapped 221184 [ 2827.293976][T14506] file_dirty 0 11:20:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x74, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2827.293976][T14506] file_writeback 0 [ 2827.293976][T14506] swapcached 0 [ 2827.293976][T14506] anon_thp 0 [ 2827.293976][T14506] file_thp 0 [ 2827.293976][T14506] shmem_thp 0 [ 2827.293976][T14506] inactive_anon 167936 [ 2827.293976][T14506] active_anon 204800 [ 2827.293976][T14506] inactive_file 0 [ 2827.293976][T14506] active_file 0 [ 2827.293976][T14506] unevictable 0 [ 2827.293976][T14506] slab_reclaimable 16760 [ 2827.293976][T14506] slab_unreclaimable 308529168 [ 2827.293976][T14506] slab 308545928 [ 2827.337929][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:20:44 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x4c00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2827.524804][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2827.606566][T14506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14504,uid=0 [ 2827.653432][T14506] Memory cgroup out of memory: Killed process 14504 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3900}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:44 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x4c00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:20:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x94020000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2828.134496][T14522] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2828.161182][T14532] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2828.179333][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2828.242760][T14522] CPU: 0 PID: 14522 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2828.252994][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2828.263073][T14522] Call Trace: [ 2828.266362][T14522] [ 2828.269306][T14522] dump_stack_lvl+0xcd/0x134 [ 2828.273928][T14522] dump_header+0x10b/0x7f9 [ 2828.278390][T14522] oom_kill_process.cold+0x10/0x15 [ 2828.283556][T14522] out_of_memory+0x358/0x14a0 [ 2828.288276][T14522] ? find_held_lock+0x2d/0x110 [ 2828.293071][T14522] ? oom_killer_disable+0x270/0x270 [ 2828.298311][T14522] ? find_held_lock+0x2d/0x110 [ 2828.303124][T14522] mem_cgroup_out_of_memory+0x206/0x270 [ 2828.308710][T14522] ? mem_cgroup_margin+0x130/0x130 [ 2828.313856][T14522] ? lock_downgrade+0x6e0/0x6e0 [ 2828.318764][T14522] try_charge_memcg+0xf67/0x13f0 [ 2828.323736][T14522] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2828.329742][T14522] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2828.335489][T14522] ? lock_downgrade+0x6e0/0x6e0 [ 2828.340379][T14522] ? lock_downgrade+0x6e0/0x6e0 [ 2828.345261][T14522] ? rcu_read_unlock+0x9/0x60 [ 2828.349988][T14522] obj_cgroup_charge+0x2ab/0x5e0 [ 2828.354971][T14522] ? copy_process+0x4ce/0x7090 [ 2828.359770][T14522] kmem_cache_alloc_node+0x92/0x3f0 [ 2828.365008][T14522] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2828.370253][T14522] copy_process+0x4ce/0x7090 [ 2828.375005][T14522] ? __lock_acquire+0xbc3/0x56d0 [ 2828.380001][T14522] ? __cleanup_sighand+0xb0/0xb0 [ 2828.385080][T14522] kernel_clone+0xe7/0xab0 [ 2828.389540][T14522] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2828.395561][T14522] ? create_io_thread+0xe0/0xe0 [ 2828.400462][T14522] ? find_held_lock+0x2d/0x110 [ 2828.405269][T14522] ? __ct_user_exit+0xff/0x150 [ 2828.410079][T14522] __do_sys_clone+0xba/0x100 [ 2828.414709][T14522] ? kernel_clone+0xab0/0xab0 [ 2828.419433][T14522] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2828.425359][T14522] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2828.431292][T14522] do_syscall_64+0x35/0xb0 [ 2828.435741][T14522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2828.441673][T14522] RIP: 0033:0x7f074148a6a1 [ 2828.446113][T14522] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2828.465766][T14522] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2828.474215][T14522] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2828.482326][T14522] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2828.490326][T14522] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2828.498342][T14522] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2828.506357][T14522] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2828.514391][T14522] 11:20:45 executing program 5: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x4b00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:20:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b1d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x7a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc9220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2828.684289][T14522] memory: usage 307196kB, limit 307200kB, failcnt 41209 [ 2828.736497][T14522] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2828.745206][T14522] Memory cgroup stats for /syz3: [ 2828.745449][T14522] anon 159744 [ 2828.745449][T14522] file 143360 [ 2828.745449][T14522] kernel 314265600 [ 2828.745449][T14522] kernel_stack 65536 [ 2828.745449][T14522] pagetables 86016 [ 2828.745449][T14522] percpu 5436928 [ 2828.745449][T14522] sock 0 [ 2828.745449][T14522] vmalloc 0 [ 2828.745449][T14522] shmem 143360 [ 2828.745449][T14522] zswap 0 [ 2828.745449][T14522] zswapped 0 [ 2828.745449][T14522] file_mapped 143360 [ 2828.745449][T14522] file_dirty 0 [ 2828.745449][T14522] file_writeback 0 [ 2828.745449][T14522] swapcached 0 [ 2828.745449][T14522] anon_thp 0 [ 2828.745449][T14522] file_thp 0 [ 2828.745449][T14522] shmem_thp 0 [ 2828.745449][T14522] inactive_anon 176128 [ 2828.745449][T14522] active_anon 126976 [ 2828.745449][T14522] inactive_file 0 [ 2828.745449][T14522] active_file 0 [ 2828.745449][T14522] unevictable 0 [ 2828.745449][T14522] slab_reclaimable 17144 [ 2828.745449][T14522] slab_unreclaimable 308626144 [ 2828.745449][T14522] slab 308643288 [ 2829.189947][T14522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14522,uid=0 [ 2829.244483][T14522] Memory cgroup out of memory: Killed process 14522 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:20:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x11}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x918e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc8220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x8c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8f8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2829.535962][T14539] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2829.547890][T14539] CPU: 0 PID: 14539 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2829.558137][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2829.568226][T14539] Call Trace: [ 2829.571526][T14539] [ 2829.574470][T14539] dump_stack_lvl+0xcd/0x134 [ 2829.579107][T14539] dump_header+0x10b/0x7f9 [ 2829.583590][T14539] oom_kill_process.cold+0x10/0x15 [ 2829.588742][T14539] out_of_memory+0x358/0x14a0 [ 2829.593457][T14539] ? find_held_lock+0x2d/0x110 [ 2829.598251][T14539] ? oom_killer_disable+0x270/0x270 [ 2829.603494][T14539] ? find_held_lock+0x2d/0x110 [ 2829.608306][T14539] mem_cgroup_out_of_memory+0x206/0x270 [ 2829.613895][T14539] ? mem_cgroup_margin+0x130/0x130 [ 2829.619088][T14539] ? lock_downgrade+0x6e0/0x6e0 [ 2829.624034][T14539] try_charge_memcg+0xf67/0x13f0 [ 2829.629013][T14539] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2829.635026][T14539] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2829.640776][T14539] ? lock_downgrade+0x6e0/0x6e0 [ 2829.645660][T14539] ? lock_downgrade+0x6e0/0x6e0 [ 2829.650614][T14539] ? rcu_read_unlock+0x9/0x60 [ 2829.655351][T14539] obj_cgroup_charge+0x2ab/0x5e0 [ 2829.660334][T14539] ? copy_process+0x4ce/0x7090 [ 2829.665137][T14539] kmem_cache_alloc_node+0x92/0x3f0 [ 2829.670381][T14539] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2829.675637][T14539] copy_process+0x4ce/0x7090 [ 2829.680290][T14539] ? find_held_lock+0x2d/0x110 [ 2829.685101][T14539] ? __cleanup_sighand+0xb0/0xb0 [ 2829.690090][T14539] kernel_clone+0xe7/0xab0 [ 2829.694545][T14539] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2829.700573][T14539] ? create_io_thread+0xe0/0xe0 [ 2829.705478][T14539] ? find_held_lock+0x2d/0x110 [ 2829.710282][T14539] ? __ct_user_exit+0xff/0x150 [ 2829.715088][T14539] __do_sys_clone+0xba/0x100 [ 2829.719719][T14539] ? kernel_clone+0xab0/0xab0 [ 2829.724461][T14539] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2829.730438][T14539] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2829.736478][T14539] do_syscall_64+0x35/0xb0 [ 2829.740956][T14539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2829.746918][T14539] RIP: 0033:0x7f5161e8a6a1 [ 2829.751372][T14539] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2829.771017][T14539] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2829.779473][T14539] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2829.787475][T14539] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2829.795470][T14539] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2829.803471][T14539] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2829.811481][T14539] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2829.819512][T14539] [ 2830.270238][T14539] memory: usage 307184kB, limit 307200kB, failcnt 42129 [ 2830.277397][T14539] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2830.289216][T14539] Memory cgroup stats for /syz2: [ 2830.289466][T14539] anon 159744 [ 2830.289466][T14539] file 221184 [ 2830.289466][T14539] kernel 314175488 [ 2830.289466][T14539] kernel_stack 65536 [ 2830.289466][T14539] pagetables 81920 [ 2830.289466][T14539] percpu 5435744 [ 2830.289466][T14539] sock 0 [ 2830.289466][T14539] vmalloc 16384 [ 2830.289466][T14539] shmem 221184 [ 2830.289466][T14539] zswap 0 [ 2830.289466][T14539] zswapped 0 [ 2830.289466][T14539] file_mapped 221184 [ 2830.289466][T14539] file_dirty 0 [ 2830.289466][T14539] file_writeback 0 [ 2830.289466][T14539] swapcached 0 [ 2830.289466][T14539] anon_thp 0 [ 2830.289466][T14539] file_thp 0 [ 2830.289466][T14539] shmem_thp 0 [ 2830.289466][T14539] inactive_anon 176128 [ 2830.289466][T14539] active_anon 204800 [ 2830.289466][T14539] inactive_file 0 [ 2830.289466][T14539] active_file 0 [ 2830.289466][T14539] unevictable 0 [ 2830.289466][T14539] slab_reclaimable 16760 [ 2830.289466][T14539] slab_unreclaimable 308530096 [ 2830.289466][T14539] slab 308546856 [ 2830.485719][T14539] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14539,uid=0 [ 2830.522434][T14539] Memory cgroup out of memory: Killed process 14539 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3a00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8e8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xc2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:47 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x4001000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:20:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x8c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc7220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2830.819024][T14567] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2830.899284][T14567] CPU: 1 PID: 14567 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2830.909511][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2830.916186][T14579] __nla_validate_parse: 10 callbacks suppressed [ 2830.916209][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2830.919578][T14567] Call Trace: [ 2830.919591][T14567] [ 2830.919601][T14567] dump_stack_lvl+0xcd/0x134 [ 2830.919636][T14567] dump_header+0x10b/0x7f9 [ 2830.919667][T14567] oom_kill_process.cold+0x10/0x15 [ 2830.919698][T14567] out_of_memory+0x358/0x14a0 [ 2830.919732][T14567] ? find_held_lock+0x2d/0x110 [ 2830.919757][T14567] ? oom_killer_disable+0x270/0x270 [ 2830.919790][T14567] ? find_held_lock+0x2d/0x110 [ 2830.919818][T14567] mem_cgroup_out_of_memory+0x206/0x270 [ 2830.919845][T14567] ? mem_cgroup_margin+0x130/0x130 [ 2830.919868][T14567] ? lock_downgrade+0x6e0/0x6e0 [ 2830.919910][T14567] try_charge_memcg+0xf67/0x13f0 [ 2830.919944][T14567] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2830.919972][T14567] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2830.919998][T14567] ? lock_downgrade+0x6e0/0x6e0 [ 2830.920027][T14567] ? lock_downgrade+0x6e0/0x6e0 [ 2830.920051][T14567] ? rcu_read_unlock+0x9/0x60 [ 2830.920094][T14567] obj_cgroup_charge+0x2ab/0x5e0 [ 2830.920126][T14567] ? copy_process+0x4ce/0x7090 [ 2830.920153][T14567] kmem_cache_alloc_node+0x92/0x3f0 [ 2830.920180][T14567] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2830.920217][T14567] copy_process+0x4ce/0x7090 [ 2830.920249][T14567] ? find_held_lock+0x2d/0x110 [ 2830.920287][T14567] ? __cleanup_sighand+0xb0/0xb0 [ 2830.920336][T14567] kernel_clone+0xe7/0xab0 [ 2830.920363][T14567] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2830.920392][T14567] ? create_io_thread+0xe0/0xe0 [ 2830.920426][T14567] ? find_held_lock+0x2d/0x110 [ 2830.920456][T14567] ? __ct_user_exit+0xff/0x150 [ 2830.920489][T14567] __do_sys_clone+0xba/0x100 [ 2830.920518][T14567] ? kernel_clone+0xab0/0xab0 [ 2830.920566][T14567] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2830.920596][T14567] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2830.920633][T14567] do_syscall_64+0x35/0xb0 [ 2830.920659][T14567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2830.920690][T14567] RIP: 0033:0x7f074148a6a1 [ 2830.920714][T14567] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2830.920738][T14567] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2830.920764][T14567] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2830.920781][T14567] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2830.920798][T14567] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2830.920814][T14567] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2830.920832][T14567] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2830.920868][T14567] [ 2831.066539][T14567] memory: usage 307196kB, limit 307200kB, failcnt 41301 [ 2831.390135][T14567] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2831.397372][T14567] Memory cgroup stats for /syz3: [ 2831.397582][T14567] anon 159744 [ 2831.397582][T14567] file 143360 [ 2831.397582][T14567] kernel 314253312 [ 2831.397582][T14567] kernel_stack 65536 [ 2831.397582][T14567] pagetables 86016 [ 2831.397582][T14567] percpu 5436928 [ 2831.397582][T14567] sock 0 [ 2831.397582][T14567] vmalloc 0 [ 2831.397582][T14567] shmem 143360 [ 2831.397582][T14567] zswap 0 [ 2831.397582][T14567] zswapped 0 [ 2831.397582][T14567] file_mapped 143360 [ 2831.397582][T14567] file_dirty 0 [ 2831.397582][T14567] file_writeback 0 [ 2831.397582][T14567] swapcached 0 [ 2831.397582][T14567] anon_thp 0 [ 2831.397582][T14567] file_thp 0 [ 2831.397582][T14567] shmem_thp 0 [ 2831.397582][T14567] inactive_anon 176128 [ 2831.397582][T14567] active_anon 126976 [ 2831.397582][T14567] inactive_file 0 [ 2831.397582][T14567] active_file 0 [ 2831.397582][T14567] unevictable 0 [ 2831.397582][T14567] slab_reclaimable 17144 [ 2831.397582][T14567] slab_unreclaimable 308616848 [ 2831.397582][T14567] slab 308633992 [ 2831.492139][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2831.515698][T14567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14567,uid=0 [ 2831.566331][T14567] Memory cgroup out of memory: Killed process 14567 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2831.633281][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:20:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x8c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2831.768262][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2831.775916][T14583] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2831.834900][T14583] CPU: 0 PID: 14583 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2831.845146][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2831.855242][T14583] Call Trace: [ 2831.858545][T14583] [ 2831.861506][T14583] dump_stack_lvl+0xcd/0x134 [ 2831.866143][T14583] dump_header+0x10b/0x7f9 [ 2831.870604][T14583] oom_kill_process.cold+0x10/0x15 [ 2831.875756][T14583] out_of_memory+0x358/0x14a0 [ 2831.880460][T14583] ? find_held_lock+0x2d/0x110 [ 2831.885249][T14583] ? oom_killer_disable+0x270/0x270 [ 2831.890463][T14583] ? find_held_lock+0x2d/0x110 [ 2831.895240][T14583] mem_cgroup_out_of_memory+0x206/0x270 [ 2831.900795][T14583] ? mem_cgroup_margin+0x130/0x130 [ 2831.905926][T14583] ? lock_downgrade+0x6e0/0x6e0 [ 2831.910815][T14583] try_charge_memcg+0xf67/0x13f0 [ 2831.915780][T14583] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2831.921799][T14583] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2831.927529][T14583] ? lock_downgrade+0x6e0/0x6e0 [ 2831.932393][T14583] ? lock_downgrade+0x6e0/0x6e0 [ 2831.937251][T14583] ? rcu_read_unlock+0x9/0x60 [ 2831.941953][T14583] obj_cgroup_charge+0x2ab/0x5e0 [ 2831.947277][T14583] ? copy_process+0x4ce/0x7090 [ 2831.952049][T14583] kmem_cache_alloc_node+0x92/0x3f0 [ 2831.957277][T14583] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2831.962496][T14583] copy_process+0x4ce/0x7090 [ 2831.967117][T14583] ? find_held_lock+0x2d/0x110 [ 2831.971900][T14583] ? __cleanup_sighand+0xb0/0xb0 [ 2831.976868][T14583] kernel_clone+0xe7/0xab0 [ 2831.981312][T14583] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2831.987306][T14583] ? create_io_thread+0xe0/0xe0 [ 2831.992187][T14583] ? find_held_lock+0x2d/0x110 [ 2831.996971][T14583] ? __ct_user_exit+0xff/0x150 [ 2832.001755][T14583] __do_sys_clone+0xba/0x100 [ 2832.006368][T14583] ? kernel_clone+0xab0/0xab0 [ 2832.011067][T14583] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2832.016983][T14583] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2832.022895][T14583] do_syscall_64+0x35/0xb0 [ 2832.027320][T14583] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2832.033230][T14583] RIP: 0033:0x7f5161e8a6a1 [ 2832.037659][T14583] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2832.057282][T14583] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2832.065709][T14583] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2832.073685][T14583] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2832.081684][T14583] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2832.089670][T14583] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2832.097663][T14583] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2832.105695][T14583] 11:20:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x12}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8e8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xc4, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2832.385537][T14583] memory: usage 307200kB, limit 307200kB, failcnt 42186 [ 2832.443175][T14583] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2832.495159][T14583] Memory cgroup stats for /syz2: [ 2832.495335][T14583] anon 159744 [ 2832.495335][T14583] file 221184 [ 2832.495335][T14583] kernel 314191872 [ 2832.495335][T14583] kernel_stack 65536 [ 2832.495335][T14583] pagetables 81920 [ 2832.495335][T14583] percpu 5435744 [ 2832.495335][T14583] sock 0 [ 2832.495335][T14583] vmalloc 16384 [ 2832.495335][T14583] shmem 221184 [ 2832.495335][T14583] zswap 0 [ 2832.495335][T14583] zswapped 0 [ 2832.495335][T14583] file_mapped 221184 [ 2832.495335][T14583] file_dirty 0 [ 2832.495335][T14583] file_writeback 0 [ 2832.495335][T14583] swapcached 0 [ 2832.495335][T14583] anon_thp 0 [ 2832.495335][T14583] file_thp 0 [ 2832.495335][T14583] shmem_thp 0 [ 2832.495335][T14583] inactive_anon 176128 [ 2832.495335][T14583] active_anon 204800 [ 2832.495335][T14583] inactive_file 0 [ 2832.495335][T14583] active_file 0 [ 2832.495335][T14583] unevictable 0 [ 2832.495335][T14583] slab_reclaimable 16760 [ 2832.495335][T14583] slab_unreclaimable 308541192 [ 2832.495335][T14583] slab 308557952 [ 2832.595407][T14583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14583,uid=0 [ 2832.627837][T14583] Memory cgroup out of memory: Killed process 14583 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2832.649059][T14595] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2832.661063][T14595] CPU: 1 PID: 14595 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2832.671280][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2832.681377][T14595] Call Trace: [ 2832.684738][T14595] [ 2832.687689][T14595] dump_stack_lvl+0xcd/0x134 [ 2832.692331][T14595] dump_header+0x10b/0x7f9 [ 2832.696782][T14595] oom_kill_process.cold+0x10/0x15 [ 2832.701922][T14595] out_of_memory+0x358/0x14a0 [ 2832.706637][T14595] ? oom_killer_disable+0x270/0x270 [ 2832.711878][T14595] ? find_held_lock+0x2d/0x110 [ 2832.716674][T14595] mem_cgroup_out_of_memory+0x206/0x270 [ 2832.722243][T14595] ? mem_cgroup_margin+0x130/0x130 [ 2832.727392][T14595] ? lock_downgrade+0x6e0/0x6e0 [ 2832.732303][T14595] try_charge_memcg+0xf67/0x13f0 [ 2832.737376][T14595] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2832.743395][T14595] ? lock_downgrade+0x6e0/0x6e0 [ 2832.748283][T14595] charge_memcg+0x31/0x320 [ 2832.752732][T14595] __mem_cgroup_charge+0x27/0x90 [ 2832.757711][T14595] ? _compound_head+0x5d/0x150 [ 2832.762527][T14595] wp_page_copy+0x27c/0x1b60 [ 2832.767166][T14595] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2832.772672][T14595] ? lock_downgrade+0x6e0/0x6e0 [ 2832.777582][T14595] ? vm_normal_page+0x146/0x2a0 [ 2832.782482][T14595] do_wp_page+0x1d1/0x1910 [ 2832.786949][T14595] __handle_mm_fault+0x1813/0x39b0 [ 2832.792142][T14595] ? vm_iomap_memory+0x190/0x190 [ 2832.797145][T14595] handle_mm_fault+0x1c8/0x780 [ 2832.801960][T14595] do_user_addr_fault+0x475/0x1210 [ 2832.807135][T14595] exc_page_fault+0x94/0x170 [ 2832.811792][T14595] asm_exc_page_fault+0x22/0x30 [ 2832.816715][T14595] RIP: 0033:0x7f07414374b0 [ 2832.821180][T14595] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2832.840829][T14595] RSP: 002b:00007f0741acfab0 EFLAGS: 00010246 [ 2832.846930][T14595] RAX: 000000002feed7de RBX: 00007f074159c018 RCX: 0000001b2fa20000 [ 2832.854950][T14595] RDX: 0000000000000000 RSI: 0000001b2fa20018 RDI: 000000000a19aef0 [ 2832.862956][T14595] RBP: 000000002feed7de R08: 00000000000017de R09: 000000002feed7e2 [ 2832.870966][T14595] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00007f0741590000 [ 2832.878999][T14595] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83bb623b [ 2832.887005][T14595] ? security_socket_create+0x3b/0xc0 [ 2832.892452][T14595] [ 2832.926177][T14595] memory: usage 307176kB, limit 307200kB, failcnt 41367 [ 2832.954889][T14595] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2832.996156][T14595] Memory cgroup stats for /syz3: [ 2832.996397][T14595] anon 139264 [ 2832.996397][T14595] file 143360 [ 2832.996397][T14595] kernel 314253312 [ 2832.996397][T14595] kernel_stack 65536 [ 2832.996397][T14595] pagetables 77824 [ 2832.996397][T14595] percpu 5436928 [ 2832.996397][T14595] sock 0 [ 2832.996397][T14595] vmalloc 0 [ 2832.996397][T14595] shmem 143360 [ 2832.996397][T14595] zswap 0 [ 2832.996397][T14595] zswapped 0 [ 2832.996397][T14595] file_mapped 143360 [ 2832.996397][T14595] file_dirty 0 [ 2832.996397][T14595] file_writeback 0 [ 2832.996397][T14595] swapcached 0 [ 2832.996397][T14595] anon_thp 0 [ 2832.996397][T14595] file_thp 0 [ 2832.996397][T14595] shmem_thp 0 [ 2832.996397][T14595] inactive_anon 155648 [ 2832.996397][T14595] active_anon 126976 [ 2832.996397][T14595] inactive_file 0 [ 2832.996397][T14595] active_file 0 [ 2832.996397][T14595] unevictable 0 [ 2832.996397][T14595] slab_reclaimable 15216 [ 2832.996397][T14595] slab_unreclaimable 308631744 [ 2832.996397][T14595] slab 308646960 11:20:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x581d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2833.206971][T14595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14595,uid=0 [ 2833.237293][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2833.251221][T14595] Memory cgroup out of memory: Killed process 14595 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2833.291213][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2833.325364][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2833.330710][T14608] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 11:20:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3b00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2833.508043][T14608] CPU: 1 PID: 14608 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2833.518282][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2833.528363][T14608] Call Trace: [ 2833.531662][T14608] [ 2833.534630][T14608] dump_stack_lvl+0xcd/0x134 [ 2833.539271][T14608] dump_header+0x10b/0x7f9 [ 2833.543727][T14608] oom_kill_process.cold+0x10/0x15 [ 2833.548887][T14608] out_of_memory+0x358/0x14a0 [ 2833.553601][T14608] ? find_held_lock+0x2d/0x110 [ 2833.558394][T14608] ? oom_killer_disable+0x270/0x270 [ 2833.563644][T14608] ? find_held_lock+0x2d/0x110 [ 2833.568450][T14608] mem_cgroup_out_of_memory+0x206/0x270 [ 2833.574042][T14608] ? mem_cgroup_margin+0x130/0x130 [ 2833.579196][T14608] ? lock_downgrade+0x6e0/0x6e0 [ 2833.584108][T14608] try_charge_memcg+0xf67/0x13f0 [ 2833.589099][T14608] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2833.595138][T14608] ? lock_downgrade+0x6e0/0x6e0 [ 2833.600048][T14608] charge_memcg+0x31/0x320 [ 2833.604585][T14608] __mem_cgroup_charge+0x27/0x90 [ 2833.609566][T14608] ? _compound_head+0x5d/0x150 [ 2833.614393][T14608] wp_page_copy+0x27c/0x1b60 [ 2833.619039][T14608] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2833.624532][T14608] ? lock_downgrade+0x6e0/0x6e0 [ 2833.629418][T14608] ? vm_normal_page+0x146/0x2a0 [ 2833.634417][T14608] do_wp_page+0x1d1/0x1910 [ 2833.638851][T14608] __handle_mm_fault+0x1813/0x39b0 [ 2833.643983][T14608] ? vm_iomap_memory+0x190/0x190 [ 2833.648969][T14608] handle_mm_fault+0x1c8/0x780 [ 2833.653748][T14608] do_user_addr_fault+0x475/0x1210 [ 2833.658882][T14608] exc_page_fault+0x94/0x170 [ 2833.663490][T14608] asm_exc_page_fault+0x22/0x30 [ 2833.668356][T14608] RIP: 0033:0x7f5161e374b0 [ 2833.672793][T14608] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2833.692415][T14608] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2833.698521][T14608] RAX: 00000000098f1ddc RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2833.706537][T14608] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000d570f0d [ 2833.714525][T14608] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2833.722516][T14608] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2833.730500][T14608] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2833.738481][T14608] ? __x64_sys_socket+0xd/0xb0 [ 2833.743283][T14608] 11:20:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x14}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8e8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xf0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x8c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2834.021228][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2834.029271][T14608] memory: usage 307176kB, limit 307200kB, failcnt 42232 [ 2834.038992][T14608] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2834.135965][T14608] Memory cgroup stats for /syz2: [ 2834.136201][T14608] anon 135168 [ 2834.136201][T14608] file 221184 [ 2834.136201][T14608] kernel 314191872 [ 2834.136201][T14608] kernel_stack 65536 [ 2834.136201][T14608] pagetables 73728 [ 2834.136201][T14608] percpu 5435744 [ 2834.136201][T14608] sock 0 [ 2834.136201][T14608] vmalloc 16384 [ 2834.136201][T14608] shmem 221184 [ 2834.136201][T14608] zswap 0 [ 2834.136201][T14608] zswapped 0 [ 2834.136201][T14608] file_mapped 221184 [ 2834.136201][T14608] file_dirty 0 [ 2834.136201][T14608] file_writeback 0 [ 2834.136201][T14608] swapcached 0 [ 2834.136201][T14608] anon_thp 0 [ 2834.136201][T14608] file_thp 0 [ 2834.136201][T14608] shmem_thp 0 [ 2834.136201][T14608] inactive_anon 151552 [ 2834.136201][T14608] active_anon 204800 [ 2834.136201][T14608] inactive_file 0 [ 2834.136201][T14608] active_file 0 [ 2834.136201][T14608] unevictable 0 [ 2834.136201][T14608] slab_reclaimable 17920 [ 2834.136201][T14608] slab_unreclaimable 308548416 [ 2834.136201][T14608] slab 308566336 [ 2834.317891][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:20:51 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x3e00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2834.353227][T14608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14608,uid=0 [ 2834.370772][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2834.390746][T14608] Memory cgroup out of memory: Killed process 14608 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2834.441779][T14612] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2834.465134][T14612] CPU: 1 PID: 14612 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2834.475461][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2834.485642][T14612] Call Trace: [ 2834.488950][T14612] [ 2834.491910][T14612] dump_stack_lvl+0xcd/0x134 [ 2834.496568][T14612] dump_header+0x10b/0x7f9 [ 2834.501035][T14612] oom_kill_process.cold+0x10/0x15 [ 2834.506201][T14612] out_of_memory+0x358/0x14a0 [ 2834.510981][T14612] ? oom_killer_disable+0x270/0x270 [ 2834.516319][T14612] ? find_held_lock+0x2d/0x110 [ 2834.521129][T14612] mem_cgroup_out_of_memory+0x206/0x270 [ 2834.526734][T14612] ? mem_cgroup_margin+0x130/0x130 [ 2834.532068][T14612] ? lock_downgrade+0x6e0/0x6e0 [ 2834.536988][T14612] try_charge_memcg+0xf67/0x13f0 [ 2834.542007][T14612] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2834.548044][T14612] ? lock_downgrade+0x6e0/0x6e0 [ 2834.552958][T14612] charge_memcg+0x31/0x320 [ 2834.557422][T14612] __mem_cgroup_charge+0x27/0x90 [ 2834.562400][T14612] ? _compound_head+0x5d/0x150 [ 2834.567210][T14612] wp_page_copy+0x27c/0x1b60 [ 2834.571850][T14612] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2834.577344][T14612] ? lock_downgrade+0x6e0/0x6e0 [ 2834.582234][T14612] ? vm_normal_page+0x146/0x2a0 [ 2834.587145][T14612] do_wp_page+0x1d1/0x1910 11:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3c00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2834.591609][T14612] __handle_mm_fault+0x1813/0x39b0 [ 2834.596775][T14612] ? vm_iomap_memory+0x190/0x190 [ 2834.601782][T14612] handle_mm_fault+0x1c8/0x780 [ 2834.606609][T14612] do_user_addr_fault+0x475/0x1210 [ 2834.611783][T14612] exc_page_fault+0x94/0x170 [ 2834.616398][T14612] asm_exc_page_fault+0x22/0x30 [ 2834.621274][T14612] RIP: 0033:0x7f07414374b0 [ 2834.625697][T14612] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2834.645314][T14612] RSP: 002b:00007f0741acfab0 EFLAGS: 00010246 [ 2834.651388][T14612] RAX: 000000002feed7de RBX: 00007f074159c018 RCX: 0000001b2fa20000 [ 2834.659381][T14612] RDX: 0000000000000000 RSI: 0000001b2fa20018 RDI: 000000000a19aef0 [ 2834.667374][T14612] RBP: 000000002feed7de R08: 00000000000017de R09: 000000002feed7e2 [ 2834.675364][T14612] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00007f0741590000 [ 2834.683340][T14612] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83bb623b 11:20:51 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x3d00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2834.691331][T14612] ? security_socket_create+0x3b/0xc0 [ 2834.696751][T14612] [ 2834.847731][T14612] memory: usage 307164kB, limit 307200kB, failcnt 41422 [ 2834.894972][T14612] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2834.903270][T14612] Memory cgroup stats for /syz3: [ 2834.903688][T14612] anon 139264 [ 2834.903688][T14612] file 143360 [ 2834.903688][T14612] kernel 314253312 [ 2834.903688][T14612] kernel_stack 65536 [ 2834.903688][T14612] pagetables 77824 [ 2834.903688][T14612] percpu 5436928 [ 2834.903688][T14612] sock 0 [ 2834.903688][T14612] vmalloc 0 [ 2834.903688][T14612] shmem 143360 [ 2834.903688][T14612] zswap 0 [ 2834.903688][T14612] zswapped 0 [ 2834.903688][T14612] file_mapped 143360 [ 2834.903688][T14612] file_dirty 0 [ 2834.903688][T14612] file_writeback 0 [ 2834.903688][T14612] swapcached 0 [ 2834.903688][T14612] anon_thp 0 [ 2834.903688][T14612] file_thp 0 [ 2834.903688][T14612] shmem_thp 0 [ 2834.903688][T14612] inactive_anon 155648 [ 2834.903688][T14612] active_anon 126976 [ 2834.903688][T14612] inactive_file 0 [ 2834.903688][T14612] active_file 0 [ 2834.903688][T14612] unevictable 0 [ 2834.903688][T14612] slab_reclaimable 15216 [ 2834.903688][T14612] slab_unreclaimable 308624184 [ 2834.903688][T14612] slab 308639400 11:20:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8c000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2835.094302][T14612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14612,uid=0 [ 2835.146073][T14612] Memory cgroup out of memory: Killed process 14612 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2835.227104][T14631] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 11:20:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x21}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2835.305340][T14631] CPU: 0 PID: 14631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2835.315574][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2835.325665][T14631] Call Trace: [ 2835.328974][T14631] [ 2835.331928][T14631] dump_stack_lvl+0xcd/0x134 [ 2835.336565][T14631] dump_header+0x10b/0x7f9 [ 2835.341019][T14631] oom_kill_process.cold+0x10/0x15 [ 2835.346522][T14631] out_of_memory+0x358/0x14a0 [ 2835.351252][T14631] ? oom_killer_disable+0x270/0x270 [ 2835.356498][T14631] ? find_held_lock+0x2d/0x110 [ 2835.361317][T14631] mem_cgroup_out_of_memory+0x206/0x270 [ 2835.366912][T14631] ? mem_cgroup_margin+0x130/0x130 [ 2835.372067][T14631] ? lock_downgrade+0x6e0/0x6e0 [ 2835.376978][T14631] try_charge_memcg+0xf67/0x13f0 [ 2835.381974][T14631] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2835.388018][T14631] ? lock_downgrade+0x6e0/0x6e0 [ 2835.392964][T14631] charge_memcg+0x31/0x320 [ 2835.397419][T14631] __mem_cgroup_charge+0x27/0x90 [ 2835.402382][T14631] ? _compound_head+0x5d/0x150 [ 2835.407173][T14631] wp_page_copy+0x27c/0x1b60 [ 2835.411785][T14631] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2835.417267][T14631] ? lock_downgrade+0x6e0/0x6e0 [ 2835.422132][T14631] ? vm_normal_page+0x146/0x2a0 [ 2835.427046][T14631] do_wp_page+0x1d1/0x1910 [ 2835.431482][T14631] __handle_mm_fault+0x1813/0x39b0 [ 2835.436610][T14631] ? vm_iomap_memory+0x190/0x190 [ 2835.441588][T14631] handle_mm_fault+0x1c8/0x780 [ 2835.446367][T14631] do_user_addr_fault+0x475/0x1210 [ 2835.451501][T14631] exc_page_fault+0x94/0x170 [ 2835.456106][T14631] asm_exc_page_fault+0x22/0x30 [ 2835.460981][T14631] RIP: 0033:0x7f5161e374b0 [ 2835.465420][T14631] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2835.485041][T14631] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2835.491133][T14631] RAX: 00000000098f1ddc RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2835.499114][T14631] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000d570f0d [ 2835.507102][T14631] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2835.515081][T14631] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2835.523583][T14631] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2835.531564][T14631] ? __x64_sys_socket+0xd/0xb0 [ 2835.536371][T14631] 11:20:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x10a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2835.786823][T14631] memory: usage 307164kB, limit 307200kB, failcnt 42278 11:20:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xf0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2835.936413][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.955680][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 2835.981800][T14631] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2836.005890][T14631] Memory cgroup stats for /syz2: [ 2836.006126][T14631] anon 135168 [ 2836.006126][T14631] file 221184 [ 2836.006126][T14631] kernel 314179584 [ 2836.006126][T14631] kernel_stack 65536 [ 2836.006126][T14631] pagetables 73728 [ 2836.006126][T14631] percpu 5435744 [ 2836.006126][T14631] sock 0 [ 2836.006126][T14631] vmalloc 16384 [ 2836.006126][T14631] shmem 221184 [ 2836.006126][T14631] zswap 0 [ 2836.006126][T14631] zswapped 0 [ 2836.006126][T14631] file_mapped 221184 [ 2836.006126][T14631] file_dirty 0 [ 2836.006126][T14631] file_writeback 0 [ 2836.006126][T14631] swapcached 0 [ 2836.006126][T14631] anon_thp 0 [ 2836.006126][T14631] file_thp 0 [ 2836.006126][T14631] shmem_thp 0 [ 2836.006126][T14631] inactive_anon 151552 [ 2836.006126][T14631] active_anon 204800 [ 2836.006126][T14631] inactive_file 0 [ 2836.006126][T14631] active_file 0 [ 2836.006126][T14631] unevictable 0 [ 2836.006126][T14631] slab_reclaimable 14832 [ 2836.006126][T14631] slab_unreclaimable 308539232 [ 2836.006126][T14631] slab 308554064 [ 2836.195540][T14631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14631,uid=0 [ 2836.320832][T14631] Memory cgroup out of memory: Killed process 14631 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2836.364776][T14635] __nla_validate_parse: 1 callbacks suppressed [ 2836.364798][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2836.395633][T14640] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2836.395789][T14640] CPU: 1 PID: 14640 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2836.395819][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2836.395835][T14640] Call Trace: [ 2836.395846][T14640] [ 2836.395857][T14640] dump_stack_lvl+0xcd/0x134 [ 2836.395896][T14640] dump_header+0x10b/0x7f9 [ 2836.395932][T14640] oom_kill_process.cold+0x10/0x15 [ 2836.395969][T14640] out_of_memory+0x358/0x14a0 [ 2836.396009][T14640] ? oom_killer_disable+0x270/0x270 [ 2836.396044][T14640] ? find_held_lock+0x2d/0x110 [ 2836.396082][T14640] mem_cgroup_out_of_memory+0x206/0x270 [ 2836.396112][T14640] ? mem_cgroup_margin+0x130/0x130 [ 2836.396137][T14640] ? lock_downgrade+0x6e0/0x6e0 [ 2836.396182][T14640] try_charge_memcg+0xef5/0x13f0 [ 2836.396219][T14640] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2836.396250][T14640] ? get_mem_cgroup_from_objcg+0xa1/0x260 11:20:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3d00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2836.396280][T14640] ? lock_downgrade+0x6e0/0x6e0 [ 2836.396310][T14640] ? lock_downgrade+0x6e0/0x6e0 [ 2836.396352][T14640] obj_cgroup_charge+0x2ab/0x5e0 [ 2836.396388][T14640] kmem_cache_alloc_lru+0x13e/0x720 [ 2836.396416][T14640] ? sock_alloc_inode+0x23/0x1d0 [ 2836.396452][T14640] sock_alloc_inode+0x23/0x1d0 [ 2836.396478][T14640] ? sock_free_inode+0x20/0x20 [ 2836.396503][T14640] alloc_inode+0x61/0x230 [ 2836.396537][T14640] new_inode_pseudo+0x13/0x80 [ 2836.396563][T14640] sock_alloc+0x3c/0x260 [ 2836.396590][T14640] __sock_create+0xb9/0x790 [ 2836.396619][T14640] ? lock_downgrade+0x6e0/0x6e0 [ 2836.396651][T14640] __sys_socket+0x12f/0x240 [ 2836.396679][T14640] ? __sys_socket_file+0x1f0/0x1f0 [ 2836.396708][T14640] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2836.396747][T14640] __x64_sys_socket+0x6f/0xb0 [ 2836.396777][T14640] do_syscall_64+0x35/0xb0 [ 2836.396805][T14640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2836.396839][T14640] RIP: 0033:0x7f0741489279 [ 2836.396861][T14640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2836.396887][T14640] RSP: 002b:00007f0742611168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2836.396915][T14640] RAX: ffffffffffffffda RBX: 00007f074159c050 RCX: 00007f0741489279 [ 2836.396934][T14640] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2836.396952][T14640] RBP: 00007f07414e3189 R08: 0000000000000000 R09: 0000000000000000 [ 2836.396969][T14640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2836.396985][T14640] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2836.397024][T14640] [ 2836.402219][T14640] memory: usage 307200kB, limit 307200kB, failcnt 41542 [ 2836.402243][T14640] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2836.402260][T14640] Memory cgroup stats for /syz3: [ 2836.404282][T14640] anon 122880 [ 2836.404282][T14640] file 143360 [ 2836.404282][T14640] kernel 314306560 [ 2836.404282][T14640] kernel_stack 98304 [ 2836.404282][T14640] pagetables 86016 [ 2836.404282][T14640] percpu 5436928 [ 2836.404282][T14640] sock 0 [ 2836.404282][T14640] vmalloc 0 [ 2836.404282][T14640] shmem 143360 [ 2836.404282][T14640] zswap 0 [ 2836.404282][T14640] zswapped 0 [ 2836.404282][T14640] file_mapped 143360 [ 2836.404282][T14640] file_dirty 0 [ 2836.404282][T14640] file_writeback 0 [ 2836.404282][T14640] swapcached 0 [ 2836.404282][T14640] anon_thp 0 [ 2836.404282][T14640] file_thp 0 [ 2836.404282][T14640] shmem_thp 0 [ 2836.404282][T14640] inactive_anon 139264 [ 2836.404282][T14640] active_anon 126976 [ 2836.404282][T14640] inactive_file 0 [ 2836.404282][T14640] active_file 0 11:20:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x25}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8c000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2836.404282][T14640] unevictable 0 [ 2836.404282][T14640] slab_reclaimable 15216 [ 2836.404282][T14640] slab_unreclaimable 308633384 [ 2836.404282][T14640] slab 308648600 [ 2836.404642][T14640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14637,uid=0 [ 2836.406336][T14640] Memory cgroup out of memory: Killed process 14637 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2836.470929][T14648] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2836.978454][T14648] CPU: 1 PID: 14648 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2836.988674][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2836.998770][T14648] Call Trace: [ 2837.002082][T14648] [ 2837.005039][T14648] dump_stack_lvl+0xcd/0x134 [ 2837.009704][T14648] dump_header+0x10b/0x7f9 [ 2837.014182][T14648] oom_kill_process.cold+0x10/0x15 [ 2837.019320][T14648] out_of_memory+0x358/0x14a0 [ 2837.024046][T14648] ? find_held_lock+0x2d/0x110 [ 2837.028859][T14648] ? oom_killer_disable+0x270/0x270 [ 2837.034140][T14648] ? find_held_lock+0x2d/0x110 [ 2837.038954][T14648] mem_cgroup_out_of_memory+0x206/0x270 [ 2837.044536][T14648] ? mem_cgroup_margin+0x130/0x130 [ 2837.049673][T14648] ? lock_downgrade+0x6e0/0x6e0 [ 2837.054581][T14648] try_charge_memcg+0xf67/0x13f0 [ 2837.056653][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2837.059546][T14648] ? mem_cgroup_handle_over_high+0x510/0x510 11:20:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8c000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2837.059590][T14648] ? lock_downgrade+0x6e0/0x6e0 [ 2837.079758][T14648] charge_memcg+0x31/0x320 [ 2837.084221][T14648] __mem_cgroup_charge+0x27/0x90 [ 2837.089218][T14648] ? _compound_head+0x5d/0x150 [ 2837.094035][T14648] wp_page_copy+0x27c/0x1b60 [ 2837.098677][T14648] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2837.104172][T14648] ? lock_downgrade+0x6e0/0x6e0 [ 2837.109057][T14648] ? vm_normal_page+0x146/0x2a0 [ 2837.113962][T14648] do_wp_page+0x1d1/0x1910 [ 2837.118416][T14648] __handle_mm_fault+0x1813/0x39b0 [ 2837.123573][T14648] ? vm_iomap_memory+0x190/0x190 [ 2837.128576][T14648] handle_mm_fault+0x1c8/0x780 [ 2837.133386][T14648] do_user_addr_fault+0x475/0x1210 [ 2837.138571][T14648] exc_page_fault+0x94/0x170 [ 2837.143207][T14648] asm_exc_page_fault+0x22/0x30 [ 2837.148095][T14648] RIP: 0033:0x7f5161e374b0 [ 2837.152536][T14648] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2837.172173][T14648] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2837.178268][T14648] RAX: 00000000217c12a4 RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2837.186262][T14648] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008ec0c65 [ 2837.194266][T14648] RBP: 00000000217c12a4 R08: 00000000000012a4 R09: 00000000217c12a8 [ 2837.202257][T14648] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2837.210247][T14648] R13: 0000000000000001 R14: 0000000000000002 R15: ffffffff81a325fe [ 2837.218241][T14648] ? trace_user_exit.constprop.0+0x2e/0x210 [ 2837.224194][T14648] [ 2837.443575][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:20:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x112, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xf0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2837.626015][T14648] memory: usage 307148kB, limit 307200kB, failcnt 42322 [ 2837.653789][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2837.666997][T14648] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2837.690372][T14648] Memory cgroup stats for /syz2: [ 2837.690605][T14648] anon 118784 [ 2837.690605][T14648] file 221184 [ 2837.690605][T14648] kernel 314179584 [ 2837.690605][T14648] kernel_stack 65536 [ 2837.690605][T14648] pagetables 73728 [ 2837.690605][T14648] percpu 5435744 [ 2837.690605][T14648] sock 0 [ 2837.690605][T14648] vmalloc 16384 [ 2837.690605][T14648] shmem 221184 [ 2837.690605][T14648] zswap 0 [ 2837.690605][T14648] zswapped 0 [ 2837.690605][T14648] file_mapped 221184 [ 2837.690605][T14648] file_dirty 0 [ 2837.690605][T14648] file_writeback 0 [ 2837.690605][T14648] swapcached 0 [ 2837.690605][T14648] anon_thp 0 [ 2837.690605][T14648] file_thp 0 [ 2837.690605][T14648] shmem_thp 0 [ 2837.690605][T14648] inactive_anon 135168 [ 2837.690605][T14648] active_anon 204800 [ 2837.690605][T14648] inactive_file 0 [ 2837.690605][T14648] active_file 0 [ 2837.690605][T14648] unevictable 0 [ 2837.690605][T14648] slab_reclaimable 14832 [ 2837.690605][T14648] slab_unreclaimable 308539232 [ 2837.690605][T14648] slab 308554064 [ 2837.743282][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2838.076986][T14648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14648,uid=0 [ 2838.173858][T14648] Memory cgroup out of memory: Killed process 14648 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:20:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8c000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2838.278098][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:20:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3e00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2838.382011][T14650] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2838.393134][T14650] CPU: 1 PID: 14650 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2838.403329][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2838.413416][T14650] Call Trace: [ 2838.416719][T14650] [ 2838.419689][T14650] dump_stack_lvl+0xcd/0x134 [ 2838.424317][T14650] dump_header+0x10b/0x7f9 [ 2838.428771][T14650] oom_kill_process.cold+0x10/0x15 [ 2838.433937][T14650] out_of_memory+0x358/0x14a0 [ 2838.438672][T14650] ? find_held_lock+0x2d/0x110 [ 2838.443486][T14650] ? oom_killer_disable+0x270/0x270 [ 2838.448744][T14650] ? find_held_lock+0x2d/0x110 [ 2838.453548][T14650] mem_cgroup_out_of_memory+0x206/0x270 [ 2838.459132][T14650] ? mem_cgroup_margin+0x130/0x130 [ 2838.464284][T14650] ? lock_downgrade+0x6e0/0x6e0 [ 2838.469181][T14650] try_charge_memcg+0xf67/0x13f0 [ 2838.474159][T14650] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2838.480186][T14650] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2838.485957][T14650] ? lock_downgrade+0x6e0/0x6e0 [ 2838.490852][T14650] ? lock_downgrade+0x6e0/0x6e0 [ 2838.495747][T14650] ? rcu_read_unlock+0x9/0x60 [ 2838.500490][T14650] obj_cgroup_charge+0x2ab/0x5e0 [ 2838.505488][T14650] ? copy_process+0x4ce/0x7090 [ 2838.510302][T14650] kmem_cache_alloc_node+0x92/0x3f0 [ 2838.515561][T14650] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2838.520823][T14650] copy_process+0x4ce/0x7090 [ 2838.525573][T14650] ? __cleanup_sighand+0xb0/0xb0 [ 2838.530575][T14650] kernel_clone+0xe7/0xab0 [ 2838.535039][T14650] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2838.541072][T14650] ? create_io_thread+0xe0/0xe0 [ 2838.545982][T14650] ? find_held_lock+0x2d/0x110 [ 2838.550799][T14650] ? __ct_user_exit+0xff/0x150 [ 2838.555635][T14650] __do_sys_clone+0xba/0x100 [ 2838.560277][T14650] ? kernel_clone+0xab0/0xab0 [ 2838.565021][T14650] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2838.570969][T14650] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2838.576926][T14650] do_syscall_64+0x35/0xb0 [ 2838.581392][T14650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2838.587378][T14650] RIP: 0033:0x7f074148a6a1 [ 2838.591847][T14650] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2838.611500][T14650] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2838.619957][T14650] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 11:20:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8c000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2838.627961][T14650] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2838.635984][T14650] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2838.643981][T14650] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2838.651963][T14650] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2838.659958][T14650] [ 2838.764204][T14650] memory: usage 307196kB, limit 307200kB, failcnt 41622 [ 2838.784118][T14650] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2838.806069][T14650] Memory cgroup stats for /syz3: [ 2838.806297][T14650] anon 159744 [ 2838.806297][T14650] file 143360 [ 2838.806297][T14650] kernel 314253312 [ 2838.806297][T14650] kernel_stack 65536 [ 2838.806297][T14650] pagetables 86016 [ 2838.806297][T14650] percpu 5436928 [ 2838.806297][T14650] sock 0 [ 2838.806297][T14650] vmalloc 0 [ 2838.806297][T14650] shmem 143360 [ 2838.806297][T14650] zswap 0 [ 2838.806297][T14650] zswapped 0 [ 2838.806297][T14650] file_mapped 143360 [ 2838.806297][T14650] file_dirty 0 [ 2838.806297][T14650] file_writeback 0 [ 2838.806297][T14650] swapcached 0 [ 2838.806297][T14650] anon_thp 0 [ 2838.806297][T14650] file_thp 0 [ 2838.806297][T14650] shmem_thp 0 [ 2838.806297][T14650] inactive_anon 176128 [ 2838.806297][T14650] active_anon 126976 [ 2838.806297][T14650] inactive_file 0 [ 2838.806297][T14650] active_file 0 [ 2838.806297][T14650] unevictable 0 [ 2838.806297][T14650] slab_reclaimable 17144 [ 2838.806297][T14650] slab_unreclaimable 308615048 [ 2838.806297][T14650] slab 308632192 11:20:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x12a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2839.156076][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2839.204247][T14650] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14650,uid=0 [ 2839.253392][T14650] Memory cgroup out of memory: Killed process 14650 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2839.410967][T14670] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2839.421736][T14670] CPU: 0 PID: 14670 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2839.431938][T14670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2839.442013][T14670] Call Trace: [ 2839.445303][T14670] [ 2839.448238][T14670] dump_stack_lvl+0xcd/0x134 [ 2839.452826][T14670] dump_header+0x10b/0x7f9 [ 2839.457313][T14670] oom_kill_process.cold+0x10/0x15 [ 2839.462460][T14670] out_of_memory+0x358/0x14a0 [ 2839.467148][T14670] ? find_held_lock+0x2d/0x110 [ 2839.471925][T14670] ? oom_killer_disable+0x270/0x270 [ 2839.477175][T14670] ? find_held_lock+0x2d/0x110 [ 2839.481992][T14670] mem_cgroup_out_of_memory+0x206/0x270 [ 2839.487588][T14670] ? mem_cgroup_margin+0x130/0x130 [ 2839.492789][T14670] ? lock_downgrade+0x6e0/0x6e0 [ 2839.497706][T14670] try_charge_memcg+0xf67/0x13f0 [ 2839.502701][T14670] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2839.508828][T14670] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2839.514582][T14670] ? lock_downgrade+0x6e0/0x6e0 [ 2839.519471][T14670] ? lock_downgrade+0x6e0/0x6e0 [ 2839.524350][T14670] ? rcu_read_unlock+0x9/0x60 [ 2839.529063][T14670] obj_cgroup_charge+0x2ab/0x5e0 [ 2839.534050][T14670] ? copy_process+0x4ce/0x7090 [ 2839.538854][T14670] kmem_cache_alloc_node+0x92/0x3f0 [ 2839.544097][T14670] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2839.549350][T14670] copy_process+0x4ce/0x7090 [ 2839.554015][T14670] ? find_held_lock+0x2d/0x110 [ 2839.558824][T14670] ? __cleanup_sighand+0xb0/0xb0 [ 2839.563817][T14670] kernel_clone+0xe7/0xab0 [ 2839.568262][T14670] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2839.574259][T14670] ? create_io_thread+0xe0/0xe0 [ 2839.579129][T14670] ? find_held_lock+0x2d/0x110 [ 2839.583931][T14670] ? __ct_user_exit+0xff/0x150 [ 2839.588741][T14670] __do_sys_clone+0xba/0x100 [ 2839.593370][T14670] ? kernel_clone+0xab0/0xab0 [ 2839.598099][T14670] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2839.604036][T14670] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2839.609973][T14670] do_syscall_64+0x35/0xb0 [ 2839.614417][T14670] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2839.620332][T14670] RIP: 0033:0x7f5161e8a6a1 [ 2839.624742][T14670] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2839.644365][T14670] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2839.652817][T14670] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2839.660829][T14670] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2839.669168][T14670] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2839.677162][T14670] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2839.685194][T14670] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2839.693404][T14670] 11:20:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x31}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0xf0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2839.802894][T14670] memory: usage 307200kB, limit 307200kB, failcnt 42378 [ 2839.817587][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2839.957811][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:20:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8c000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2840.166262][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2840.169183][T14670] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2840.183091][T14670] Memory cgroup stats for /syz2: [ 2840.183317][T14670] anon 159744 [ 2840.183317][T14670] file 221184 [ 2840.183317][T14670] kernel 314191872 [ 2840.183317][T14670] kernel_stack 65536 [ 2840.183317][T14670] pagetables 81920 [ 2840.183317][T14670] percpu 5435744 [ 2840.183317][T14670] sock 0 [ 2840.183317][T14670] vmalloc 16384 [ 2840.183317][T14670] shmem 221184 [ 2840.183317][T14670] zswap 0 [ 2840.183317][T14670] zswapped 0 [ 2840.183317][T14670] file_mapped 221184 [ 2840.183317][T14670] file_dirty 0 [ 2840.183317][T14670] file_writeback 0 [ 2840.183317][T14670] swapcached 0 [ 2840.183317][T14670] anon_thp 0 [ 2840.183317][T14670] file_thp 0 [ 2840.183317][T14670] shmem_thp 0 [ 2840.183317][T14670] inactive_anon 176128 [ 2840.183317][T14670] active_anon 204800 [ 2840.183317][T14670] inactive_file 0 [ 2840.183317][T14670] active_file 0 [ 2840.183317][T14670] unevictable 0 11:20:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc6000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2840.183317][T14670] slab_reclaimable 16760 [ 2840.183317][T14670] slab_unreclaimable 308541192 [ 2840.183317][T14670] slab 308557952 11:20:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc6000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2840.424791][T14670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14670,uid=0 11:20:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x14a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2840.486731][T14670] Memory cgroup out of memory: Killed process 14670 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3f00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2840.737458][T14683] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2840.771841][T14683] CPU: 1 PID: 14683 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2840.782076][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2840.792178][T14683] Call Trace: [ 2840.795499][T14683] [ 2840.798541][T14683] dump_stack_lvl+0xcd/0x134 [ 2840.803187][T14683] dump_header+0x10b/0x7f9 [ 2840.807662][T14683] oom_kill_process.cold+0x10/0x15 [ 2840.812835][T14683] out_of_memory+0x358/0x14a0 [ 2840.817590][T14683] ? find_held_lock+0x2d/0x110 [ 2840.822391][T14683] ? oom_killer_disable+0x270/0x270 [ 2840.827654][T14683] ? find_held_lock+0x2d/0x110 [ 2840.832434][T14683] mem_cgroup_out_of_memory+0x206/0x270 [ 2840.837993][T14683] ? mem_cgroup_margin+0x130/0x130 [ 2840.843113][T14683] ? lock_downgrade+0x6e0/0x6e0 [ 2840.848336][T14683] try_charge_memcg+0xf67/0x13f0 [ 2840.853295][T14683] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2840.859300][T14683] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2840.865031][T14683] ? lock_downgrade+0x6e0/0x6e0 [ 2840.869891][T14683] ? lock_downgrade+0x6e0/0x6e0 [ 2840.874749][T14683] ? rcu_read_unlock+0x9/0x60 [ 2840.879467][T14683] obj_cgroup_charge+0x2ab/0x5e0 [ 2840.884454][T14683] ? copy_process+0x4ce/0x7090 [ 2840.889227][T14683] kmem_cache_alloc_node+0x92/0x3f0 [ 2840.894435][T14683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2840.899658][T14683] copy_process+0x4ce/0x7090 [ 2840.904265][T14683] ? find_held_lock+0x2d/0x110 [ 2840.909047][T14683] ? __cleanup_sighand+0xb0/0xb0 [ 2840.914016][T14683] kernel_clone+0xe7/0xab0 [ 2840.918450][T14683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2840.924462][T14683] ? create_io_thread+0xe0/0xe0 [ 2840.929344][T14683] ? find_held_lock+0x2d/0x110 [ 2840.934147][T14683] ? __ct_user_exit+0xff/0x150 [ 2840.938926][T14683] __do_sys_clone+0xba/0x100 [ 2840.943528][T14683] ? kernel_clone+0xab0/0xab0 [ 2840.948241][T14683] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2840.954147][T14683] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2840.960064][T14683] do_syscall_64+0x35/0xb0 [ 2840.964506][T14683] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2840.970419][T14683] RIP: 0033:0x7f074148a6a1 [ 2840.974856][T14683] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2840.994477][T14683] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2841.002918][T14683] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2841.010897][T14683] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2841.018896][T14683] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2841.026878][T14683] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2841.034873][T14683] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2841.042883][T14683] [ 2841.313836][T14683] memory: usage 307196kB, limit 307200kB, failcnt 41742 [ 2841.345058][T14683] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2841.365721][T14683] Memory cgroup stats for /syz3: [ 2841.365943][T14683] anon 159744 [ 2841.365943][T14683] file 143360 [ 2841.365943][T14683] kernel 314265600 [ 2841.365943][T14683] kernel_stack 65536 [ 2841.365943][T14683] pagetables 86016 [ 2841.365943][T14683] percpu 5436928 [ 2841.365943][T14683] sock 0 [ 2841.365943][T14683] vmalloc 0 [ 2841.365943][T14683] shmem 143360 [ 2841.365943][T14683] zswap 0 [ 2841.365943][T14683] zswapped 0 [ 2841.365943][T14683] file_mapped 143360 [ 2841.365943][T14683] file_dirty 0 [ 2841.365943][T14683] file_writeback 0 [ 2841.365943][T14683] swapcached 0 [ 2841.365943][T14683] anon_thp 0 [ 2841.365943][T14683] file_thp 0 [ 2841.365943][T14683] shmem_thp 0 [ 2841.365943][T14683] inactive_anon 172032 [ 2841.365943][T14683] active_anon 126976 [ 2841.365943][T14683] inactive_file 0 [ 2841.365943][T14683] active_file 0 [ 2841.365943][T14683] unevictable 0 [ 2841.365943][T14683] slab_reclaimable 17144 11:20:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8b8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2841.365943][T14683] slab_unreclaimable 308626144 [ 2841.365943][T14683] slab 308643288 [ 2841.528794][T14698] __nla_validate_parse: 3 callbacks suppressed [ 2841.528815][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:20:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8b8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2841.652071][T14683] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14683,uid=0 11:20:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8a8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x156, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2841.737206][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2841.744520][T14683] Memory cgroup out of memory: Killed process 14683 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:20:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x32}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2841.835267][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2841.941435][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2841.947285][T14701] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2841.994984][T14701] CPU: 1 PID: 14701 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2842.005207][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2842.015329][T14701] Call Trace: [ 2842.018633][T14701] [ 2842.022717][T14701] dump_stack_lvl+0xcd/0x134 [ 2842.027351][T14701] dump_header+0x10b/0x7f9 [ 2842.031811][T14701] oom_kill_process.cold+0x10/0x15 [ 2842.036968][T14701] out_of_memory+0x358/0x14a0 [ 2842.041692][T14701] ? find_held_lock+0x2d/0x110 [ 2842.046501][T14701] ? oom_killer_disable+0x270/0x270 [ 2842.051747][T14701] ? find_held_lock+0x2d/0x110 [ 2842.056559][T14701] mem_cgroup_out_of_memory+0x206/0x270 [ 2842.062150][T14701] ? mem_cgroup_margin+0x130/0x130 [ 2842.067295][T14701] ? lock_downgrade+0x6e0/0x6e0 [ 2842.072208][T14701] try_charge_memcg+0xf67/0x13f0 [ 2842.077199][T14701] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2842.083225][T14701] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2842.088990][T14701] ? lock_downgrade+0x6e0/0x6e0 [ 2842.093880][T14701] ? lock_downgrade+0x6e0/0x6e0 [ 2842.098756][T14701] ? rcu_read_unlock+0x9/0x60 [ 2842.103466][T14701] obj_cgroup_charge+0x2ab/0x5e0 [ 2842.108418][T14701] ? copy_process+0x4ce/0x7090 [ 2842.113192][T14701] kmem_cache_alloc_node+0x92/0x3f0 [ 2842.118397][T14701] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2842.123614][T14701] copy_process+0x4ce/0x7090 [ 2842.128217][T14701] ? find_held_lock+0x2d/0x110 [ 2842.132998][T14701] ? __cleanup_sighand+0xb0/0xb0 [ 2842.137961][T14701] kernel_clone+0xe7/0xab0 [ 2842.142393][T14701] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2842.148383][T14701] ? create_io_thread+0xe0/0xe0 [ 2842.153250][T14701] ? find_held_lock+0x2d/0x110 [ 2842.158024][T14701] ? __ct_user_exit+0xff/0x150 [ 2842.162802][T14701] __do_sys_clone+0xba/0x100 [ 2842.167422][T14701] ? kernel_clone+0xab0/0xab0 [ 2842.172138][T14701] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2842.178042][T14701] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2842.183969][T14701] do_syscall_64+0x35/0xb0 [ 2842.188397][T14701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2842.194309][T14701] RIP: 0033:0x7f5161e8a6a1 [ 2842.198730][T14701] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2842.218366][T14701] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2842.228004][T14701] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2842.236071][T14701] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2842.244064][T14701] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2842.252041][T14701] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2842.260016][T14701] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2842.268009][T14701] [ 2842.358259][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:20:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2842.516223][T14701] memory: usage 307200kB, limit 307200kB, failcnt 42479 [ 2842.523425][T14701] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2842.530632][T14701] Memory cgroup stats for /syz2: [ 2842.530857][T14701] anon 159744 [ 2842.530857][T14701] file 221184 [ 2842.530857][T14701] kernel 314191872 [ 2842.530857][T14701] kernel_stack 65536 [ 2842.530857][T14701] pagetables 81920 [ 2842.530857][T14701] percpu 5435744 [ 2842.530857][T14701] sock 0 [ 2842.530857][T14701] vmalloc 16384 [ 2842.530857][T14701] shmem 221184 [ 2842.530857][T14701] zswap 0 [ 2842.530857][T14701] zswapped 0 [ 2842.530857][T14701] file_mapped 221184 [ 2842.530857][T14701] file_dirty 0 [ 2842.530857][T14701] file_writeback 0 [ 2842.530857][T14701] swapcached 0 [ 2842.530857][T14701] anon_thp 0 [ 2842.530857][T14701] file_thp 0 [ 2842.530857][T14701] shmem_thp 0 [ 2842.530857][T14701] inactive_anon 176128 [ 2842.530857][T14701] active_anon 204800 [ 2842.530857][T14701] inactive_file 0 [ 2842.530857][T14701] active_file 0 [ 2842.530857][T14701] unevictable 0 [ 2842.530857][T14701] slab_reclaimable 16760 11:20:59 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x3800000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2842.530857][T14701] slab_unreclaimable 308541192 [ 2842.530857][T14701] slab 308557952 11:20:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x15a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2842.754953][T14701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14701,uid=0 [ 2842.813793][T14701] Memory cgroup out of memory: Killed process 14701 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:20:59 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x3701000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:20:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x8a8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:20:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4000}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2842.984249][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2843.043621][T14716] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2843.090335][T14716] CPU: 0 PID: 14716 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2843.100574][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2843.110663][T14716] Call Trace: [ 2843.113990][T14716] [ 2843.116939][T14716] dump_stack_lvl+0xcd/0x134 [ 2843.121559][T14716] dump_header+0x10b/0x7f9 [ 2843.126035][T14716] oom_kill_process.cold+0x10/0x15 [ 2843.128235][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2843.131166][T14716] out_of_memory+0x358/0x14a0 [ 2843.131212][T14716] ? find_held_lock+0x2d/0x110 [ 2843.131238][T14716] ? oom_killer_disable+0x270/0x270 [ 2843.155175][T14716] ? find_held_lock+0x2d/0x110 [ 2843.159990][T14716] mem_cgroup_out_of_memory+0x206/0x270 [ 2843.165586][T14716] ? mem_cgroup_margin+0x130/0x130 [ 2843.170734][T14716] ? lock_downgrade+0x6e0/0x6e0 [ 2843.175638][T14716] try_charge_memcg+0xf67/0x13f0 [ 2843.180616][T14716] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2843.186634][T14716] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2843.192400][T14716] ? lock_downgrade+0x6e0/0x6e0 [ 2843.197293][T14716] ? lock_downgrade+0x6e0/0x6e0 [ 2843.202281][T14716] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2843.207872][T14716] __alloc_pages+0x1ef/0x510 [ 2843.212513][T14716] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2843.219326][T14716] ? find_held_lock+0x2d/0x110 [ 2843.224228][T14716] alloc_pages+0x1a6/0x270 [ 2843.228685][T14716] pte_alloc_one+0x16/0x230 [ 2843.233258][T14716] __pte_alloc+0x69/0x250 [ 2843.237609][T14716] ? pmd_install+0x150/0x150 [ 2843.242238][T14716] ? hugepage_vma_check+0x44e/0x780 [ 2843.247476][T14716] ? __pmd_alloc+0x2ff/0x5c0 [ 2843.252105][T14716] __handle_mm_fault+0x310b/0x39b0 [ 2843.257265][T14716] ? vm_iomap_memory+0x190/0x190 [ 2843.262271][T14716] handle_mm_fault+0x1c8/0x780 [ 2843.267077][T14716] do_user_addr_fault+0x475/0x1210 [ 2843.272288][T14716] exc_page_fault+0x94/0x170 [ 2843.276946][T14716] asm_exc_page_fault+0x22/0x30 [ 2843.281819][T14716] RIP: 0033:0x7f0741484695 [ 2843.286261][T14716] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2843.305923][T14716] RSP: 002b:00007f0741acfb98 EFLAGS: 00010202 [ 2843.312034][T14716] RAX: 00000000200003c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2843.320124][T14716] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200003c0 [ 2843.328133][T14716] RBP: 00007f0741acfc58 R08: 00007f07419a0000 R09: 00007f07415a00c8 11:21:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x531d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2843.336134][T14716] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00000000002b611a [ 2843.344170][T14716] R13: 00007f0741acfc80 R14: 00007f074159bf80 R15: 0000000000000032 [ 2843.352203][T14716] 11:21:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x531d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2843.685392][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:21:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x172, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2843.749625][T14716] memory: usage 307180kB, limit 307200kB, failcnt 41820 [ 2843.768440][T14716] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2843.779052][T14716] Memory cgroup stats for /syz3: [ 2843.779242][T14716] anon 143360 [ 2843.779242][T14716] file 143360 [ 2843.779242][T14716] kernel 314265600 [ 2843.779242][T14716] kernel_stack 65536 [ 2843.779242][T14716] pagetables 81920 [ 2843.779242][T14716] percpu 5436928 [ 2843.779242][T14716] sock 0 [ 2843.779242][T14716] vmalloc 0 [ 2843.779242][T14716] shmem 143360 [ 2843.779242][T14716] zswap 0 [ 2843.779242][T14716] zswapped 0 [ 2843.779242][T14716] file_mapped 143360 [ 2843.779242][T14716] file_dirty 0 [ 2843.779242][T14716] file_writeback 0 [ 2843.779242][T14716] swapcached 0 [ 2843.779242][T14716] anon_thp 0 [ 2843.779242][T14716] file_thp 0 [ 2843.779242][T14716] shmem_thp 0 [ 2843.779242][T14716] inactive_anon 159744 [ 2843.779242][T14716] active_anon 126976 [ 2843.779242][T14716] inactive_file 0 [ 2843.779242][T14716] active_file 0 [ 2843.779242][T14716] unevictable 0 [ 2843.779242][T14716] slab_reclaimable 18688 [ 2843.779242][T14716] slab_unreclaimable 308626776 [ 2843.779242][T14716] slab 308645464 [ 2843.815123][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x888e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2844.013982][T14716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14716,uid=0 [ 2844.030332][T14716] Memory cgroup out of memory: Killed process 14716 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:21:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x38}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2844.175394][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2844.267199][T14735] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2844.288462][T14735] CPU: 0 PID: 14735 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2844.298675][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2844.308824][T14735] Call Trace: [ 2844.312105][T14735] [ 2844.315127][T14735] dump_stack_lvl+0xcd/0x134 [ 2844.319751][T14735] dump_header+0x10b/0x7f9 [ 2844.324189][T14735] oom_kill_process.cold+0x10/0x15 [ 2844.329315][T14735] out_of_memory+0x358/0x14a0 [ 2844.334013][T14735] ? oom_killer_disable+0x270/0x270 [ 2844.339223][T14735] ? io_schedule_timeout+0x140/0x140 [ 2844.344527][T14735] mem_cgroup_out_of_memory+0x206/0x270 [ 2844.350085][T14735] ? mem_cgroup_margin+0x130/0x130 [ 2844.355205][T14735] ? preempt_schedule_thunk+0x16/0x18 [ 2844.360697][T14735] ? preempt_schedule_thunk+0x16/0x18 [ 2844.366106][T14735] try_charge_memcg+0xf67/0x13f0 [ 2844.371060][T14735] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2844.377053][T14735] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2844.382800][T14735] ? lock_downgrade+0x6e0/0x6e0 [ 2844.387678][T14735] obj_cgroup_charge+0x2ab/0x5e0 [ 2844.392627][T14735] ? vm_area_dup+0x88/0x3f0 [ 2844.397139][T14735] kmem_cache_alloc+0x96/0x3b0 [ 2844.401919][T14735] vm_area_dup+0x88/0x3f0 [ 2844.406259][T14735] ? mark_lock.part.0+0xee/0x1910 [ 2844.411297][T14735] ? lock_chain_count+0x20/0x20 [ 2844.416157][T14735] ? __vma_adjust+0x109c/0x24a0 [ 2844.421037][T14735] ? __vma_link_rb+0x710/0x710 [ 2844.425819][T14735] ? __lock_acquire+0x166e/0x56d0 [ 2844.430876][T14735] ? vm_area_alloc+0x110/0x110 [ 2844.435673][T14735] ? perf_event_namespaces+0x50/0x50 [ 2844.440993][T14735] ? vma_merge+0x47a/0xeb0 [ 2844.445422][T14735] ? ima_file_mprotect+0x175/0x470 [ 2844.450565][T14735] ? ima_file_mmap+0x130/0x130 [ 2844.455383][T14735] ? vma_wants_writenotify+0x1f8/0x370 [ 2844.460872][T14735] ? __ia32_sys_mmap_pgoff+0x1b0/0x1b0 [ 2844.466399][T14735] ? vma_merge+0x47a/0xeb0 [ 2844.470852][T14735] ? __vma_adjust+0x24a0/0x24a0 [ 2844.475718][T14735] __split_vma+0xa5/0x550 [ 2844.480087][T14735] split_vma+0x95/0xd0 [ 2844.484212][T14735] mprotect_fixup+0x6d9/0x970 [ 2844.488935][T14735] ? change_protection+0x40e0/0x40e0 [ 2844.494266][T14735] ? vmacache_find+0x62/0x330 [ 2844.499035][T14735] do_mprotect_pkey+0x6c5/0x9e0 [ 2844.503910][T14735] ? __ct_user_exit+0xff/0x150 [ 2844.508691][T14735] ? mprotect_fixup+0x970/0x970 [ 2844.513776][T14735] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2844.519728][T14735] __x64_sys_mprotect+0x74/0xb0 [ 2844.524622][T14735] do_syscall_64+0x35/0xb0 [ 2844.529050][T14735] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2844.534973][T14735] RIP: 0033:0x7f5161e89387 [ 2844.539395][T14735] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2844.559010][T14735] RSP: 002b:00007f51624cfab8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2844.567435][T14735] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5161e89387 [ 2844.575412][T14735] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5162f8a000 [ 2844.583389][T14735] RBP: 00007f51624cfb90 R08: 00000000ffffffff R09: 00007f5162fa9700 [ 2844.591367][T14735] R10: 0000000000020022 R11: 0000000000000206 R12: 00007f51624cfcb0 [ 2844.599345][T14735] R13: 00007f5162fa9700 R14: 0000000000000000 R15: 0000000000022000 [ 2844.607347][T14735] 11:21:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc3220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd5492ea54c7beef915d564c90c200", 0x18) sendmsg$sock(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002400)=[{0x0}], 0x1}, 0x48080) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4079, 0xfef}], 0x1}, 0x0) 11:21:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x17a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2845.120506][T14735] memory: usage 307200kB, limit 307200kB, failcnt 42571 [ 2845.144496][T14735] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2845.175778][T14735] Memory cgroup stats for /syz2: [ 2845.176013][T14735] anon 155648 [ 2845.176013][T14735] file 221184 [ 2845.176013][T14735] kernel 314191872 [ 2845.176013][T14735] kernel_stack 65536 [ 2845.176013][T14735] pagetables 81920 [ 2845.176013][T14735] percpu 5435744 [ 2845.176013][T14735] sock 0 [ 2845.176013][T14735] vmalloc 16384 [ 2845.176013][T14735] shmem 221184 [ 2845.176013][T14735] zswap 0 [ 2845.176013][T14735] zswapped 0 [ 2845.176013][T14735] file_mapped 221184 [ 2845.176013][T14735] file_dirty 0 [ 2845.176013][T14735] file_writeback 0 [ 2845.176013][T14735] swapcached 0 [ 2845.176013][T14735] anon_thp 0 [ 2845.176013][T14735] file_thp 0 [ 2845.176013][T14735] shmem_thp 0 [ 2845.176013][T14735] inactive_anon 172032 [ 2845.176013][T14735] active_anon 204800 [ 2845.176013][T14735] inactive_file 0 [ 2845.176013][T14735] active_file 0 [ 2845.176013][T14735] unevictable 0 [ 2845.176013][T14735] slab_reclaimable 16760 [ 2845.176013][T14735] slab_unreclaimable 308546552 [ 2845.176013][T14735] slab 308563312 [ 2845.375886][T14735] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14735,uid=0 [ 2845.415683][T14735] Memory cgroup out of memory: Killed process 14735 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2845.586733][T14757] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2845.634058][T14757] CPU: 0 PID: 14757 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2845.644285][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2845.654375][T14757] Call Trace: [ 2845.657686][T14757] [ 2845.660642][T14757] dump_stack_lvl+0xcd/0x134 [ 2845.665365][T14757] dump_header+0x10b/0x7f9 [ 2845.669793][T14757] oom_kill_process.cold+0x10/0x15 [ 2845.674921][T14757] out_of_memory+0x358/0x14a0 [ 2845.679727][T14757] ? find_held_lock+0x2d/0x110 [ 2845.684510][T14757] ? oom_killer_disable+0x270/0x270 [ 2845.689854][T14757] ? find_held_lock+0x2d/0x110 [ 2845.694675][T14757] mem_cgroup_out_of_memory+0x206/0x270 [ 2845.700297][T14757] ? mem_cgroup_margin+0x130/0x130 [ 2845.705442][T14757] ? lock_downgrade+0x6e0/0x6e0 [ 2845.710353][T14757] try_charge_memcg+0xf67/0x13f0 [ 2845.715342][T14757] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2845.721367][T14757] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2845.727127][T14757] ? lock_downgrade+0x6e0/0x6e0 [ 2845.732049][T14757] ? lock_downgrade+0x6e0/0x6e0 [ 2845.736932][T14757] ? rcu_read_unlock+0x9/0x60 [ 2845.741664][T14757] obj_cgroup_charge+0x2ab/0x5e0 [ 2845.746661][T14757] ? copy_process+0x4ce/0x7090 [ 2845.751471][T14757] kmem_cache_alloc_node+0x92/0x3f0 [ 2845.756713][T14757] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2845.761976][T14757] copy_process+0x4ce/0x7090 [ 2845.766625][T14757] ? __lock_acquire+0xbc3/0x56d0 [ 2845.771627][T14757] ? __cleanup_sighand+0xb0/0xb0 [ 2845.776635][T14757] kernel_clone+0xe7/0xab0 [ 2845.781082][T14757] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2845.787085][T14757] ? create_io_thread+0xe0/0xe0 [ 2845.792049][T14757] ? find_held_lock+0x2d/0x110 [ 2845.796956][T14757] ? __ct_user_exit+0xff/0x150 [ 2845.801863][T14757] __do_sys_clone+0xba/0x100 [ 2845.806507][T14757] ? kernel_clone+0xab0/0xab0 [ 2845.811248][T14757] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2845.817189][T14757] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2845.823142][T14757] do_syscall_64+0x35/0xb0 [ 2845.827609][T14757] entry_SYSCALL_64_after_hwframe+0x63/0xcd 11:21:02 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x3300000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2845.833620][T14757] RIP: 0033:0x7f074148a6a1 [ 2845.838074][T14757] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2845.857755][T14757] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2845.866217][T14757] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2845.874277][T14757] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2845.882303][T14757] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2845.890309][T14757] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2845.898315][T14757] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2845.906348][T14757] [ 2846.126534][T14757] memory: usage 307196kB, limit 307200kB, failcnt 41879 11:21:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x858e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2846.176733][T14757] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2846.216438][T14757] Memory cgroup stats for /syz3: [ 2846.216661][T14757] anon 159744 [ 2846.216661][T14757] file 143360 [ 2846.216661][T14757] kernel 314253312 [ 2846.216661][T14757] kernel_stack 65536 [ 2846.216661][T14757] pagetables 86016 [ 2846.216661][T14757] percpu 5436928 [ 2846.216661][T14757] sock 0 [ 2846.216661][T14757] vmalloc 0 [ 2846.216661][T14757] shmem 143360 [ 2846.216661][T14757] zswap 0 [ 2846.216661][T14757] zswapped 0 [ 2846.216661][T14757] file_mapped 143360 [ 2846.216661][T14757] file_dirty 0 [ 2846.216661][T14757] file_writeback 0 [ 2846.216661][T14757] swapcached 0 [ 2846.216661][T14757] anon_thp 0 [ 2846.216661][T14757] file_thp 0 [ 2846.216661][T14757] shmem_thp 0 [ 2846.216661][T14757] inactive_anon 135168 [ 2846.216661][T14757] active_anon 126976 [ 2846.216661][T14757] inactive_file 0 [ 2846.216661][T14757] active_file 0 [ 2846.216661][T14757] unevictable 0 [ 2846.216661][T14757] slab_reclaimable 17144 [ 2846.216661][T14757] slab_unreclaimable 308616848 [ 2846.216661][T14757] slab 308633992 [ 2846.413127][T14757] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14757,uid=0 [ 2846.465609][T14757] Memory cgroup out of memory: Killed process 14757 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:21:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x888e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2846.613955][T14761] __nla_validate_parse: 3 callbacks suppressed [ 2846.613979][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2846.905467][T14777] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2846.926195][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:21:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4000}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2846.987291][T14777] CPU: 0 PID: 14777 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2846.997525][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2847.007617][T14777] Call Trace: [ 2847.010920][T14777] [ 2847.013877][T14777] dump_stack_lvl+0xcd/0x134 [ 2847.018510][T14777] dump_header+0x10b/0x7f9 [ 2847.022975][T14777] oom_kill_process.cold+0x10/0x15 [ 2847.028136][T14777] out_of_memory+0x358/0x14a0 [ 2847.033029][T14777] ? find_held_lock+0x2d/0x110 [ 2847.037826][T14777] ? oom_killer_disable+0x270/0x270 [ 2847.043115][T14777] ? find_held_lock+0x2d/0x110 [ 2847.047920][T14777] mem_cgroup_out_of_memory+0x206/0x270 [ 2847.053505][T14777] ? mem_cgroup_margin+0x130/0x130 [ 2847.058637][T14777] ? lock_downgrade+0x6e0/0x6e0 [ 2847.063544][T14777] try_charge_memcg+0xf67/0x13f0 [ 2847.068514][T14777] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2847.074538][T14777] ? lock_downgrade+0x6e0/0x6e0 [ 2847.079445][T14777] charge_memcg+0x31/0x320 [ 2847.083913][T14777] __mem_cgroup_charge+0x27/0x90 [ 2847.088889][T14777] ? _compound_head+0x5d/0x150 [ 2847.093694][T14777] wp_page_copy+0x27c/0x1b60 [ 2847.098336][T14777] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2847.103831][T14777] ? lock_downgrade+0x6e0/0x6e0 [ 2847.108724][T14777] ? vm_normal_page+0x146/0x2a0 [ 2847.113803][T14777] do_wp_page+0x1d1/0x1910 [ 2847.118264][T14777] __handle_mm_fault+0x1813/0x39b0 [ 2847.123421][T14777] ? vm_iomap_memory+0x190/0x190 [ 2847.128423][T14777] handle_mm_fault+0x1c8/0x780 [ 2847.133228][T14777] do_user_addr_fault+0x475/0x1210 [ 2847.138391][T14777] exc_page_fault+0x94/0x170 [ 2847.139071][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2847.143000][T14777] asm_exc_page_fault+0x22/0x30 [ 2847.143030][T14777] RIP: 0033:0x7f5161e374b0 [ 2847.161621][T14777] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2847.181286][T14777] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2847.187392][T14777] RAX: 000000002feed7de RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2847.195402][T14777] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a19aef0 [ 2847.203410][T14777] RBP: 000000002feed7de R08: 00000000000017de R09: 000000002feed7e2 [ 2847.211421][T14777] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2847.219431][T14777] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83bb623b [ 2847.227437][T14777] ? security_socket_create+0x3b/0xc0 [ 2847.232912][T14777] 11:21:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x4a}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1a0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2847.389457][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2847.405397][T14777] memory: usage 307168kB, limit 307200kB, failcnt 42677 [ 2847.413821][T14777] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2847.435446][T14777] Memory cgroup stats for /syz2: [ 2847.435628][T14777] anon 139264 [ 2847.435628][T14777] file 221184 [ 2847.435628][T14777] kernel 314179584 [ 2847.435628][T14777] kernel_stack 65536 [ 2847.435628][T14777] pagetables 73728 [ 2847.435628][T14777] percpu 5435744 [ 2847.435628][T14777] sock 0 [ 2847.435628][T14777] vmalloc 16384 [ 2847.435628][T14777] shmem 221184 [ 2847.435628][T14777] zswap 0 [ 2847.435628][T14777] zswapped 0 [ 2847.435628][T14777] file_mapped 221184 [ 2847.435628][T14777] file_dirty 0 [ 2847.435628][T14777] file_writeback 0 [ 2847.435628][T14777] swapcached 0 [ 2847.435628][T14777] anon_thp 0 [ 2847.435628][T14777] file_thp 0 [ 2847.435628][T14777] shmem_thp 0 [ 2847.435628][T14777] inactive_anon 155648 [ 2847.435628][T14777] active_anon 204800 [ 2847.435628][T14777] inactive_file 0 [ 2847.435628][T14777] active_file 0 [ 2847.435628][T14777] unevictable 0 [ 2847.435628][T14777] slab_reclaimable 14832 [ 2847.435628][T14777] slab_unreclaimable 308539232 [ 2847.435628][T14777] slab 308554064 [ 2847.552741][T14777] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14777,uid=0 [ 2847.583368][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:21:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x858e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2847.650668][T14777] Memory cgroup out of memory: Killed process 14777 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:21:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4200}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2847.772224][T14786] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2847.782573][T14786] CPU: 1 PID: 14786 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2847.792756][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2847.802847][T14786] Call Trace: [ 2847.806159][T14786] [ 2847.809304][T14786] dump_stack_lvl+0xcd/0x134 [ 2847.813949][T14786] dump_header+0x10b/0x7f9 [ 2847.818426][T14786] oom_kill_process.cold+0x10/0x15 [ 2847.823587][T14786] out_of_memory+0x358/0x14a0 [ 2847.828314][T14786] ? find_held_lock+0x2d/0x110 [ 2847.833117][T14786] ? oom_killer_disable+0x270/0x270 [ 2847.838366][T14786] ? find_held_lock+0x2d/0x110 [ 2847.843180][T14786] mem_cgroup_out_of_memory+0x206/0x270 [ 2847.848772][T14786] ? mem_cgroup_margin+0x130/0x130 [ 2847.853922][T14786] ? lock_downgrade+0x6e0/0x6e0 [ 2847.858831][T14786] try_charge_memcg+0xf67/0x13f0 [ 2847.863817][T14786] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2847.869852][T14786] ? lock_downgrade+0x6e0/0x6e0 [ 2847.874760][T14786] charge_memcg+0x31/0x320 [ 2847.879220][T14786] __mem_cgroup_charge+0x27/0x90 [ 2847.884193][T14786] ? _compound_head+0x5d/0x150 [ 2847.888995][T14786] wp_page_copy+0x27c/0x1b60 [ 2847.893628][T14786] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2847.899124][T14786] ? lock_downgrade+0x6e0/0x6e0 [ 2847.904010][T14786] ? vm_normal_page+0x146/0x2a0 [ 2847.908914][T14786] do_wp_page+0x1d1/0x1910 [ 2847.913371][T14786] __handle_mm_fault+0x1813/0x39b0 11:21:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x888e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x501d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2847.918534][T14786] ? vm_iomap_memory+0x190/0x190 [ 2847.923526][T14786] handle_mm_fault+0x1c8/0x780 [ 2847.928335][T14786] do_user_addr_fault+0x475/0x1210 [ 2847.933501][T14786] exc_page_fault+0x94/0x170 [ 2847.938132][T14786] asm_exc_page_fault+0x22/0x30 [ 2847.943014][T14786] RIP: 0033:0x7f07414374b0 [ 2847.947450][T14786] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2847.967096][T14786] RSP: 002b:00007f0741acfab0 EFLAGS: 00010246 [ 2847.973205][T14786] RAX: 00000000098f1ddc RBX: 00007f074159c018 RCX: 0000001b2fa20000 [ 2847.981217][T14786] RDX: 0000000000000000 RSI: 0000001b2fa20018 RDI: 000000000d570f0d [ 2847.989221][T14786] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2847.997263][T14786] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00007f0741590000 [ 2848.005272][T14786] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2848.013275][T14786] ? __x64_sys_socket+0xd/0xb0 [ 2848.018115][T14786] [ 2848.021347][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2848.085541][T14786] memory: usage 307200kB, limit 307200kB, failcnt 41987 [ 2848.139200][T14786] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2848.157957][T14786] Memory cgroup stats for /syz3: [ 2848.158479][T14786] anon 135168 [ 2848.158479][T14786] file 143360 [ 2848.158479][T14786] kernel 314294272 [ 2848.158479][T14786] kernel_stack 65536 [ 2848.158479][T14786] pagetables 77824 [ 2848.158479][T14786] percpu 5436928 [ 2848.158479][T14786] sock 0 [ 2848.158479][T14786] vmalloc 0 [ 2848.158479][T14786] shmem 143360 [ 2848.158479][T14786] zswap 0 [ 2848.158479][T14786] zswapped 0 [ 2848.158479][T14786] file_mapped 143360 [ 2848.158479][T14786] file_dirty 0 [ 2848.158479][T14786] file_writeback 0 [ 2848.158479][T14786] swapcached 0 [ 2848.158479][T14786] anon_thp 0 [ 2848.158479][T14786] file_thp 0 [ 2848.158479][T14786] shmem_thp 0 [ 2848.158479][T14786] inactive_anon 151552 [ 2848.158479][T14786] active_anon 126976 [ 2848.158479][T14786] inactive_file 0 [ 2848.158479][T14786] active_file 0 [ 2848.158479][T14786] unevictable 0 [ 2848.158479][T14786] slab_reclaimable 30304 [ 2848.158479][T14786] slab_unreclaimable 308646352 [ 2848.158479][T14786] slab 308676656 [ 2848.253598][T14786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14786,uid=0 [ 2848.400130][T14786] Memory cgroup out of memory: Killed process 14786 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2848.455623][T14793] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2848.516937][T14793] CPU: 1 PID: 14793 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2848.527168][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2848.537257][T14793] Call Trace: [ 2848.540563][T14793] [ 2848.543540][T14793] dump_stack_lvl+0xcd/0x134 [ 2848.548185][T14793] dump_header+0x10b/0x7f9 [ 2848.552651][T14793] oom_kill_process.cold+0x10/0x15 [ 2848.557805][T14793] out_of_memory+0x358/0x14a0 [ 2848.562516][T14793] ? oom_killer_disable+0x270/0x270 [ 2848.567756][T14793] ? find_held_lock+0x2d/0x110 [ 2848.572534][T14793] mem_cgroup_out_of_memory+0x206/0x270 [ 2848.578093][T14793] ? mem_cgroup_margin+0x130/0x130 [ 2848.583210][T14793] ? lock_downgrade+0x6e0/0x6e0 [ 2848.588085][T14793] try_charge_memcg+0xf67/0x13f0 [ 2848.593041][T14793] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2848.599121][T14793] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2848.604876][T14793] ? lock_downgrade+0x6e0/0x6e0 [ 2848.609754][T14793] ? lock_downgrade+0x6e0/0x6e0 [ 2848.614635][T14793] obj_cgroup_charge+0x2ab/0x5e0 [ 2848.619610][T14793] kmem_cache_alloc_lru+0x13e/0x720 [ 2848.624817][T14793] ? sock_alloc_inode+0x23/0x1d0 [ 2848.629784][T14793] sock_alloc_inode+0x23/0x1d0 [ 2848.634558][T14793] ? sock_free_inode+0x20/0x20 [ 2848.639330][T14793] alloc_inode+0x61/0x230 [ 2848.643689][T14793] new_inode_pseudo+0x13/0x80 [ 2848.648379][T14793] sock_alloc+0x3c/0x260 [ 2848.652643][T14793] __sock_create+0xb9/0x790 [ 2848.657169][T14793] ? lock_downgrade+0x6e0/0x6e0 [ 2848.662038][T14793] __sys_socket+0x12f/0x240 [ 2848.666552][T14793] ? __sys_socket_file+0x1f0/0x1f0 [ 2848.671684][T14793] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2848.677958][T14793] __x64_sys_socket+0x6f/0xb0 [ 2848.682685][T14793] do_syscall_64+0x35/0xb0 [ 2848.687129][T14793] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2848.693045][T14793] RIP: 0033:0x7f5161e89279 [ 2848.697469][T14793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2848.717100][T14793] RSP: 002b:00007f5162fca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2848.725527][T14793] RAX: ffffffffffffffda RBX: 00007f5161f9bf80 RCX: 00007f5161e89279 [ 2848.733518][T14793] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2848.741496][T14793] RBP: 00007f5161ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 2848.749475][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2848.757453][T14793] R13: 00007f51624cfb1f R14: 00007f5162fca300 R15: 0000000000022000 [ 2848.765451][T14793] 11:21:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2848.889402][T14793] memory: usage 307168kB, limit 307200kB, failcnt 42722 [ 2848.902249][T14793] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2848.923372][T14793] Memory cgroup stats for /syz2: [ 2848.923563][T14793] anon 110592 [ 2848.923563][T14793] file 221184 [ 2848.923563][T14793] kernel 314208256 [ 2848.923563][T14793] kernel_stack 65536 [ 2848.923563][T14793] pagetables 73728 [ 2848.923563][T14793] percpu 5435744 [ 2848.923563][T14793] sock 0 [ 2848.923563][T14793] vmalloc 16384 [ 2848.923563][T14793] shmem 221184 [ 2848.923563][T14793] zswap 0 [ 2848.923563][T14793] zswapped 0 [ 2848.923563][T14793] file_mapped 221184 [ 2848.923563][T14793] file_dirty 0 [ 2848.923563][T14793] file_writeback 0 [ 2848.923563][T14793] swapcached 0 [ 2848.923563][T14793] anon_thp 0 [ 2848.923563][T14793] file_thp 0 [ 2848.923563][T14793] shmem_thp 0 [ 2848.923563][T14793] inactive_anon 126976 [ 2848.923563][T14793] active_anon 204800 [ 2848.923563][T14793] inactive_file 0 [ 2848.923563][T14793] active_file 0 [ 2848.923563][T14793] unevictable 0 [ 2848.923563][T14793] slab_reclaimable 12904 [ 2848.923563][T14793] slab_unreclaimable 308547720 [ 2848.923563][T14793] slab 308560624 [ 2849.074031][T14793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14792,uid=0 [ 2849.124552][T14793] Memory cgroup out of memory: Killed process 14792 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:21:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1b2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2849.165754][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2849.203278][T14803] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 11:21:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x858e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2849.239874][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2849.263643][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2849.328647][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2849.449196][T14803] CPU: 1 PID: 14803 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2849.459424][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2849.469516][T14803] Call Trace: [ 2849.472821][T14803] [ 2849.475777][T14803] dump_stack_lvl+0xcd/0x134 [ 2849.480411][T14803] dump_header+0x10b/0x7f9 [ 2849.484893][T14803] oom_kill_process.cold+0x10/0x15 [ 2849.490047][T14803] out_of_memory+0x358/0x14a0 [ 2849.494765][T14803] ? oom_killer_disable+0x270/0x270 [ 2849.500001][T14803] ? find_held_lock+0x2d/0x110 [ 2849.504784][T14803] mem_cgroup_out_of_memory+0x206/0x270 [ 2849.510369][T14803] ? mem_cgroup_margin+0x130/0x130 [ 2849.515527][T14803] ? lock_downgrade+0x6e0/0x6e0 [ 2849.520417][T14803] try_charge_memcg+0xf67/0x13f0 [ 2849.525445][T14803] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2849.531461][T14803] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2849.537200][T14803] ? lock_downgrade+0x6e0/0x6e0 [ 2849.542080][T14803] ? lock_downgrade+0x6e0/0x6e0 [ 2849.546950][T14803] ? rcu_read_unlock+0x9/0x60 [ 2849.551678][T14803] obj_cgroup_charge+0x2ab/0x5e0 [ 2849.556652][T14803] ? copy_process+0x4ce/0x7090 [ 2849.561428][T14803] kmem_cache_alloc_node+0x92/0x3f0 [ 2849.566653][T14803] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2849.571882][T14803] copy_process+0x4ce/0x7090 [ 2849.576486][T14803] ? __lock_acquire+0xbc3/0x56d0 [ 2849.581459][T14803] ? __cleanup_sighand+0xb0/0xb0 [ 2849.586422][T14803] kernel_clone+0xe7/0xab0 [ 2849.590863][T14803] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2849.596858][T14803] ? create_io_thread+0xe0/0xe0 [ 2849.601726][T14803] ? find_held_lock+0x2d/0x110 [ 2849.606511][T14803] ? __ct_user_exit+0xff/0x150 [ 2849.611293][T14803] __do_sys_clone+0xba/0x100 [ 2849.615894][T14803] ? kernel_clone+0xab0/0xab0 [ 2849.620593][T14803] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2849.626504][T14803] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2849.632415][T14803] do_syscall_64+0x35/0xb0 [ 2849.636846][T14803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2849.642758][T14803] RIP: 0033:0x7f074148a6a1 [ 2849.647192][T14803] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2849.666903][T14803] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2849.675325][T14803] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2849.683313][T14803] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2849.691380][T14803] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 11:21:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4300}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2849.699392][T14803] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2849.707378][T14803] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2849.715390][T14803] [ 2849.861798][T14803] memory: usage 307196kB, limit 307200kB, failcnt 42055 [ 2849.878845][T14803] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:21:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x501d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2849.904537][T14803] Memory cgroup stats for /syz3: [ 2849.904775][T14803] anon 159744 [ 2849.904775][T14803] file 143360 [ 2849.904775][T14803] kernel 314265600 [ 2849.904775][T14803] kernel_stack 65536 [ 2849.904775][T14803] pagetables 86016 [ 2849.904775][T14803] percpu 5436928 [ 2849.904775][T14803] sock 0 [ 2849.904775][T14803] vmalloc 0 [ 2849.904775][T14803] shmem 143360 [ 2849.904775][T14803] zswap 0 [ 2849.904775][T14803] zswapped 0 [ 2849.904775][T14803] file_mapped 143360 [ 2849.904775][T14803] file_dirty 0 [ 2849.904775][T14803] file_writeback 0 [ 2849.904775][T14803] swapcached 0 [ 2849.904775][T14803] anon_thp 0 [ 2849.904775][T14803] file_thp 0 [ 2849.904775][T14803] shmem_thp 0 [ 2849.904775][T14803] inactive_anon 176128 [ 2849.904775][T14803] active_anon 126976 [ 2849.904775][T14803] inactive_file 0 [ 2849.904775][T14803] active_file 0 [ 2849.904775][T14803] unevictable 0 [ 2849.904775][T14803] slab_reclaimable 17144 11:21:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x848e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2849.904775][T14803] slab_unreclaimable 308626144 [ 2849.904775][T14803] slab 308643288 [ 2850.096306][T14803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14803,uid=0 [ 2850.142224][T14803] Memory cgroup out of memory: Killed process 14803 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:21:07 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x3001000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:21:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1b4, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2850.357219][T14814] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2850.417926][T14814] CPU: 0 PID: 14814 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2850.428156][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2850.438241][T14814] Call Trace: [ 2850.441549][T14814] [ 2850.444513][T14814] dump_stack_lvl+0xcd/0x134 [ 2850.449179][T14814] dump_header+0x10b/0x7f9 [ 2850.453650][T14814] oom_kill_process.cold+0x10/0x15 [ 2850.458808][T14814] out_of_memory+0x358/0x14a0 [ 2850.463526][T14814] ? find_held_lock+0x2d/0x110 [ 2850.468337][T14814] ? oom_killer_disable+0x270/0x270 [ 2850.473615][T14814] ? find_held_lock+0x2d/0x110 [ 2850.478416][T14814] mem_cgroup_out_of_memory+0x206/0x270 [ 2850.484013][T14814] ? mem_cgroup_margin+0x130/0x130 [ 2850.489169][T14814] ? lock_downgrade+0x6e0/0x6e0 [ 2850.494085][T14814] try_charge_memcg+0xf67/0x13f0 [ 2850.499082][T14814] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2850.505111][T14814] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2850.510867][T14814] ? lock_downgrade+0x6e0/0x6e0 [ 2850.515761][T14814] ? lock_downgrade+0x6e0/0x6e0 [ 2850.520651][T14814] obj_cgroup_charge+0x2ab/0x5e0 [ 2850.525637][T14814] kmem_cache_alloc_lru+0x13e/0x720 [ 2850.530893][T14814] ? sock_alloc_inode+0x23/0x1d0 [ 2850.535890][T14814] sock_alloc_inode+0x23/0x1d0 [ 2850.540717][T14814] ? sock_free_inode+0x20/0x20 [ 2850.545521][T14814] alloc_inode+0x61/0x230 [ 2850.549914][T14814] new_inode_pseudo+0x13/0x80 [ 2850.554637][T14814] sock_alloc+0x3c/0x260 [ 2850.558927][T14814] __sock_create+0xb9/0x790 [ 2850.563476][T14814] ? lock_downgrade+0x6e0/0x6e0 [ 2850.568372][T14814] __sys_socket+0x12f/0x240 [ 2850.572922][T14814] ? __sys_socket_file+0x1f0/0x1f0 [ 2850.578091][T14814] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2850.584483][T14814] __x64_sys_socket+0x6f/0xb0 [ 2850.589219][T14814] do_syscall_64+0x35/0xb0 [ 2850.593691][T14814] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2850.599642][T14814] RIP: 0033:0x7f5161e89279 [ 2850.604098][T14814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2850.623793][T14814] RSP: 002b:00007f5162fca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2850.632255][T14814] RAX: ffffffffffffffda RBX: 00007f5161f9bf80 RCX: 00007f5161e89279 [ 2850.640269][T14814] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2850.648286][T14814] RBP: 00007f5161ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 2850.656362][T14814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2850.664372][T14814] R13: 00007f51624cfb1f R14: 00007f5162fca300 R15: 0000000000022000 [ 2850.672429][T14814] 11:21:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd5492ea54c7beef915d564c90c200", 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)="4f2800ad0583b65103e6818c735451464b898cedd8e47a599c8a7709e7c61b3b3c02522c4a8c08e200c5db0cbc0345d607449b9ac46e9ef00943c3e8f9127b80e7217006e3170b748144e26a787c2efbeee49fef2714b3e47486b365030925c54ed81b59863b2468244b332b633b2968aa8f499a8ec9f76823b4d8a2ab51354956edce04ac8a4d899efe45aa6c89bf052b6393f10d04f5bd257f6ebf551fdae0b50ceae5a97d3cf081021e47931273dc7c43e2ff3a68f05c51b603da6e7a17cf6f6d41d5e8a22be71a25c77183d61ea3ae3488ed8f48228b6b7d3c9b9cd65d74e8b1a6801d5fd082bd03a8be11e137b50e1db564c5ab9828d5d77d682aa7ad56c8837f20ce37eebaf28ffedbc9aa738a65a364174b9d1921c2f416a6abc94626c300cf3ed237e76d896a1354b7fa424352c76b922b6651fc5fa77d8fe3183efb6cfaa28a8aaa85deedd44e7e15086d735b4c05a3fade93774017b820a642e163ae9ce308a0eb878c89d4ca8c71c76d26076d324151dc5444cbd50cae52a4f58d509bed6bd15ad4362f2840066b43381e86487ef7e11bd489a12dcc53652bb724fb0b8fe37821de04cd4fa0119aff357ba03298cb56290b3b427319bc2c582ab12e3d52605a0f087e8da2baf6443e5c3969dde93bcbeb64085e5d4db7953e56040c7fddd5d978c851f1b218daba28a6ddf027a23eef5753ccb90db84f2a451c29872bd0bb5ae0081761fa5e081d612d55977ab6d66b2bb3e514785d62e6fcbd0dae2811f581adb69543448fea727c6cf1f31c89dbc32b542448ab54063178b1a3edeef1fe894334a5595b217b9b1d57692a6681027d961ddf16de746b452a03bc9c5cfa0a26b12f965ec2a32c75f7882ded3a8abcec1a45231601ddb2528d02a929599a7dcd5abf5409a6e1c9b1987afcd2ec36b2d96f4bde7af2103918e6c42040f74f620fec8f55cd839745d09427a5089afab7f82c06538b80b4a41abfc58453bb8c1e077a923086769e7df855c1d54077d8e02a51772c32664465477a87b32638e295c518740207a308b94155448267a071ead9cf36eed160726efa94085ce9da0d4bbb2c47d4cfd8544b619e21996d692b0b234b3d59ce64d5cc8334309cc3d8509e799712cd0adce9e13804a06b413616a03da338221380e02cc1d0f155a39a9da73b94ad1227f06a66e8692ec0c1a252b6aa226c0a7dd6c34b2249731feda98650396c510f6e15ba3d16b8b56860017345a83fd2f18a74684ff5bb1e4c2ebc795cf3d488ce8e2a5595ac95d0547094ecc6e41f561ffc8736c5e1ef93e6f77476c05c5f4e38b3c9702642855a206d459a4940a264d06d86a43e88b2f8d542eca39aa27fb88f27560d266b87e6ccf186fcddfa5bbe5d069324f121ede312702de3aa3bfe88a654726cb0a980980efca52fc3b19aa1162fd3f76ee5f979408df783e90cb8d3033d71710c6d3010a98f81a66374c7678a48e99481a48c4f50d7bfc9851a2cc9cafc885b190ae06e9a7aac141b8add9f702b57937e1f8f09adeb1e0cf01906f529d52c5a9a5468ade17c45d98dfe8e606720df4095ac0492b5eb915dad97b339cd05dbdfe0ac4f9f0a99a380f27cec516687cc77a13ad3c5649171f6f5f25fd516361a5fdacc62ad1268b7983c8848f8d17ae231860d5e38bd436293760a18c4af7a1d02d2e23859bd4c7976f4577a3e64172735b6504542f77d6750c1fb6f39c39211b2193511e0e510cda890b5e7a2cf90040860b46e310f268c04ca37bab0c804e75cd6899beab5fea6e0bc1a86dd029965ac84966da1d9064b073eb040f06f9ac719c8020d9f82db88ae7c15130c5f84f2158bcc32b464651b9fadde07f8ee01e6668cd6666190c7afa0f4d69158fc3140eea393929395d25c42d933fee0a6143311d5d46411704d5c09e6bf4ff4c689479a542f5dc497bc8a9195b94663303f742aa234cd9e001f169c81f8d50d0732daa76315ddec62e3ea42f9898eba5c4271adb0a6da3f079aa71134992b81e996164620abbdb751ac065ed3d0365a1fc2e44919ef3b1ef96095183e98762241863d68241b56584667d3c9af60a88aad7ad2654b6f06ada2f8f0adf901ce61c337fb61a7d5545d0ea28a299b643eb630f9e69ab4f585c3a2a41352e8e98ed9ac503aad3ec51d82e22975663c1b68bf90cb0a8bee0af18e0f1ea19548e115115ef53e05a17afbe3e16e7e2351fccea233b591188113b2ffa6eb61f89a089d65fe8225d7887ab978d1beaa59dbf35e38ad6f9df197232ca1903a021ff374d515107a0ba1f7ce4da49f68d146169f93533237fb5407843f06531962ed055d21d1ab19d4f5cf2e841d75c0e99cb7adc29f09908df4b2438377660ff705ccd728ffe5b4d6f0cd40af882a25a7972b3a8e555715f1b09a88599e349786935d61319d7aff0279f51e82f10a8bbd42b0f1d144281c651e1574ba61f2e9e8c5459cb20f1279f2739f1f346a3e13efe5a058d7e597de97d52d0a8366c6c63ac6b2e45c0f30132a6da7132e42060437895c00ae3d53ca520c90771fdbcf5b9f69bdb75accd6b800c1dc334de90b776f6290b71ad8a36fa7583bb35ae1f4af160ed9399e9d3338bdf1cdef45c22532ef2c3055b96669e6dffb6124656e77789e677362d061d2121b228805c505a7db4241d0346444b0d793d3a4046dcf7f28174d5b29abf2d7244d87213a39a36b6eb90fcc0d5510d2928060cc358f14e52560dd734906bed04a7e308744d7184ac351d138cbb7cf1418c5abc4315220d5872f8d577a2f54df9faf46dff74df05bbe281b4da4c462ddef29a5adc3bc831021283f3b85ffd97602c4c833f2601c44dc2be14fd4560f528326a3197a5e3c05e525237fcbdac07bad24b881eac1d513cc250d97e83e7cd2145c445de33228a39b1d7521d323f0c391337727e6cf6542a2244fca66410747a91d4c30e2e0efe1fb2468645f19de109ed04f2e901069837ed8b27217efcf9719d272e752b2e7663984d716be2e65b6a3931ec17ea64898eddfdb82db21602ddd9d0a2d7993d42448718a22e545c239eedd354e9fe84f3dfd4b684929cbdea7683dcf9ad339df8ecd6753186a725492f86908db86ae61d2907e3cd0d182b32e6e3b1654b4e667534ce345450de1c74920babd7a11d5f188a7cd452ceacd618cdaf3b7cb1ffea009bdac2e786e76707cb1e5f8d431e13243f9bddfecfd25086904f6760cb76ac72b3ce1f8b877d33bc32873f3e3c8038962ac7d505e0d2031d66d5ebf41da89f66c9960836fc986b97bd48e5162e0d53cb360dece67f3174b0c29b048ece147c14f2a6869eb7d755380391cbd6b644c1e03d0e1c5c03b44b0bca774fd59b2f6d72fbd458b96cf271fe3c1877a861695b9ec9dc2e1d8c4fc823009af2495e05a75a338579c92dda8f8182d9e7a3d7a629e4c94ab02423cbde932e14719e8a980dcfe540c24a2e8c7ff17655a0abfe0955f117df997a8d1d0db3a72f4cb2c41f525d971f8f29fa03354c54a91c41b1aba8d42958eb37aaa52919fddf45ec2e7e154199ff5296fd7dca586da6114f104c2690fc2cc793bce7f4902fc12b22e6346c657a4d63028f2bbf653e7357ebbe3d0b48a7d0e1ac37047e85489d4372535e8d811913ad5cb8d62ffd085b33eb78ecbe4b594b5ad27342b63a9a57a3c151e63e65ddba0195366cd8e4ed0f1e33b4cfe8c9d7b0cb73e418cc7d6a7dc3638caa1510429f460919bfcc05ee160f6e81b870aa454cbdc73d54cf9343f06e45eb83e38540913e4b4fbb4c0136381d70a64469d18c8872103d4e4efa13679ce5c1e69449a71fc0f615b1bcd88023076a9f912045bd6067f3c91b85e19ead8425d72c7fb9896550f56d737877ece90b54ad3898d12b84c7acec00160316354be3dafeedfd6b31fb198bf6d8c807d1342feaa361f5265083e533bb6840ec4aafce82be451367616e5e3ae2212416c05ee38dcc41957d5e1a702aaa6ea658ffe8932a14a23016dc25328a43791080f464e49fa26717fded766bf99efefdac43d7e5db52fd5a262c32e1c9da4a7148f9e4e6ef650a7df1bbb8c16796f36924447fd9ba51429c97f73c52f117d50f04a9bbffe3b5303fe827a536eb1ccd22dbda0a1d07212f3a304d73aa6f98ec8cec29168c433f4f29833d77bd8cb47c1eac3ac6db9522695c78032729f79276529bef4e533a93d6d157c36bd4ba50cd775fc008a28a0d041c2a0629c4e64b19b20a0655e58f22bb3995b772dd4535967902ef22596a4482dc56a55df5776b91a8ed0dd9238a04e3b7381b562ed55a99f6dc797fbeb7f8734735e8aaa271a3aceea68cf69dc7e8bf5cf300ebfb6b4895d843537312f2d019e8a4fc8804736ff6b34f65319a3ec2f8db98f203cfe7a35d76efc6d09352a4f40107408463e9c3e75ca3bd82f831f1e3f986fdcfefc9ce7a6a42741ccb2b4bda84bb64ce47fd26fc31ec7c202e16b5a9fa7d799373576fad2dac581c0f5e7146594385745e0d0b19d58e1fb582f9c57c78859b2ff6ed15c386d48ffa687281952ce394d2be2a5599592dca7e7bab7dfc310d43870b32c41fe0d05f42cafd4fb42960addc75848666bb9d5f3e9a5afaa74968d7dd5729b5de6da2685c316962a80bdad3f2c2989136dca1206fd8adc4161f54c8c58b33c665b51089e39b0a2e5e9ac709117bd092331a29e3e41f5fd83e20b7addc73bdf7854b9c3ab2cdba47a238c243f6597ed3c082c15eb8104b9ba1456d7ca9641499631ce89b491c992cb0540d940b9fc6b06b554813f6cb36c49a1a618b35b82f5214c3a7438c15a677155b6af54bfad1fae2813a91579a876cd147d2d5e4e8f25bdd4521c51f5a32b8f5b0c692bc1dc6c0702e12113cbbb1c5893446c9f17dfd0c08c61965f580d5f71f92a4b87ce9d137971c70b976d9cd8cff96d89c564a552dbecdad9da438dcee1a84384996782317d3248a8c5f36803d7f9c5105d4c79251a93285a77c35cb7a24e796ec723ce00632ca86c8f49f70b88c3b3952818f7704bfd31767fbf50b07109e227bf2bd2daa28f1945edd2e3ee0ffb66e22ddcbdcae0992ea22866e1c63f45826d172c2bed7b98f41e21031e0658137f045214b8f054cd371e3a81254de6807eabb6220cfa642401ac1bec3217cd3f87f63b2e0ea60a747deb7d2bec3ba0bd0031c3db76bdc30bb509dd1440e55c4085c46e0a74367d335e4adb45a6a915576446aea6848f91f1caa636f4e2d2b848eb2da6293b114376ff4f2a49f60a5d69084cb3deb31d468ac73ac5e2782c9e0969064a836a84ba1d9908d749215a801bb0ba6e45371415fab39ddbbbafe76e887fdcbbcede7c0357f7ca69bada7c686c321c563d1c2bc3737424b2a660b37f2ba72b6d36f42b39d074a7131772115d56fc00c10abd5106ddd9d95e3a762f7482dd1a98735814d9af950d729ca6de30a50543a986242335996f218ccd168c3ad5d3ff4289c788d355bf7ae2389a488615c1bf307b9dcc5e1fdf3d1cc55d67afdbcd0a046a5f7355b52ca0e6cc8f170179af180ef83732d7ad12bb2c72286f1dac37ddf8ffbbee117dcf6035b8b8ba09e965c52a05f8b03fa94849ccdffe61be6b2e2edcefef1bc0607a7f370087aed8f9212ce6a39542c798f83ebbdeb53fac0382bca835d3d56a80fe00fc2049ea8154b8bdc6f7a319accdc6af827fc0ee6efe480e08fd6bf4e9681705927fe63e437bf2ab9d983be67ee4780b9524d73310acd8d134350eddb72409d47cbf06d1ada9", 0xfef}], 0x1}, 0x48080) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4079, 0xfef}], 0x1}, 0x0) 11:21:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x7e8e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:07 executing program 5: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x2801000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:21:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2850.982724][T14814] memory: usage 307200kB, limit 307200kB, failcnt 42836 [ 2851.054002][T14814] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2851.121943][T14814] Memory cgroup stats for /syz2: [ 2851.122212][T14814] anon 143360 [ 2851.122212][T14814] file 221184 [ 2851.122212][T14814] kernel 314208256 [ 2851.122212][T14814] kernel_stack 65536 [ 2851.122212][T14814] pagetables 73728 [ 2851.122212][T14814] percpu 5435744 [ 2851.122212][T14814] sock 0 [ 2851.122212][T14814] vmalloc 16384 [ 2851.122212][T14814] shmem 221184 [ 2851.122212][T14814] zswap 0 [ 2851.122212][T14814] zswapped 0 [ 2851.122212][T14814] file_mapped 221184 [ 2851.122212][T14814] file_dirty 0 [ 2851.122212][T14814] file_writeback 0 [ 2851.122212][T14814] swapcached 0 11:21:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xbb220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2851.122212][T14814] anon_thp 0 [ 2851.122212][T14814] file_thp 0 [ 2851.122212][T14814] shmem_thp 0 [ 2851.122212][T14814] inactive_anon 159744 [ 2851.122212][T14814] active_anon 204800 [ 2851.122212][T14814] inactive_file 0 [ 2851.122212][T14814] active_file 0 [ 2851.122212][T14814] unevictable 0 [ 2851.122212][T14814] slab_reclaimable 26832 [ 2851.122212][T14814] slab_unreclaimable 308552520 [ 2851.122212][T14814] slab 308579352 11:21:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xbb220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2851.439035][T14814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14813,uid=0 [ 2851.455126][T14814] Memory cgroup out of memory: Killed process 14813 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:21:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4400}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1f2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2851.616066][T14824] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2851.674899][T14825] __nla_validate_parse: 8 callbacks suppressed [ 2851.674923][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2851.702302][T14824] CPU: 1 PID: 14824 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2851.712530][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2851.722612][T14824] Call Trace: [ 2851.725898][T14824] [ 2851.728857][T14824] dump_stack_lvl+0xcd/0x134 [ 2851.733468][T14824] dump_header+0x10b/0x7f9 [ 2851.737903][T14824] oom_kill_process.cold+0x10/0x15 [ 2851.743031][T14824] out_of_memory+0x358/0x14a0 [ 2851.747726][T14824] ? find_held_lock+0x2d/0x110 [ 2851.752525][T14824] ? oom_killer_disable+0x270/0x270 [ 2851.757748][T14824] ? find_held_lock+0x2d/0x110 [ 2851.762529][T14824] mem_cgroup_out_of_memory+0x206/0x270 [ 2851.768098][T14824] ? mem_cgroup_margin+0x130/0x130 [ 2851.773224][T14824] ? lock_downgrade+0x6e0/0x6e0 [ 2851.778115][T14824] try_charge_memcg+0xf67/0x13f0 [ 2851.783074][T14824] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2851.789082][T14824] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2851.794814][T14824] ? lock_downgrade+0x6e0/0x6e0 [ 2851.799679][T14824] ? lock_downgrade+0x6e0/0x6e0 [ 2851.804539][T14824] ? rcu_read_unlock+0x9/0x60 [ 2851.809247][T14824] obj_cgroup_charge+0x2ab/0x5e0 [ 2851.814226][T14824] ? copy_process+0x4ce/0x7090 [ 2851.819018][T14824] kmem_cache_alloc_node+0x92/0x3f0 [ 2851.824253][T14824] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2851.829482][T14824] copy_process+0x4ce/0x7090 [ 2851.834093][T14824] ? find_held_lock+0x2d/0x110 [ 2851.838880][T14824] ? __cleanup_sighand+0xb0/0xb0 [ 2851.843878][T14824] kernel_clone+0xe7/0xab0 [ 2851.848337][T14824] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2851.854355][T14824] ? create_io_thread+0xe0/0xe0 [ 2851.859230][T14824] ? find_held_lock+0x2d/0x110 [ 2851.864035][T14824] ? __ct_user_exit+0xff/0x150 [ 2851.868828][T14824] __do_sys_clone+0xba/0x100 [ 2851.873437][T14824] ? kernel_clone+0xab0/0xab0 [ 2851.878136][T14824] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2851.884069][T14824] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2851.889981][T14824] do_syscall_64+0x35/0xb0 [ 2851.894411][T14824] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2851.900321][T14824] RIP: 0033:0x7f074148a6a1 [ 2851.904744][T14824] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 11:21:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2851.924363][T14824] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2851.932790][T14824] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2851.940787][T14824] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2851.948767][T14824] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2851.956755][T14824] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2851.964742][T14824] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2851.972737][T14824] [ 2852.286324][T14824] memory: usage 307196kB, limit 307200kB, failcnt 42174 [ 2852.318494][T14824] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2852.325908][T14824] Memory cgroup stats for /syz3: [ 2852.326087][T14824] anon 159744 [ 2852.326087][T14824] file 143360 [ 2852.326087][T14824] kernel 314265600 [ 2852.326087][T14824] kernel_stack 65536 [ 2852.326087][T14824] pagetables 86016 [ 2852.326087][T14824] percpu 5436928 [ 2852.326087][T14824] sock 0 [ 2852.326087][T14824] vmalloc 8192 [ 2852.326087][T14824] shmem 143360 [ 2852.326087][T14824] zswap 0 [ 2852.326087][T14824] zswapped 0 [ 2852.326087][T14824] file_mapped 143360 [ 2852.326087][T14824] file_dirty 0 [ 2852.326087][T14824] file_writeback 0 [ 2852.326087][T14824] swapcached 0 [ 2852.326087][T14824] anon_thp 0 [ 2852.326087][T14824] file_thp 0 [ 2852.326087][T14824] shmem_thp 0 [ 2852.326087][T14824] inactive_anon 176128 [ 2852.326087][T14824] active_anon 126976 [ 2852.326087][T14824] inactive_file 0 [ 2852.326087][T14824] active_file 0 [ 2852.326087][T14824] unevictable 0 [ 2852.326087][T14824] slab_reclaimable 17144 [ 2852.326087][T14824] slab_unreclaimable 308622200 [ 2852.326087][T14824] slab 308639344 [ 2852.578785][T14824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14824,uid=0 [ 2852.626551][T14824] Memory cgroup out of memory: Killed process 14824 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2852.816720][T14842] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2852.886679][T14842] CPU: 1 PID: 14842 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2852.896917][T14842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2852.907041][T14842] Call Trace: [ 2852.910350][T14842] [ 2852.913309][T14842] dump_stack_lvl+0xcd/0x134 [ 2852.917946][T14842] dump_header+0x10b/0x7f9 [ 2852.922407][T14842] oom_kill_process.cold+0x10/0x15 [ 2852.927578][T14842] out_of_memory+0x358/0x14a0 [ 2852.932295][T14842] ? find_held_lock+0x2d/0x110 [ 2852.937083][T14842] ? oom_killer_disable+0x270/0x270 [ 2852.942320][T14842] ? find_held_lock+0x2d/0x110 [ 2852.947123][T14842] mem_cgroup_out_of_memory+0x206/0x270 [ 2852.952736][T14842] ? mem_cgroup_margin+0x130/0x130 [ 2852.957883][T14842] ? lock_downgrade+0x6e0/0x6e0 [ 2852.962790][T14842] try_charge_memcg+0xf67/0x13f0 [ 2852.967809][T14842] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2852.973840][T14842] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2852.979639][T14842] ? lock_downgrade+0x6e0/0x6e0 [ 2852.984506][T14842] ? lock_downgrade+0x6e0/0x6e0 [ 2852.989363][T14842] ? rcu_read_unlock+0x9/0x60 [ 2852.994154][T14842] obj_cgroup_charge+0x2ab/0x5e0 [ 2852.999111][T14842] ? copy_process+0x4ce/0x7090 [ 2853.003897][T14842] kmem_cache_alloc_node+0x92/0x3f0 [ 2853.009121][T14842] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2853.014353][T14842] copy_process+0x4ce/0x7090 [ 2853.018978][T14842] ? __lock_acquire+0xbc3/0x56d0 [ 2853.023935][T14842] ? __cleanup_sighand+0xb0/0xb0 [ 2853.028900][T14842] kernel_clone+0xe7/0xab0 [ 2853.033330][T14842] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2853.039340][T14842] ? create_io_thread+0xe0/0xe0 [ 2853.044227][T14842] ? find_held_lock+0x2d/0x110 [ 2853.049026][T14842] ? __ct_user_exit+0xff/0x150 [ 2853.053808][T14842] __do_sys_clone+0xba/0x100 [ 2853.058442][T14842] ? kernel_clone+0xab0/0xab0 [ 2853.063154][T14842] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2853.069108][T14842] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2853.075031][T14842] do_syscall_64+0x35/0xb0 [ 2853.079464][T14842] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2853.085370][T14842] RIP: 0033:0x7f5161e8a6a1 [ 2853.089801][T14842] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2853.109421][T14842] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2853.117852][T14842] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2853.125831][T14842] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2853.133808][T14842] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2853.141785][T14842] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2853.149762][T14842] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2853.157755][T14842] [ 2853.309785][T14842] memory: usage 307200kB, limit 307200kB, failcnt 42888 [ 2853.336097][T14842] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2853.356772][T14842] Memory cgroup stats for /syz2: [ 2853.366379][T14842] anon 159744 [ 2853.366379][T14842] file 221184 [ 2853.366379][T14842] kernel 314191872 [ 2853.366379][T14842] kernel_stack 65536 [ 2853.366379][T14842] pagetables 81920 [ 2853.366379][T14842] percpu 5435744 [ 2853.366379][T14842] sock 0 [ 2853.366379][T14842] vmalloc 16384 [ 2853.366379][T14842] shmem 221184 [ 2853.366379][T14842] zswap 0 [ 2853.366379][T14842] zswapped 0 [ 2853.366379][T14842] file_mapped 221184 [ 2853.366379][T14842] file_dirty 0 [ 2853.366379][T14842] file_writeback 0 [ 2853.366379][T14842] swapcached 0 [ 2853.366379][T14842] anon_thp 0 [ 2853.366379][T14842] file_thp 0 [ 2853.366379][T14842] shmem_thp 0 [ 2853.366379][T14842] inactive_anon 151552 [ 2853.366379][T14842] active_anon 204800 [ 2853.366379][T14842] inactive_file 0 [ 2853.366379][T14842] active_file 0 [ 2853.366379][T14842] unevictable 0 [ 2853.366379][T14842] slab_reclaimable 16760 [ 2853.366379][T14842] slab_unreclaimable 308541192 [ 2853.366379][T14842] slab 308557952 [ 2853.705501][T14842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14842,uid=0 [ 2853.765204][T14842] Memory cgroup out of memory: Killed process 14842 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:21:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x7a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2853.891314][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:21:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd5492ea54c7beef915d564c", 0x15) sendmsg$sock(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)="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", 0xfef}], 0x1}, 0x48080) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4079, 0xfef}], 0x1}, 0x0) [ 2854.004858][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd5492", 0xc) sendmsg$sock(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)="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", 0xfef}], 0x1}, 0x48080) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4079, 0xfef}], 0x1}, 0x0) 11:21:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1fa, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x788e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2854.606820][T14862] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2854.636701][T14862] CPU: 1 PID: 14862 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2854.646916][T14862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2854.657010][T14862] Call Trace: [ 2854.660350][T14862] [ 2854.663313][T14862] dump_stack_lvl+0xcd/0x134 [ 2854.667947][T14862] dump_header+0x10b/0x7f9 [ 2854.672408][T14862] oom_kill_process.cold+0x10/0x15 [ 2854.677563][T14862] out_of_memory+0x358/0x14a0 [ 2854.682283][T14862] ? find_held_lock+0x2d/0x110 [ 2854.687095][T14862] ? oom_killer_disable+0x270/0x270 [ 2854.692357][T14862] ? find_held_lock+0x2d/0x110 [ 2854.697173][T14862] mem_cgroup_out_of_memory+0x206/0x270 [ 2854.702758][T14862] ? mem_cgroup_margin+0x130/0x130 [ 2854.707903][T14862] ? lock_downgrade+0x6e0/0x6e0 [ 2854.712814][T14862] try_charge_memcg+0xf67/0x13f0 [ 2854.717805][T14862] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2854.723827][T14862] ? lock_downgrade+0x6e0/0x6e0 [ 2854.728727][T14862] charge_memcg+0x31/0x320 [ 2854.733193][T14862] __mem_cgroup_charge+0x27/0x90 [ 2854.738167][T14862] ? _compound_head+0x5d/0x150 [ 2854.742973][T14862] __handle_mm_fault+0x17df/0x39b0 [ 2854.748130][T14862] ? vm_iomap_memory+0x190/0x190 [ 2854.753135][T14862] handle_mm_fault+0x1c8/0x780 [ 2854.757938][T14862] do_user_addr_fault+0x475/0x1210 [ 2854.763103][T14862] exc_page_fault+0x94/0x170 [ 2854.767727][T14862] asm_exc_page_fault+0x22/0x30 [ 2854.772609][T14862] RIP: 0033:0x7f0741484695 [ 2854.777051][T14862] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2854.796691][T14862] RSP: 002b:00007f0741acfb98 EFLAGS: 00010202 [ 2854.802792][T14862] RAX: 00000000200003c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2854.810808][T14862] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200003c0 [ 2854.818790][T14862] RBP: 00007f0741acfc58 R08: 00007f07419a0000 R09: 00007f07415a00c8 [ 2854.826767][T14862] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00000000002b8e71 [ 2854.834743][T14862] R13: 00007f0741acfc80 R14: 00007f074159bf80 R15: 0000000000000032 [ 2854.842742][T14862] 11:21:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4500}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2854.957424][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2855.084043][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2855.126390][T14862] memory: usage 307180kB, limit 307200kB, failcnt 42299 [ 2855.154877][T14862] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:21:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x7a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2855.175901][T14862] Memory cgroup stats for /syz3: [ 2855.176118][T14862] anon 143360 [ 2855.176118][T14862] file 143360 [ 2855.176118][T14862] kernel 314265600 [ 2855.176118][T14862] kernel_stack 65536 [ 2855.176118][T14862] pagetables 86016 [ 2855.176118][T14862] percpu 5436928 [ 2855.176118][T14862] sock 0 [ 2855.176118][T14862] vmalloc 0 [ 2855.176118][T14862] shmem 143360 [ 2855.176118][T14862] zswap 0 [ 2855.176118][T14862] zswapped 0 [ 2855.176118][T14862] file_mapped 143360 [ 2855.176118][T14862] file_dirty 0 [ 2855.176118][T14862] file_writeback 0 [ 2855.176118][T14862] swapcached 0 [ 2855.176118][T14862] anon_thp 0 [ 2855.176118][T14862] file_thp 0 [ 2855.176118][T14862] shmem_thp 0 [ 2855.176118][T14862] inactive_anon 159744 [ 2855.176118][T14862] active_anon 126976 [ 2855.176118][T14862] inactive_file 0 [ 2855.176118][T14862] active_file 0 [ 2855.176118][T14862] unevictable 0 [ 2855.176118][T14862] slab_reclaimable 23696 [ 2855.176118][T14862] slab_unreclaimable 308623552 [ 2855.176118][T14862] slab 308647248 [ 2855.367415][T14862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14862,uid=0 [ 2855.591103][T14862] Memory cgroup out of memory: Killed process 14862 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2855.609422][T14869] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2855.626814][T14869] CPU: 0 PID: 14869 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2855.637028][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2855.647114][T14869] Call Trace: [ 2855.650425][T14869] [ 2855.653385][T14869] dump_stack_lvl+0xcd/0x134 [ 2855.658045][T14869] dump_header+0x10b/0x7f9 [ 2855.662510][T14869] oom_kill_process.cold+0x10/0x15 [ 2855.667682][T14869] out_of_memory+0x358/0x14a0 [ 2855.672424][T14869] ? oom_killer_disable+0x270/0x270 [ 2855.677695][T14869] ? find_held_lock+0x2d/0x110 [ 2855.682500][T14869] mem_cgroup_out_of_memory+0x206/0x270 [ 2855.688083][T14869] ? mem_cgroup_margin+0x130/0x130 [ 2855.693228][T14869] ? lock_downgrade+0x6e0/0x6e0 [ 2855.698138][T14869] try_charge_memcg+0xf67/0x13f0 [ 2855.703149][T14869] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2855.709180][T14869] ? lock_downgrade+0x6e0/0x6e0 [ 2855.711728][T14872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2855.714066][T14869] charge_memcg+0x31/0x320 [ 2855.714107][T14869] __mem_cgroup_charge+0x27/0x90 [ 2855.732767][T14869] ? _compound_head+0x5d/0x150 [ 2855.737571][T14869] wp_page_copy+0x27c/0x1b60 [ 2855.742205][T14869] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2855.747705][T14869] ? lock_downgrade+0x6e0/0x6e0 [ 2855.752594][T14869] ? vm_normal_page+0x146/0x2a0 [ 2855.757571][T14869] do_wp_page+0x1d1/0x1910 [ 2855.762009][T14869] __handle_mm_fault+0x1813/0x39b0 [ 2855.767139][T14869] ? vm_iomap_memory+0x190/0x190 [ 2855.772111][T14869] handle_mm_fault+0x1c8/0x780 [ 2855.776905][T14869] do_user_addr_fault+0x475/0x1210 [ 2855.782077][T14869] exc_page_fault+0x94/0x170 [ 2855.786714][T14869] asm_exc_page_fault+0x22/0x30 [ 2855.791586][T14869] RIP: 0033:0x7f5161e374b0 [ 2855.796022][T14869] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2855.815675][T14869] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2855.821759][T14869] RAX: 00000000098f1ddc RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2855.829744][T14869] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000d570f0d 11:21:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x5}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x788e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2855.837733][T14869] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2855.845711][T14869] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2855.853687][T14869] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2855.861681][T14869] ? __x64_sys_socket+0xd/0xb0 [ 2855.866487][T14869] 11:21:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x203, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2856.141628][T14869] memory: usage 307148kB, limit 307200kB, failcnt 42975 [ 2856.196748][T14869] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2856.226421][T14869] Memory cgroup stats for /syz2: [ 2856.226656][T14869] anon 135168 [ 2856.226656][T14869] file 221184 [ 2856.226656][T14869] kernel 314163200 [ 2856.226656][T14869] kernel_stack 65536 [ 2856.226656][T14869] pagetables 73728 [ 2856.226656][T14869] percpu 5435744 [ 2856.226656][T14869] sock 0 [ 2856.226656][T14869] vmalloc 16384 [ 2856.226656][T14869] shmem 221184 [ 2856.226656][T14869] zswap 0 [ 2856.226656][T14869] zswapped 0 [ 2856.226656][T14869] file_mapped 221184 [ 2856.226656][T14869] file_dirty 0 [ 2856.226656][T14869] file_writeback 0 [ 2856.226656][T14869] swapcached 0 [ 2856.226656][T14869] anon_thp 0 [ 2856.226656][T14869] file_thp 0 [ 2856.226656][T14869] shmem_thp 0 [ 2856.226656][T14869] inactive_anon 151552 [ 2856.226656][T14869] active_anon 204800 [ 2856.226656][T14869] inactive_file 0 [ 2856.226656][T14869] active_file 0 [ 2856.226656][T14869] unevictable 0 [ 2856.226656][T14869] slab_reclaimable 14832 [ 2856.226656][T14869] slab_unreclaimable 308528136 [ 2856.226656][T14869] slab 308542968 [ 2856.443393][T14869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14869,uid=0 [ 2856.485120][T14869] Memory cgroup out of memory: Killed process 14869 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:21:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4600}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2856.820606][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2856.867708][T14879] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2856.878179][T14879] CPU: 0 PID: 14879 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2856.888363][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2856.898440][T14879] Call Trace: [ 2856.901733][T14879] [ 2856.904681][T14879] dump_stack_lvl+0xcd/0x134 [ 2856.909302][T14879] dump_header+0x10b/0x7f9 [ 2856.913756][T14879] oom_kill_process.cold+0x10/0x15 [ 2856.918921][T14879] out_of_memory+0x358/0x14a0 [ 2856.923641][T14879] ? find_held_lock+0x2d/0x110 [ 2856.924145][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2856.928414][T14879] ? oom_killer_disable+0x270/0x270 [ 2856.928455][T14879] ? find_held_lock+0x2d/0x110 [ 2856.928483][T14879] mem_cgroup_out_of_memory+0x206/0x270 [ 2856.928512][T14879] ? mem_cgroup_margin+0x130/0x130 [ 2856.958433][T14879] ? lock_downgrade+0x6e0/0x6e0 [ 2856.963345][T14879] try_charge_memcg+0xf67/0x13f0 [ 2856.968335][T14879] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2856.974359][T14879] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2856.980113][T14879] ? lock_downgrade+0x6e0/0x6e0 [ 2856.985173][T14879] ? lock_downgrade+0x6e0/0x6e0 [ 2856.990049][T14879] ? rcu_read_unlock+0x9/0x60 [ 2856.994777][T14879] obj_cgroup_charge+0x2ab/0x5e0 [ 2856.999777][T14879] ? copy_process+0x4ce/0x7090 [ 2857.004572][T14879] kmem_cache_alloc_node+0x92/0x3f0 [ 2857.009808][T14879] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2857.015041][T14879] copy_process+0x4ce/0x7090 [ 2857.017964][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2857.019646][T14879] ? __lock_acquire+0xbc3/0x56d0 [ 2857.019692][T14879] ? __cleanup_sighand+0xb0/0xb0 [ 2857.038862][T14879] kernel_clone+0xe7/0xab0 [ 2857.043315][T14879] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2857.049333][T14879] ? create_io_thread+0xe0/0xe0 [ 2857.054227][T14879] ? find_held_lock+0x2d/0x110 [ 2857.059029][T14879] ? __ct_user_exit+0xff/0x150 [ 2857.063831][T14879] __do_sys_clone+0xba/0x100 [ 2857.068464][T14879] ? kernel_clone+0xab0/0xab0 [ 2857.073177][T14879] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2857.079093][T14879] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2857.085032][T14879] do_syscall_64+0x35/0xb0 [ 2857.089484][T14879] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2857.095414][T14879] RIP: 0033:0x7f074148a6a1 [ 2857.099859][T14879] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2857.119495][T14879] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2857.127928][T14879] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2857.135923][T14879] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2857.143930][T14879] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2857.151935][T14879] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2857.159940][T14879] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2857.167968][T14879] 11:21:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x7a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x788e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2857.336226][T14879] memory: usage 307196kB, limit 307200kB, failcnt 42384 [ 2857.344156][T14879] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2857.351605][T14879] Memory cgroup stats for /syz3: [ 2857.351795][T14879] anon 159744 [ 2857.351795][T14879] file 143360 [ 2857.351795][T14879] kernel 314265600 [ 2857.351795][T14879] kernel_stack 65536 [ 2857.351795][T14879] pagetables 86016 [ 2857.351795][T14879] percpu 5436928 [ 2857.351795][T14879] sock 0 [ 2857.351795][T14879] vmalloc 0 [ 2857.351795][T14879] shmem 143360 [ 2857.351795][T14879] zswap 0 [ 2857.351795][T14879] zswapped 0 [ 2857.351795][T14879] file_mapped 143360 [ 2857.351795][T14879] file_dirty 0 [ 2857.351795][T14879] file_writeback 0 [ 2857.351795][T14879] swapcached 0 [ 2857.351795][T14879] anon_thp 0 [ 2857.351795][T14879] file_thp 0 [ 2857.351795][T14879] shmem_thp 0 [ 2857.351795][T14879] inactive_anon 176128 [ 2857.351795][T14879] active_anon 126976 [ 2857.351795][T14879] inactive_file 0 [ 2857.351795][T14879] active_file 0 [ 2857.351795][T14879] unevictable 0 [ 2857.351795][T14879] slab_reclaimable 17144 [ 2857.351795][T14879] slab_unreclaimable 308626144 [ 2857.351795][T14879] slab 308643288 [ 2857.398000][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:21:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x22a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2857.727138][T14879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14879,uid=0 [ 2857.751856][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2857.827883][T14879] Memory cgroup out of memory: Killed process 14879 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2857.837074][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2858.002778][T14908] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2858.013223][T14908] CPU: 1 PID: 14908 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2858.023405][T14908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2858.033489][T14908] Call Trace: [ 2858.036800][T14908] [ 2858.039753][T14908] dump_stack_lvl+0xcd/0x134 [ 2858.044393][T14908] dump_header+0x10b/0x7f9 [ 2858.048890][T14908] oom_kill_process.cold+0x10/0x15 [ 2858.054046][T14908] out_of_memory+0x358/0x14a0 [ 2858.058770][T14908] ? find_held_lock+0x2d/0x110 [ 2858.063576][T14908] ? oom_killer_disable+0x270/0x270 [ 2858.068825][T14908] ? find_held_lock+0x2d/0x110 [ 2858.073635][T14908] mem_cgroup_out_of_memory+0x206/0x270 [ 2858.079237][T14908] ? mem_cgroup_margin+0x130/0x130 [ 2858.084383][T14908] ? lock_downgrade+0x6e0/0x6e0 [ 2858.089294][T14908] try_charge_memcg+0xf67/0x13f0 [ 2858.094278][T14908] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2858.100310][T14908] ? lock_downgrade+0x6e0/0x6e0 [ 2858.105215][T14908] charge_memcg+0x31/0x320 [ 2858.109675][T14908] __mem_cgroup_charge+0x27/0x90 [ 2858.114642][T14908] ? _compound_head+0x5d/0x150 [ 2858.119527][T14908] wp_page_copy+0x27c/0x1b60 [ 2858.124147][T14908] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2858.129624][T14908] ? lock_downgrade+0x6e0/0x6e0 [ 2858.134496][T14908] ? vm_normal_page+0x146/0x2a0 [ 2858.139400][T14908] do_wp_page+0x1d1/0x1910 [ 2858.143867][T14908] __handle_mm_fault+0x1813/0x39b0 [ 2858.149027][T14908] ? vm_iomap_memory+0x190/0x190 [ 2858.154096][T14908] handle_mm_fault+0x1c8/0x780 [ 2858.158893][T14908] do_user_addr_fault+0x475/0x1210 [ 2858.164061][T14908] exc_page_fault+0x94/0x170 [ 2858.168694][T14908] asm_exc_page_fault+0x22/0x30 [ 2858.173580][T14908] RIP: 0033:0x7f07414374b0 [ 2858.178018][T14908] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2858.197653][T14908] RSP: 002b:00007f0741acfab0 EFLAGS: 00010246 11:21:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x778e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2858.203842][T14908] RAX: 000000002feed7de RBX: 00007f074159c018 RCX: 0000001b2fa20000 [ 2858.211843][T14908] RDX: 0000000000000000 RSI: 0000001b2fa20018 RDI: 000000000a19aef0 [ 2858.212754][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2858.219825][T14908] RBP: 000000002feed7de R08: 00000000000017de R09: 000000002feed7e2 [ 2858.219850][T14908] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00007f0741590000 [ 2858.219867][T14908] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83bb623b [ 2858.219885][T14908] ? security_socket_create+0x3b/0xc0 [ 2858.219931][T14908] 11:21:15 executing program 5: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x2101000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:21:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2858.339519][T14908] memory: usage 307196kB, limit 307200kB, failcnt 42413 [ 2858.346726][T14908] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2858.376158][T14908] Memory cgroup stats for /syz3: [ 2858.376379][T14908] anon 139264 [ 2858.376379][T14908] file 143360 [ 2858.376379][T14908] kernel 314286080 [ 2858.376379][T14908] kernel_stack 65536 [ 2858.376379][T14908] pagetables 77824 [ 2858.376379][T14908] percpu 5436928 [ 2858.376379][T14908] sock 0 [ 2858.376379][T14908] vmalloc 0 [ 2858.376379][T14908] shmem 143360 [ 2858.376379][T14908] zswap 0 [ 2858.376379][T14908] zswapped 0 [ 2858.376379][T14908] file_mapped 143360 [ 2858.376379][T14908] file_dirty 0 [ 2858.376379][T14908] file_writeback 0 [ 2858.376379][T14908] swapcached 0 [ 2858.376379][T14908] anon_thp 0 [ 2858.376379][T14908] file_thp 0 [ 2858.376379][T14908] shmem_thp 0 [ 2858.376379][T14908] inactive_anon 131072 [ 2858.376379][T14908] active_anon 126976 [ 2858.376379][T14908] inactive_file 0 [ 2858.376379][T14908] active_file 0 [ 2858.376379][T14908] unevictable 0 [ 2858.376379][T14908] slab_reclaimable 30304 [ 2858.376379][T14908] slab_unreclaimable 308638768 [ 2858.376379][T14908] slab 308669072 11:21:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x758e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2858.722385][T14908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14908,uid=0 [ 2858.743359][T14908] Memory cgroup out of memory: Killed process 14908 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2858.800590][T14890] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2858.811343][T14890] CPU: 0 PID: 14890 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2858.821545][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2858.831632][T14890] Call Trace: [ 2858.834928][T14890] [ 2858.837877][T14890] dump_stack_lvl+0xcd/0x134 [ 2858.842497][T14890] dump_header+0x10b/0x7f9 [ 2858.846950][T14890] oom_kill_process.cold+0x10/0x15 [ 2858.852098][T14890] out_of_memory+0x358/0x14a0 [ 2858.856842][T14890] ? find_held_lock+0x2d/0x110 [ 2858.861638][T14890] ? oom_killer_disable+0x270/0x270 [ 2858.866873][T14890] ? find_held_lock+0x2d/0x110 [ 2858.871674][T14890] mem_cgroup_out_of_memory+0x206/0x270 [ 2858.877255][T14890] ? mem_cgroup_margin+0x130/0x130 [ 2858.882399][T14890] ? lock_downgrade+0x6e0/0x6e0 [ 2858.887302][T14890] try_charge_memcg+0xf67/0x13f0 [ 2858.892303][T14890] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2858.898366][T14890] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2858.904125][T14890] ? lock_downgrade+0x6e0/0x6e0 [ 2858.909013][T14890] ? lock_downgrade+0x6e0/0x6e0 [ 2858.913915][T14890] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2858.919498][T14890] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2858.925727][T14890] copy_process+0x145a/0x7090 [ 2858.930448][T14890] ? __lock_acquire+0xbc3/0x56d0 [ 2858.935438][T14890] ? __cleanup_sighand+0xb0/0xb0 [ 2858.940434][T14890] kernel_clone+0xe7/0xab0 [ 2858.944898][T14890] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2858.950918][T14890] ? create_io_thread+0xe0/0xe0 [ 2858.955814][T14890] ? find_held_lock+0x2d/0x110 [ 2858.960616][T14890] ? __ct_user_exit+0xff/0x150 [ 2858.964817][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2858.965402][T14890] __do_sys_clone+0xba/0x100 [ 2858.979322][T14890] ? kernel_clone+0xab0/0xab0 [ 2858.984060][T14890] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2858.990006][T14890] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2858.995961][T14890] do_syscall_64+0x35/0xb0 [ 2859.000422][T14890] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2859.006356][T14890] RIP: 0033:0x7f5161e8a6a1 [ 2859.010813][T14890] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2859.030456][T14890] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2859.038922][T14890] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 11:21:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x7}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x23a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2859.046928][T14890] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2859.054965][T14890] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2859.062964][T14890] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2859.070960][T14890] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2859.078985][T14890] [ 2859.128419][T14890] memory: usage 307200kB, limit 307200kB, failcnt 43072 [ 2859.135422][T14890] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.174706][T14890] Memory cgroup stats for /syz2: [ 2859.174892][T14890] anon 159744 [ 2859.174892][T14890] file 221184 [ 2859.174892][T14890] kernel 314191872 [ 2859.174892][T14890] kernel_stack 65536 [ 2859.174892][T14890] pagetables 81920 [ 2859.174892][T14890] percpu 5435744 [ 2859.174892][T14890] sock 0 [ 2859.174892][T14890] vmalloc 16384 [ 2859.174892][T14890] shmem 221184 [ 2859.174892][T14890] zswap 0 [ 2859.174892][T14890] zswapped 0 [ 2859.174892][T14890] file_mapped 221184 [ 2859.174892][T14890] file_dirty 0 [ 2859.174892][T14890] file_writeback 0 [ 2859.174892][T14890] swapcached 0 [ 2859.174892][T14890] anon_thp 0 [ 2859.174892][T14890] file_thp 0 [ 2859.174892][T14890] shmem_thp 0 [ 2859.174892][T14890] inactive_anon 176128 [ 2859.174892][T14890] active_anon 204800 [ 2859.174892][T14890] inactive_file 0 [ 2859.174892][T14890] active_file 0 [ 2859.174892][T14890] unevictable 0 [ 2859.174892][T14890] slab_reclaimable 16760 [ 2859.174892][T14890] slab_unreclaimable 308537656 [ 2859.174892][T14890] slab 308554416 [ 2859.424174][T14890] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14890,uid=0 [ 2859.524171][T14890] Memory cgroup out of memory: Killed process 14890 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2859.609651][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2859.632634][T14927] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2859.632672][T14927] CPU: 0 PID: 14927 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2859.632698][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2859.632713][T14927] Call Trace: [ 2859.632720][T14927] [ 2859.632731][T14927] dump_stack_lvl+0xcd/0x134 [ 2859.632767][T14927] dump_header+0x10b/0x7f9 [ 2859.632799][T14927] oom_kill_process.cold+0x10/0x15 [ 2859.632838][T14927] out_of_memory+0x358/0x14a0 [ 2859.632873][T14927] ? find_held_lock+0x2d/0x110 [ 2859.632897][T14927] ? oom_killer_disable+0x270/0x270 [ 2859.632928][T14927] ? find_held_lock+0x2d/0x110 [ 2859.632957][T14927] mem_cgroup_out_of_memory+0x206/0x270 [ 2859.632985][T14927] ? mem_cgroup_margin+0x130/0x130 [ 2859.633007][T14927] ? lock_downgrade+0x6e0/0x6e0 [ 2859.633052][T14927] try_charge_memcg+0xf67/0x13f0 [ 2859.633088][T14927] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2859.633119][T14927] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2859.633147][T14927] ? lock_downgrade+0x6e0/0x6e0 [ 2859.633176][T14927] ? lock_downgrade+0x6e0/0x6e0 [ 2859.633219][T14927] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2859.633251][T14927] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2859.633286][T14927] copy_process+0x145a/0x7090 [ 2859.633319][T14927] ? find_held_lock+0x2d/0x110 [ 2859.633357][T14927] ? __cleanup_sighand+0xb0/0xb0 [ 2859.633405][T14927] kernel_clone+0xe7/0xab0 [ 2859.633431][T14927] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2859.633462][T14927] ? create_io_thread+0xe0/0xe0 [ 2859.633497][T14927] ? find_held_lock+0x2d/0x110 [ 2859.633526][T14927] ? __ct_user_exit+0xff/0x150 [ 2859.633559][T14927] __do_sys_clone+0xba/0x100 11:21:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4700}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x778e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2859.633586][T14927] ? kernel_clone+0xab0/0xab0 [ 2859.633628][T14927] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2859.633658][T14927] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2859.633695][T14927] do_syscall_64+0x35/0xb0 [ 2859.633721][T14927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2859.633754][T14927] RIP: 0033:0x7f074148a6a1 [ 2859.633777][T14927] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2859.633801][T14927] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2859.633833][T14927] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2859.633851][T14927] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2859.633869][T14927] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2859.633885][T14927] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2859.633901][T14927] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2859.633937][T14927] [ 2859.634160][T14927] memory: usage 307200kB, limit 307200kB, failcnt 42492 [ 2859.634178][T14927] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.634194][T14927] Memory cgroup stats for /syz3: [ 2859.634350][T14927] anon 110592 [ 2859.634350][T14927] file 143360 [ 2859.634350][T14927] kernel 314318848 [ 2859.634350][T14927] kernel_stack 65536 [ 2859.634350][T14927] pagetables 77824 [ 2859.634350][T14927] percpu 5436928 [ 2859.634350][T14927] sock 0 [ 2859.634350][T14927] vmalloc 0 [ 2859.634350][T14927] shmem 143360 [ 2859.634350][T14927] zswap 0 [ 2859.634350][T14927] zswapped 0 [ 2859.634350][T14927] file_mapped 143360 [ 2859.634350][T14927] file_dirty 0 [ 2859.634350][T14927] file_writeback 0 [ 2859.634350][T14927] swapcached 0 [ 2859.634350][T14927] anon_thp 0 [ 2859.634350][T14927] file_thp 0 [ 2859.634350][T14927] shmem_thp 0 [ 2859.634350][T14927] inactive_anon 126976 [ 2859.634350][T14927] active_anon 126976 [ 2859.634350][T14927] inactive_file 0 [ 2859.634350][T14927] active_file 0 [ 2859.634350][T14927] unevictable 0 [ 2859.634350][T14927] slab_reclaimable 27216 [ 2859.634350][T14927] slab_unreclaimable 308657056 [ 2859.634350][T14927] slab 308684272 [ 2859.634405][T14927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14927,uid=0 [ 2859.634537][T14927] Memory cgroup out of memory: Killed process 14927 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2860.004473][T14934] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2860.276362][T14934] CPU: 1 PID: 14934 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2860.286592][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2860.296678][T14934] Call Trace: [ 2860.299983][T14934] [ 2860.302941][T14934] dump_stack_lvl+0xcd/0x134 [ 2860.307579][T14934] dump_header+0x10b/0x7f9 [ 2860.312140][T14934] oom_kill_process.cold+0x10/0x15 [ 2860.317298][T14934] out_of_memory+0x358/0x14a0 [ 2860.322019][T14934] ? find_held_lock+0x2d/0x110 [ 2860.326852][T14934] ? oom_killer_disable+0x270/0x270 [ 2860.332070][T14934] ? find_held_lock+0x2d/0x110 [ 2860.336891][T14934] mem_cgroup_out_of_memory+0x206/0x270 [ 2860.342444][T14934] ? mem_cgroup_margin+0x130/0x130 [ 2860.347561][T14934] ? lock_downgrade+0x6e0/0x6e0 [ 2860.352435][T14934] try_charge_memcg+0xf67/0x13f0 [ 2860.357388][T14934] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2860.363395][T14934] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2860.369134][T14934] ? lock_downgrade+0x6e0/0x6e0 [ 2860.374003][T14934] ? lock_downgrade+0x6e0/0x6e0 [ 2860.378950][T14934] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2860.384611][T14934] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2860.390782][T14934] copy_process+0x145a/0x7090 [ 2860.395492][T14934] ? __lock_acquire+0xbc3/0x56d0 [ 2860.400448][T14934] ? __cleanup_sighand+0xb0/0xb0 [ 2860.405425][T14934] kernel_clone+0xe7/0xab0 [ 2860.409850][T14934] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2860.415845][T14934] ? create_io_thread+0xe0/0xe0 [ 2860.420719][T14934] ? find_held_lock+0x2d/0x110 [ 2860.425495][T14934] ? __ct_user_exit+0xff/0x150 [ 2860.430272][T14934] __do_sys_clone+0xba/0x100 [ 2860.434892][T14934] ? kernel_clone+0xab0/0xab0 [ 2860.439594][T14934] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2860.445505][T14934] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2860.451416][T14934] do_syscall_64+0x35/0xb0 [ 2860.455842][T14934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2860.461764][T14934] RIP: 0033:0x7f5161e8a6a1 [ 2860.466187][T14934] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2860.485805][T14934] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2860.494229][T14934] RAX: ffffffffffffffda RBX: 00007f5162fca700 RCX: 00007f5161e8a6a1 [ 2860.502227][T14934] RDX: 00007f5162fca9d0 RSI: 00007f5162fca2f0 RDI: 00000000003d0f00 [ 2860.510221][T14934] RBP: 00007f51624cfcb0 R08: 00007f5162fca700 R09: 00007f5162fca700 [ 2860.518233][T14934] R10: 00007f5162fca9d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2860.526319][T14934] R13: 00007f51624cfb1f R14: 00007f5162fca300 R15: 0000000000022000 [ 2860.534327][T14934] [ 2860.556518][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:21:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x758e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd5492ea54c7beef915d564c90c200", 0x18) sendmsg$sock(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)="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", 0xfef}], 0x1}, 0x48080) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4079, 0xfef}], 0x1}, 0x0) 11:21:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x481d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2860.985826][T14934] memory: usage 307100kB, limit 307200kB, failcnt 43129 [ 2861.015009][T14934] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2861.034776][T14934] Memory cgroup stats for /syz2: [ 2861.035007][T14934] anon 98304 [ 2861.035007][T14934] file 221184 [ 2861.035007][T14934] kernel 314150912 [ 2861.035007][T14934] kernel_stack 32768 [ 2861.035007][T14934] pagetables 69632 [ 2861.035007][T14934] percpu 5435744 [ 2861.035007][T14934] sock 0 [ 2861.035007][T14934] vmalloc 16384 [ 2861.035007][T14934] shmem 221184 [ 2861.035007][T14934] zswap 0 [ 2861.035007][T14934] zswapped 0 [ 2861.035007][T14934] file_mapped 221184 [ 2861.035007][T14934] file_dirty 0 [ 2861.035007][T14934] file_writeback 0 [ 2861.035007][T14934] swapcached 0 [ 2861.035007][T14934] anon_thp 0 [ 2861.035007][T14934] file_thp 0 [ 2861.035007][T14934] shmem_thp 0 [ 2861.035007][T14934] inactive_anon 114688 [ 2861.035007][T14934] active_anon 204800 [ 2861.035007][T14934] inactive_file 0 [ 2861.035007][T14934] active_file 0 [ 2861.035007][T14934] unevictable 0 [ 2861.035007][T14934] slab_reclaimable 12904 [ 2861.035007][T14934] slab_unreclaimable 308538120 [ 2861.035007][T14934] slab 308551024 [ 2861.240069][T14934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14934,uid=0 11:21:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x23c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2861.275780][T14934] Memory cgroup out of memory: Killed process 14934 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 11:21:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x778e1400, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2861.516912][T14936] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2861.535001][T14936] CPU: 1 PID: 14936 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2861.545219][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2861.555289][T14936] Call Trace: [ 2861.558581][T14936] [ 2861.561525][T14936] dump_stack_lvl+0xcd/0x134 [ 2861.566155][T14936] dump_header+0x10b/0x7f9 [ 2861.570621][T14936] oom_kill_process.cold+0x10/0x15 [ 2861.575771][T14936] out_of_memory+0x358/0x14a0 [ 2861.580479][T14936] ? find_held_lock+0x2d/0x110 [ 2861.585269][T14936] ? oom_killer_disable+0x270/0x270 [ 2861.590504][T14936] ? find_held_lock+0x2d/0x110 [ 2861.595312][T14936] mem_cgroup_out_of_memory+0x206/0x270 [ 2861.600933][T14936] ? mem_cgroup_margin+0x130/0x130 [ 2861.606178][T14936] ? lock_downgrade+0x6e0/0x6e0 [ 2861.611096][T14936] try_charge_memcg+0xf67/0x13f0 [ 2861.616092][T14936] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2861.622132][T14936] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2861.627906][T14936] ? lock_downgrade+0x6e0/0x6e0 [ 2861.632806][T14936] ? lock_downgrade+0x6e0/0x6e0 [ 2861.637700][T14936] ? rcu_read_unlock+0x9/0x60 [ 2861.642432][T14936] obj_cgroup_charge+0x2ab/0x5e0 [ 2861.647417][T14936] ? copy_process+0x4ce/0x7090 [ 2861.652214][T14936] kmem_cache_alloc_node+0x92/0x3f0 [ 2861.657459][T14936] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2861.662718][T14936] copy_process+0x4ce/0x7090 [ 2861.667357][T14936] ? find_held_lock+0x2d/0x110 [ 2861.672168][T14936] ? __cleanup_sighand+0xb0/0xb0 [ 2861.677253][T14936] kernel_clone+0xe7/0xab0 [ 2861.681803][T14936] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2861.687830][T14936] ? create_io_thread+0xe0/0xe0 [ 2861.692730][T14936] ? find_held_lock+0x2d/0x110 [ 2861.697528][T14936] ? __ct_user_exit+0xff/0x150 [ 2861.702366][T14936] __do_sys_clone+0xba/0x100 [ 2861.706992][T14936] ? kernel_clone+0xab0/0xab0 [ 2861.711719][T14936] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2861.717698][T14936] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2861.723642][T14936] do_syscall_64+0x35/0xb0 [ 2861.728129][T14936] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2861.734056][T14936] RIP: 0033:0x7f074148a6a1 [ 2861.738496][T14936] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2861.758140][T14936] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2861.766590][T14936] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2861.774592][T14936] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2861.782595][T14936] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2861.790599][T14936] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2861.798613][T14936] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2861.806639][T14936] 11:21:19 executing program 5: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x1c01000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2862.075113][T14936] memory: usage 307184kB, limit 307200kB, failcnt 42591 [ 2862.103779][T14936] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2862.124263][T14936] Memory cgroup stats for /syz3: [ 2862.124484][T14936] anon 159744 [ 2862.124484][T14936] file 143360 [ 2862.124484][T14936] kernel 314253312 [ 2862.124484][T14936] kernel_stack 65536 [ 2862.124484][T14936] pagetables 86016 [ 2862.124484][T14936] percpu 5436928 [ 2862.124484][T14936] sock 0 [ 2862.124484][T14936] vmalloc 0 [ 2862.124484][T14936] shmem 143360 [ 2862.124484][T14936] zswap 0 [ 2862.124484][T14936] zswapped 0 [ 2862.124484][T14936] file_mapped 143360 [ 2862.124484][T14936] file_dirty 0 [ 2862.124484][T14936] file_writeback 0 [ 2862.124484][T14936] swapcached 0 [ 2862.124484][T14936] anon_thp 0 [ 2862.124484][T14936] file_thp 0 [ 2862.124484][T14936] shmem_thp 0 [ 2862.124484][T14936] inactive_anon 176128 [ 2862.124484][T14936] active_anon 126976 [ 2862.124484][T14936] inactive_file 0 [ 2862.124484][T14936] active_file 0 [ 2862.124484][T14936] unevictable 0 [ 2862.124484][T14936] slab_reclaimable 17144 [ 2862.124484][T14936] slab_unreclaimable 308615048 [ 2862.124484][T14936] slab 308632192 [ 2862.126786][T14948] __nla_validate_parse: 4 callbacks suppressed [ 2862.126804][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:21:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x710c0000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2862.136961][T14936] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14936,uid=0 [ 2862.439691][T14936] Memory cgroup out of memory: Killed process 14936 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2862.492494][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:21:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd5492ea54c7beef915d564c90c200", 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)="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", 0xfef}], 0x1}, 0x48080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4079, 0xfef}], 0x1}, 0x0) 11:21:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x9}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2862.769255][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2862.777035][T14955] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2862.789471][T14955] CPU: 1 PID: 14955 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2862.799670][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2862.809760][T14955] Call Trace: [ 2862.813064][T14955] [ 2862.816017][T14955] dump_stack_lvl+0xcd/0x134 [ 2862.820652][T14955] dump_header+0x10b/0x7f9 [ 2862.825115][T14955] oom_kill_process.cold+0x10/0x15 [ 2862.830273][T14955] out_of_memory+0x358/0x14a0 [ 2862.835036][T14955] ? find_held_lock+0x2d/0x110 [ 2862.839869][T14955] ? oom_killer_disable+0x270/0x270 [ 2862.845115][T14955] ? find_held_lock+0x2d/0x110 [ 2862.849955][T14955] mem_cgroup_out_of_memory+0x206/0x270 [ 2862.855542][T14955] ? mem_cgroup_margin+0x130/0x130 [ 2862.860687][T14955] ? lock_downgrade+0x6e0/0x6e0 [ 2862.865592][T14955] try_charge_memcg+0xf67/0x13f0 [ 2862.870577][T14955] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2862.876600][T14955] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2862.882367][T14955] ? lock_downgrade+0x6e0/0x6e0 [ 2862.887261][T14955] ? lock_downgrade+0x6e0/0x6e0 [ 2862.892164][T14955] ? rcu_read_unlock+0x9/0x60 [ 2862.896899][T14955] obj_cgroup_charge+0x2ab/0x5e0 [ 2862.901892][T14955] ? copy_process+0x4ce/0x7090 [ 2862.906690][T14955] kmem_cache_alloc_node+0x92/0x3f0 [ 2862.911920][T14955] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2862.917153][T14955] copy_process+0x4ce/0x7090 [ 2862.921776][T14955] ? find_held_lock+0x2d/0x110 [ 2862.926607][T14955] ? __cleanup_sighand+0xb0/0xb0 [ 2862.931686][T14955] kernel_clone+0xe7/0xab0 [ 2862.936148][T14955] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2862.942171][T14955] ? create_io_thread+0xe0/0xe0 [ 2862.947070][T14955] ? find_held_lock+0x2d/0x110 [ 2862.951875][T14955] ? __ct_user_exit+0xff/0x150 [ 2862.956688][T14955] __do_sys_clone+0xba/0x100 [ 2862.961329][T14955] ? kernel_clone+0xab0/0xab0 [ 2862.966059][T14955] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2862.971993][T14955] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2862.977939][T14955] do_syscall_64+0x35/0xb0 [ 2862.982396][T14955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2862.988334][T14955] RIP: 0033:0x7f5161e8a6a1 [ 2862.992774][T14955] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 11:21:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x258, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2863.012423][T14955] RSP: 002b:00007f51624cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2863.020880][T14955] RAX: ffffffffffffffda RBX: 00007f5162fa9700 RCX: 00007f5161e8a6a1 [ 2863.028929][T14955] RDX: 00007f5162fa99d0 RSI: 00007f5162fa92f0 RDI: 00000000003d0f00 [ 2863.036937][T14955] RBP: 00007f51624cfcb0 R08: 00007f5162fa9700 R09: 00007f5162fa9700 [ 2863.044943][T14955] R10: 00007f5162fa99d0 R11: 0000000000000206 R12: 00007f51624cfb1e [ 2863.052974][T14955] R13: 00007f51624cfb1f R14: 00007f5162fa9300 R15: 0000000000022000 [ 2863.061031][T14955] [ 2863.113418][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:21:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x23c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2863.305144][T14955] memory: usage 307200kB, limit 307200kB, failcnt 43207 [ 2863.323084][T14955] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2863.353627][T14955] Memory cgroup stats for /syz2: [ 2863.353860][T14955] anon 159744 [ 2863.353860][T14955] file 221184 [ 2863.353860][T14955] kernel 314191872 [ 2863.353860][T14955] kernel_stack 65536 [ 2863.353860][T14955] pagetables 81920 [ 2863.353860][T14955] percpu 5435744 [ 2863.353860][T14955] sock 0 [ 2863.353860][T14955] vmalloc 16384 [ 2863.353860][T14955] shmem 221184 [ 2863.353860][T14955] zswap 0 [ 2863.353860][T14955] zswapped 0 [ 2863.353860][T14955] file_mapped 221184 [ 2863.353860][T14955] file_dirty 0 [ 2863.353860][T14955] file_writeback 0 [ 2863.353860][T14955] swapcached 0 [ 2863.353860][T14955] anon_thp 0 [ 2863.353860][T14955] file_thp 0 [ 2863.353860][T14955] shmem_thp 0 [ 2863.353860][T14955] inactive_anon 176128 [ 2863.353860][T14955] active_anon 204800 [ 2863.353860][T14955] inactive_file 0 [ 2863.353860][T14955] active_file 0 [ 2863.353860][T14955] unevictable 0 [ 2863.353860][T14955] slab_reclaimable 16760 [ 2863.353860][T14955] slab_unreclaimable 308541192 [ 2863.353860][T14955] slab 308557952 11:21:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd5492ea54c7beef915d564c90c200", 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)="4f2800ad0583b65103e6818c735451464b898cedd8e47a599c8a7709e7c61b3b3c02522c4a8c08e200c5db0cbc0345d607449b9ac46e9ef00943c3e8f9127b80e7217006e3170b748144e26a787c2efbeee49fef2714b3e47486b365030925c54ed81b59863b2468244b332b633b2968aa8f499a8ec9f76823b4d8a2ab51354956edce04ac8a4d899efe45aa6c89bf052b6393f10d04f5bd257f6ebf551fdae0b50ceae5a97d3cf081021e47931273dc7c43e2ff3a68f05c51b603da6e7a17cf6f6d41d5e8a22be71a25c77183d61ea3ae3488ed8f48228b6b7d3c9b9cd65d74e8b1a6801d5fd082bd03a8be11e137b50e1db564c5ab9828d5d77d682aa7ad56c8837f20ce37eebaf28ffedbc9aa738a65a364174b9d1921c2f416a6abc94626c300cf3ed237e76d896a1354b7fa424352c76b922b6651fc5fa77d8fe3183efb6cfaa28a8aaa85deedd44e7e15086d735b4c05a3fade93774017b820a642e163ae9ce308a0eb878c89d4ca8c71c76d26076d324151dc5444cbd50cae52a4f58d509bed6bd15ad4362f2840066b43381e86487ef7e11bd489a12dcc53652bb724fb0b8fe37821de04cd4fa0119aff357ba03298cb56290b3b427319bc2c582ab12e3d52605a0f087e8da2baf6443e5c3969dde93bcbeb64085e5d4db7953e56040c7fddd5d978c851f1b218daba28a6ddf027a23eef5753ccb90db84f2a451c29872bd0bb5ae0081761fa5e081d612d55977ab6d66b2bb3e514785d62e6fcbd0dae2811f581adb69543448fea727c6cf1f31c89dbc32b542448ab54063178b1a3edeef1fe894334a5595b217b9b1d57692a6681027d961ddf16de746b452a03bc9c5cfa0a26b12f965ec2a32c75f7882ded3a8abcec1a45231601ddb2528d02a929599a7dcd5abf5409a6e1c9b1987afcd2ec36b2d96f4bde7af2103918e6c42040f74f620fec8f55cd839745d09427a5089afab7f82c06538b80b4a41abfc58453bb8c1e077a923086769e7df855c1d54077d8e02a51772c32664465477a87b32638e295c518740207a308b94155448267a071ead9cf36eed160726efa94085ce9da0d4bbb2c47d4cfd8544b619e21996d692b0b234b3d59ce64d5cc8334309cc3d8509e799712cd0adce9e13804a06b413616a03da338221380e02cc1d0f155a39a9da73b94ad1227f06a66e8692ec0c1a252b6aa226c0a7dd6c34b2249731feda98650396c510f6e15ba3d16b8b56860017345a83fd2f18a74684ff5bb1e4c2ebc795cf3d488ce8e2a5595ac95d0547094ecc6e41f561ffc8736c5e1ef93e6f77476c05c5f4e38b3c9702642855a206d459a4940a264d06d86a43e88b2f8d542eca39aa27fb88f27560d266b87e6ccf186fcddfa5bbe5d069324f121ede312702de3aa3bfe88a654726cb0a980980efca52fc3b19aa1162fd3f76ee5f979408df783e90cb8d3033d71710c6d3010a98f81a66374c7678a48e99481a48c4f50d7bfc9851a2cc9cafc885b190ae06e9a7aac141b8add9f702b57937e1f8f09adeb1e0cf01906f529d52c5a9a5468ade17c45d98dfe8e606720df4095ac0492b5eb915dad97b339cd05dbdfe0ac4f9f0a99a380f27cec516687cc77a13ad3c5649171f6f5f25fd516361a5fdacc62ad1268b7983c8848f8d17ae231860d5e38bd436293760a18c4af7a1d02d2e23859bd4c7976f4577a3e64172735b6504542f77d6750c1fb6f39c39211b2193511e0e510cda890b5e7a2cf90040860b46e310f268c04ca37bab0c804e75cd6899beab5fea6e0bc1a86dd029965ac84966da1d9064b073eb040f06f9ac719c8020d9f82db88ae7c15130c5f84f2158bcc32b464651b9fadde07f8ee01e6668cd6666190c7afa0f4d69158fc3140eea393929395d25c42d933fee0a6143311d5d46411704d5c09e6bf4ff4c689479a542f5dc497bc8a9195b94663303f742aa234cd9e001f169c81f8d50d0732daa76315ddec62e3ea42f9898eba5c4271adb0a6da3f079aa71134992b81e996164620abbdb751ac065ed3d0365a1fc2e44919ef3b1ef96095183e98762241863d68241b56584667d3c9af60a88aad7ad2654b6f06ada2f8f0adf901ce61c337fb61a7d5545d0ea28a299b643eb630f9e69ab4f585c3a2a41352e8e98ed9ac503aad3ec51d82e22975663c1b68bf90cb0a8bee0af18e0f1ea19548e115115ef53e05a17afbe3e16e7e2351fccea233b591188113b2ffa6eb61f89a089d65fe8225d7887ab978d1beaa59dbf35e38ad6f9df197232ca1903a021ff374d515107a0ba1f7ce4da49f68d146169f93533237fb5407843f06531962ed055d21d1ab19d4f5cf2e841d75c0e99cb7adc29f09908df4b2438377660ff705ccd728ffe5b4d6f0cd40af882a25a7972b3a8e555715f1b09a88599e349786935d61319d7aff0279f51e82f10a8bbd42b0f1d144281c651e1574ba61f2e9e8c5459cb20f1279f2739f1f346a3e13efe5a058d7e597de97d52d0a8366c6c63ac6b2e45c0f30132a6da7132e42060437895c00ae3d53ca520c90771fdbcf5b9f69bdb75accd6b800c1dc334de90b776f6290b71ad8a36fa7583bb35ae1f4af160ed9399e9d3338bdf1cdef45c22532ef2c3055b96669e6dffb6124656e77789e677362d061d2121b228805c505a7db4241d0346444b0d793d3a4046dcf7f28174d5b29abf2d7244d87213a39a36b6eb90fcc0d5510d2928060cc358f14e52560dd734906bed04a7e308744d7184ac351d138cbb7cf1418c5abc4315220d5872f8d577a2f54df9faf46dff74df05bbe281b4da4c462ddef29a5adc3bc831021283f3b85ffd97602c4c833f2601c44dc2be14fd4560f528326a3197a5e3c05e525237fcbdac07bad24b881eac1d513cc250d97e83e7cd2145c445de33228a39b1d7521d323f0c391337727e6cf6542a2244fca66410747a91d4c30e2e0efe1fb2468645f19de109ed04f2e901069837ed8b27217efcf9719d272e752b2e7663984d716be2e65b6a3931ec17ea64898eddfdb82db21602ddd9d0a2d7993d42448718a22e545c239eedd354e9fe84f3dfd4b684929cbdea7683dcf9ad339df8ecd6753186a725492f86908db86ae61d2907e3cd0d182b32e6e3b1654b4e667534ce345450de1c74920babd7a11d5f188a7cd452ceacd618cdaf3b7cb1ffea009bdac2e786e76707cb1e5f8d431e13243f9bddfecfd25086904f6760cb76ac72b3ce1f8b877d33bc32873f3e3c8038962ac7d505e0d2031d66d5ebf41da89f66c9960836fc986b97bd48e5162e0d53cb360dece67f3174b0c29b048ece147c14f2a6869eb7d755380391cbd6b644c1e03d0e1c5c03b44b0bca774fd59b2f6d72fbd458b96cf271fe3c1877a861695b9ec9dc2e1d8c4fc823009af2495e05a75a338579c92dda8f8182d9e7a3d7a629e4c94ab02423cbde932e14719e8a980dcfe540c24a2e8c7ff17655a0abfe0955f117df997a8d1d0db3a72f4cb2c41f525d971f8f29fa03354c54a91c41b1aba8d42958eb37aaa52919fddf45ec2e7e154199ff5296fd7dca586da6114f104c2690fc2cc793bce7f4902fc12b22e6346c657a4d63028f2bbf653e7357ebbe3d0b48a7d0e1ac37047e85489d4372535e8d811913ad5cb8d62ffd085b33eb78ecbe4b594b5ad27342b63a9a57a3c151e63e65ddba0195366cd8e4ed0f1e33b4cfe8c9d7b0cb73e418cc7d6a7dc3638caa1510429f460919bfcc05ee160f6e81b870aa454cbdc73d54cf9343f06e45eb83e38540913e4b4fbb4c0136381d70a64469d18c8872103d4e4efa13679ce5c1e69449a71fc0f615b1bcd88023076a9f912045bd6067f3c91b85e19ead8425d72c7fb9896550f56d737877ece90b54ad3898d12b84c7acec00160316354be3dafeedfd6b31fb198bf6d8c807d1342feaa361f5265083e533bb6840ec4aafce82be451367616e5e3ae2212416c05ee38dcc41957d5e1a702aaa6ea658ffe8932a14a23016dc25328a43791080f464e49fa26717fded766bf99efefdac43d7e5db52fd5a262c32e1c9da4a7148f9e4e6ef650a7df1bbb8c16796f36924447fd9ba51429c97f73c52f117d50f04a9bbffe3b5303fe827a536eb1ccd22dbda0a1d07212f3a304d73aa6f98ec8cec29168c433f4f29833d77bd8cb47c1eac3ac6db9522695c78032729f79276529bef4e533a93d6d157c36bd4ba50cd775fc008a28a0d041c2a0629c4e64b19b20a0655e58f22bb3995b772dd4535967902ef22596a4482dc56a55df5776b91a8ed0dd9238a04e3b7381b562ed55a99f6dc797fbeb7f8734735e8aaa271a3aceea68cf69dc7e8bf5cf300ebfb6b4895d843537312f2d019e8a4fc8804736ff6b34f65319a3ec2f8db98f203cfe7a35d76efc6d09352a4f40107408463e9c3e75ca3bd82f831f1e3f986fdcfefc9ce7a6a42741ccb2b4bda84bb64ce47fd26fc31ec7c202e16b5a9fa7d799373576fad2dac581c0f5e7146594385745e0d0b19d58e1fb582f9c57c78859b2ff6ed15c386d48ffa687281952ce394d2be2a5599592dca7e7bab7dfc310d43870b32c41fe0d05f42cafd4fb42960addc75848666bb9d5f3e9a5afaa74968d7dd5729b5de6da2685c316962a80bdad3f2c2989136dca1206fd8adc4161f54c8c58b33c665b51089e39b0a2e5e9ac709117bd092331a29e3e41f5fd83e20b7addc73bdf7854b9c3ab2cdba47a238c243f6597ed3c082c15eb8104b9ba1456d7ca9641499631ce89b491c992cb0540d940b9fc6b06b554813f6cb36c49a1a618b35b82f5214c3a7438c15a677155b6af54bfad1fae2813a91579a876cd147d2d5e4e8f25bdd4521c51f5a32b8f5b0c692bc1dc6c0702e12113cbbb1c5893446c9f17dfd0c08c61965f580d5f71f92a4b87ce9d137971c70b976d9cd8cff96d89c564a552dbecdad9da438dcee1a84384996782317d3248a8c5f36803d7f9c5105d4c79251a93285a77c35cb7a24e796ec723ce00632ca86c8f49f70b88c3b3952818f7704bfd31767fbf50b07109e227bf2bd2daa28f1945edd2e3ee0ffb66e22ddcbdcae0992ea22866e1c63f45826d172c2bed7b98f41e21031e0658137f045214b8f054cd371e3a81254de6807eabb6220cfa642401ac1bec3217cd3f87f63b2e0ea60a747deb7d2bec3ba0bd0031c3db76bdc30bb509dd1440e55c4085c46e0a74367d335e4adb45a6a915576446aea6848f91f1caa636f4e2d2b848eb2da6293b114376ff4f2a49f60a5d69084cb3deb31d468ac73ac5e2782c9e0969064a836a84ba1d9908d749215a801bb0ba6e45371415fab39ddbbbafe76e887fdcbbcede7c0357f7ca69bada7c686c321c563d1c2bc3737424b2a660b37f2ba72b6d36f42b39d074a7131772115d56fc00c10abd5106ddd9d95e3a762f7482dd1a98735814d9af950d729ca6de30a50543a986242335996f218ccd168c3ad5d3ff4289c788d355bf7ae2389a488615c1bf307b9dcc5e1fdf3d1cc55d67afdbcd0a046a5f7355b52ca0e6cc8f170179af180ef83732d7ad12bb2c72286f1dac37ddf8ffbbee117dcf6035b8b8ba09e965c52a05f8b03fa94849ccdffe61be6b2e2edcefef1bc0607a7f370087aed8f9212ce6a39542c798f83ebbdeb53fac0382bca835d3d56a80fe00fc2049ea8154b8bdc6f7a319accdc6af827fc0ee6efe480e08fd6bf4e9681705927fe63e437bf2ab9d983be67ee4780b9524d73310acd8d134350eddb72409d47cbf06d1ada9", 0xfef}], 0x1}, 0x48080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4079, 0xfef}], 0x1}, 0x0) 11:21:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x6a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25c, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2863.707186][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2863.819858][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2863.828864][T14955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14955,uid=0 [ 2863.869300][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2863.937208][T14955] Memory cgroup out of memory: Killed process 14955 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:21:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4900}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x68000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2864.133299][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2864.160596][T14992] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2864.171148][T14992] CPU: 1 PID: 14992 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2864.181351][T14992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2864.191444][T14992] Call Trace: [ 2864.194836][T14992] [ 2864.197790][T14992] dump_stack_lvl+0xcd/0x134 [ 2864.202428][T14992] dump_header+0x10b/0x7f9 [ 2864.206888][T14992] oom_kill_process.cold+0x10/0x15 [ 2864.212049][T14992] out_of_memory+0x358/0x14a0 [ 2864.216777][T14992] ? find_held_lock+0x2d/0x110 [ 2864.221585][T14992] ? oom_killer_disable+0x270/0x270 [ 2864.226832][T14992] ? find_held_lock+0x2d/0x110 [ 2864.231634][T14992] mem_cgroup_out_of_memory+0x206/0x270 [ 2864.237219][T14992] ? mem_cgroup_margin+0x130/0x130 [ 2864.242361][T14992] ? lock_downgrade+0x6e0/0x6e0 [ 2864.247266][T14992] try_charge_memcg+0xf67/0x13f0 [ 2864.252264][T14992] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2864.258305][T14992] ? lock_downgrade+0x6e0/0x6e0 [ 2864.263210][T14992] charge_memcg+0x31/0x320 [ 2864.267669][T14992] __mem_cgroup_charge+0x27/0x90 [ 2864.272640][T14992] ? _compound_head+0x5d/0x150 [ 2864.277482][T14992] wp_page_copy+0x27c/0x1b60 [ 2864.282112][T14992] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2864.287607][T14992] ? lock_downgrade+0x6e0/0x6e0 [ 2864.292493][T14992] ? vm_normal_page+0x146/0x2a0 [ 2864.297475][T14992] do_wp_page+0x1d1/0x1910 [ 2864.301912][T14992] __handle_mm_fault+0x1813/0x39b0 [ 2864.307040][T14992] ? vm_iomap_memory+0x190/0x190 [ 2864.312010][T14992] handle_mm_fault+0x1c8/0x780 [ 2864.316790][T14992] do_user_addr_fault+0x475/0x1210 [ 2864.321927][T14992] exc_page_fault+0x94/0x170 [ 2864.326535][T14992] asm_exc_page_fault+0x22/0x30 [ 2864.331393][T14992] RIP: 0033:0x7f5161e374b0 [ 2864.335815][T14992] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2864.355444][T14992] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2864.361531][T14992] RAX: 00000000098f1ddc RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2864.369506][T14992] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000d570f0d [ 2864.377480][T14992] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2864.385468][T14992] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2864.393442][T14992] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2864.401419][T14992] ? __x64_sys_socket+0xd/0xb0 [ 2864.406212][T14992] 11:21:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2864.547971][T14992] memory: usage 307192kB, limit 307200kB, failcnt 43227 [ 2864.563909][T14992] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2864.571232][T14992] Memory cgroup stats for /syz2: [ 2864.571466][T14992] anon 135168 [ 2864.571466][T14992] file 221184 [ 2864.571466][T14992] kernel 314208256 [ 2864.571466][T14992] kernel_stack 65536 [ 2864.571466][T14992] pagetables 73728 [ 2864.571466][T14992] percpu 5435744 [ 2864.571466][T14992] sock 0 [ 2864.571466][T14992] vmalloc 16384 [ 2864.571466][T14992] shmem 221184 [ 2864.571466][T14992] zswap 0 [ 2864.571466][T14992] zswapped 0 [ 2864.571466][T14992] file_mapped 221184 [ 2864.571466][T14992] file_dirty 0 [ 2864.571466][T14992] file_writeback 0 [ 2864.571466][T14992] swapcached 0 [ 2864.571466][T14992] anon_thp 0 [ 2864.571466][T14992] file_thp 0 [ 2864.571466][T14992] shmem_thp 0 [ 2864.571466][T14992] inactive_anon 151552 [ 2864.571466][T14992] active_anon 204800 [ 2864.571466][T14992] inactive_file 0 [ 2864.571466][T14992] active_file 0 [ 2864.571466][T14992] unevictable 0 [ 2864.571466][T14992] slab_reclaimable 29920 [ 2864.571466][T14992] slab_unreclaimable 308553512 [ 2864.571466][T14992] slab 308583432 [ 2864.761288][T14992] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14992,uid=0 [ 2864.777129][T14992] Memory cgroup out of memory: Killed process 14992 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2864.828390][T14966] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2864.855674][T14966] CPU: 0 PID: 14966 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2864.865930][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2864.876021][T14966] Call Trace: [ 2864.879302][T14966] [ 2864.882236][T14966] dump_stack_lvl+0xcd/0x134 [ 2864.886845][T14966] dump_header+0x10b/0x7f9 [ 2864.891279][T14966] oom_kill_process.cold+0x10/0x15 [ 2864.896405][T14966] out_of_memory+0x358/0x14a0 [ 2864.901102][T14966] ? find_held_lock+0x2d/0x110 [ 2864.905873][T14966] ? oom_killer_disable+0x270/0x270 [ 2864.911087][T14966] ? find_held_lock+0x2d/0x110 [ 2864.915861][T14966] mem_cgroup_out_of_memory+0x206/0x270 [ 2864.921416][T14966] ? mem_cgroup_margin+0x130/0x130 [ 2864.926534][T14966] ? lock_downgrade+0x6e0/0x6e0 [ 2864.931406][T14966] try_charge_memcg+0xf67/0x13f0 [ 2864.936362][T14966] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2864.942353][T14966] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2864.948080][T14966] ? lock_downgrade+0x6e0/0x6e0 [ 2864.952944][T14966] ? lock_downgrade+0x6e0/0x6e0 [ 2864.957993][T14966] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2864.963554][T14966] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2864.969729][T14966] copy_process+0x607/0x7090 [ 2864.974345][T14966] ? find_held_lock+0x2d/0x110 [ 2864.979129][T14966] ? __cleanup_sighand+0xb0/0xb0 [ 2864.984106][T14966] kernel_clone+0xe7/0xab0 [ 2864.988529][T14966] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2864.994518][T14966] ? create_io_thread+0xe0/0xe0 [ 2864.999385][T14966] ? find_held_lock+0x2d/0x110 [ 2865.004172][T14966] ? __ct_user_exit+0xff/0x150 [ 2865.008954][T14966] __do_sys_clone+0xba/0x100 [ 2865.013552][T14966] ? kernel_clone+0xab0/0xab0 [ 2865.018248][T14966] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2865.024168][T14966] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2865.030082][T14966] do_syscall_64+0x35/0xb0 [ 2865.034519][T14966] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2865.040439][T14966] RIP: 0033:0x7f074148a6a1 [ 2865.044862][T14966] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2865.064480][T14966] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:21:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4a00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2865.072898][T14966] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2865.080872][T14966] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2865.088862][T14966] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2865.096851][T14966] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2865.104833][T14966] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2865.112826][T14966] [ 2865.269424][T14966] memory: usage 307200kB, limit 307200kB, failcnt 42731 [ 2865.277870][T14966] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2865.291663][T14966] Memory cgroup stats for /syz3: [ 2865.291842][T14966] anon 159744 [ 2865.291842][T14966] file 143360 [ 2865.291842][T14966] kernel 314269696 [ 2865.291842][T14966] kernel_stack 65536 [ 2865.291842][T14966] pagetables 86016 [ 2865.291842][T14966] percpu 5436928 [ 2865.291842][T14966] sock 0 [ 2865.291842][T14966] vmalloc 0 [ 2865.291842][T14966] shmem 143360 [ 2865.291842][T14966] zswap 0 [ 2865.291842][T14966] zswapped 0 [ 2865.291842][T14966] file_mapped 143360 [ 2865.291842][T14966] file_dirty 0 [ 2865.291842][T14966] file_writeback 0 [ 2865.291842][T14966] swapcached 0 [ 2865.291842][T14966] anon_thp 0 [ 2865.291842][T14966] file_thp 0 [ 2865.291842][T14966] shmem_thp 0 [ 2865.291842][T14966] inactive_anon 176128 [ 2865.291842][T14966] active_anon 126976 [ 2865.291842][T14966] inactive_file 0 [ 2865.291842][T14966] active_file 0 [ 2865.291842][T14966] unevictable 0 [ 2865.291842][T14966] slab_reclaimable 17144 [ 2865.291842][T14966] slab_unreclaimable 308622304 [ 2865.291842][T14966] slab 308639448 [ 2865.483327][T14966] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14966,uid=0 [ 2865.514895][T14966] Memory cgroup out of memory: Killed process 14966 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2865.719706][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0xa}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x26a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2865.920401][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2865.936066][T15005] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2865.977926][T15005] CPU: 0 PID: 15005 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2865.988167][T15005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2865.998266][T15005] Call Trace: [ 2866.001560][T15005] [ 2866.004509][T15005] dump_stack_lvl+0xcd/0x134 [ 2866.009130][T15005] dump_header+0x10b/0x7f9 [ 2866.013589][T15005] oom_kill_process.cold+0x10/0x15 [ 2866.018735][T15005] out_of_memory+0x358/0x14a0 [ 2866.023719][T15005] ? find_held_lock+0x2d/0x110 [ 2866.028524][T15005] ? oom_killer_disable+0x270/0x270 [ 2866.033773][T15005] ? find_held_lock+0x2d/0x110 [ 2866.038586][T15005] mem_cgroup_out_of_memory+0x206/0x270 [ 2866.044184][T15005] ? mem_cgroup_margin+0x130/0x130 [ 2866.049333][T15005] ? lock_downgrade+0x6e0/0x6e0 [ 2866.054242][T15005] try_charge_memcg+0xf67/0x13f0 [ 2866.059231][T15005] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2866.065259][T15005] ? lock_downgrade+0x6e0/0x6e0 [ 2866.070171][T15005] charge_memcg+0x31/0x320 [ 2866.074620][T15005] __mem_cgroup_charge+0x27/0x90 [ 2866.079589][T15005] ? _compound_head+0x5d/0x150 [ 2866.084391][T15005] wp_page_copy+0x27c/0x1b60 [ 2866.089021][T15005] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2866.094513][T15005] ? lock_downgrade+0x6e0/0x6e0 [ 2866.099405][T15005] ? vm_normal_page+0x146/0x2a0 [ 2866.104306][T15005] do_wp_page+0x52c/0x1910 [ 2866.108754][T15005] __handle_mm_fault+0x1813/0x39b0 [ 2866.113932][T15005] ? vm_iomap_memory+0x190/0x190 [ 2866.118943][T15005] handle_mm_fault+0x1c8/0x780 [ 2866.123748][T15005] do_user_addr_fault+0x475/0x1210 [ 2866.128909][T15005] exc_page_fault+0x94/0x170 [ 2866.133546][T15005] asm_exc_page_fault+0x22/0x30 [ 2866.138433][T15005] RIP: 0033:0x7f5161e34565 [ 2866.142881][T15005] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 5e 3b 16 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d 89 ba 56 00 4c 39 ea 0f [ 2866.162524][T15005] RSP: 002b:00007f51624cfb60 EFLAGS: 00010202 [ 2866.168630][T15005] RAX: 0000000000000004 RBX: 00007f5161f9c050 RCX: 00007f5161f980c0 [ 2866.176642][T15005] RDX: 00007f5161f980d0 RSI: 0000000000000080 RDI: 00007f5161f9c050 [ 2866.184654][T15005] RBP: 00007f5161f9bf80 R08: 00007ffdc54c0080 R09: 00000000000000d0 [ 2866.192682][T15005] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00000000002bba5b [ 2866.200689][T15005] R13: 00007f51624cfc80 R14: 00007f5161f9c050 R15: 0000000000000032 [ 2866.208712][T15005] 11:21:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x68000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2866.465537][T15005] memory: usage 307184kB, limit 307200kB, failcnt 43314 11:21:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x272, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2866.724024][T15005] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2866.745410][T15005] Memory cgroup stats for /syz2: [ 2866.745637][T15005] anon 110592 [ 2866.745637][T15005] file 221184 [ 2866.745637][T15005] kernel 314224640 [ 2866.745637][T15005] kernel_stack 98304 [ 2866.745637][T15005] pagetables 73728 [ 2866.745637][T15005] percpu 5435744 [ 2866.745637][T15005] sock 0 [ 2866.745637][T15005] vmalloc 16384 [ 2866.745637][T15005] shmem 221184 [ 2866.745637][T15005] zswap 0 [ 2866.745637][T15005] zswapped 0 [ 2866.745637][T15005] file_mapped 221184 [ 2866.745637][T15005] file_dirty 0 [ 2866.745637][T15005] file_writeback 0 [ 2866.745637][T15005] swapcached 0 [ 2866.745637][T15005] anon_thp 0 [ 2866.745637][T15005] file_thp 0 [ 2866.745637][T15005] shmem_thp 0 [ 2866.745637][T15005] inactive_anon 126976 [ 2866.745637][T15005] active_anon 204800 [ 2866.745637][T15005] inactive_file 0 [ 2866.745637][T15005] active_file 0 [ 2866.745637][T15005] unevictable 0 [ 2866.745637][T15005] slab_reclaimable 16760 [ 2866.745637][T15005] slab_unreclaimable 308548696 [ 2866.745637][T15005] slab 308565456 [ 2866.977367][T15005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15005,uid=0 [ 2867.023644][T15005] Memory cgroup out of memory: Killed process 15005 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:21:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4b00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2867.131872][T15023] __nla_validate_parse: 4 callbacks suppressed [ 2867.131894][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:24 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x1300000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2867.175346][T15011] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2867.247013][T15011] CPU: 1 PID: 15011 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2867.257252][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2867.267342][T15011] Call Trace: [ 2867.270646][T15011] [ 2867.273603][T15011] dump_stack_lvl+0xcd/0x134 [ 2867.278242][T15011] dump_header+0x10b/0x7f9 [ 2867.282702][T15011] oom_kill_process.cold+0x10/0x15 [ 2867.287857][T15011] out_of_memory+0x358/0x14a0 [ 2867.292666][T15011] ? find_held_lock+0x2d/0x110 [ 2867.297468][T15011] ? oom_killer_disable+0x270/0x270 [ 2867.302724][T15011] ? find_held_lock+0x2d/0x110 [ 2867.307536][T15011] mem_cgroup_out_of_memory+0x206/0x270 [ 2867.313121][T15011] ? mem_cgroup_margin+0x130/0x130 [ 2867.318272][T15011] ? lock_downgrade+0x6e0/0x6e0 [ 2867.323178][T15011] try_charge_memcg+0xf67/0x13f0 [ 2867.328153][T15011] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2867.334147][T15011] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2867.339880][T15011] ? lock_downgrade+0x6e0/0x6e0 [ 2867.344742][T15011] ? lock_downgrade+0x6e0/0x6e0 [ 2867.349599][T15011] ? rcu_read_unlock+0x9/0x60 [ 2867.354301][T15011] obj_cgroup_charge+0x2ab/0x5e0 [ 2867.359253][T15011] ? copy_process+0x4ce/0x7090 [ 2867.364029][T15011] kmem_cache_alloc_node+0x92/0x3f0 [ 2867.369240][T15011] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2867.374473][T15011] copy_process+0x4ce/0x7090 [ 2867.379092][T15011] ? find_held_lock+0x2d/0x110 [ 2867.383877][T15011] ? __cleanup_sighand+0xb0/0xb0 [ 2867.388841][T15011] kernel_clone+0xe7/0xab0 [ 2867.393271][T15011] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2867.399276][T15011] ? create_io_thread+0xe0/0xe0 [ 2867.404147][T15011] ? find_held_lock+0x2d/0x110 [ 2867.408925][T15011] ? __ct_user_exit+0xff/0x150 [ 2867.413714][T15011] __do_sys_clone+0xba/0x100 [ 2867.418318][T15011] ? kernel_clone+0xab0/0xab0 [ 2867.423104][T15011] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2867.429014][T15011] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2867.434937][T15011] do_syscall_64+0x35/0xb0 [ 2867.439367][T15011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2867.445289][T15011] RIP: 0033:0x7f074148a6a1 [ 2867.449710][T15011] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2867.469425][T15011] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2867.477852][T15011] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2867.485840][T15011] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2867.493853][T15011] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2867.501852][T15011] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2867.509831][T15011] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2867.517833][T15011] 11:21:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x5a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2867.686939][T15011] memory: usage 307196kB, limit 307200kB, failcnt 42791 [ 2867.694049][T15011] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:21:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x68000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2867.749170][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2867.808826][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2867.816153][T15011] Memory cgroup stats for /syz3: [ 2867.818543][T15011] anon 159744 [ 2867.818543][T15011] file 143360 [ 2867.818543][T15011] kernel 314265600 [ 2867.818543][T15011] kernel_stack 65536 [ 2867.818543][T15011] pagetables 86016 [ 2867.818543][T15011] percpu 5436928 [ 2867.818543][T15011] sock 0 [ 2867.818543][T15011] vmalloc 0 [ 2867.818543][T15011] shmem 143360 [ 2867.818543][T15011] zswap 0 [ 2867.818543][T15011] zswapped 0 [ 2867.818543][T15011] file_mapped 143360 [ 2867.818543][T15011] file_dirty 0 [ 2867.818543][T15011] file_writeback 0 [ 2867.818543][T15011] swapcached 0 [ 2867.818543][T15011] anon_thp 0 [ 2867.818543][T15011] file_thp 0 [ 2867.818543][T15011] shmem_thp 0 [ 2867.818543][T15011] inactive_anon 176128 [ 2867.818543][T15011] active_anon 126976 [ 2867.818543][T15011] inactive_file 0 [ 2867.818543][T15011] active_file 0 [ 2867.818543][T15011] unevictable 0 [ 2867.818543][T15011] slab_reclaimable 17144 [ 2867.818543][T15011] slab_unreclaimable 308626144 [ 2867.818543][T15011] slab 308643288 [ 2868.026768][T15011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15011,uid=0 [ 2868.064475][T15011] Memory cgroup out of memory: Killed process 15011 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:21:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x27a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0xb}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2868.195197][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2868.265110][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2868.275507][T15031] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2868.356748][T15031] CPU: 1 PID: 15031 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2868.366977][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2868.377065][T15031] Call Trace: [ 2868.380364][T15031] [ 2868.383336][T15031] dump_stack_lvl+0xcd/0x134 [ 2868.387974][T15031] dump_header+0x10b/0x7f9 [ 2868.392444][T15031] oom_kill_process.cold+0x10/0x15 [ 2868.397602][T15031] out_of_memory+0x358/0x14a0 [ 2868.402325][T15031] ? find_held_lock+0x2d/0x110 [ 2868.407132][T15031] ? oom_killer_disable+0x270/0x270 [ 2868.412373][T15031] ? find_held_lock+0x2d/0x110 [ 2868.417180][T15031] mem_cgroup_out_of_memory+0x206/0x270 [ 2868.422761][T15031] ? mem_cgroup_margin+0x130/0x130 [ 2868.427902][T15031] ? lock_downgrade+0x6e0/0x6e0 [ 2868.432805][T15031] try_charge_memcg+0xf67/0x13f0 [ 2868.437787][T15031] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2868.443807][T15031] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2868.449569][T15031] ? lock_downgrade+0x6e0/0x6e0 [ 2868.454480][T15031] obj_cgroup_charge+0x2ab/0x5e0 [ 2868.459456][T15031] ? vm_area_dup+0x88/0x3f0 [ 2868.463995][T15031] kmem_cache_alloc+0x96/0x3b0 [ 2868.468797][T15031] vm_area_dup+0x88/0x3f0 [ 2868.473157][T15031] ? mark_lock.part.0+0xee/0x1910 [ 2868.478309][T15031] ? lock_chain_count+0x20/0x20 [ 2868.483203][T15031] ? __vma_adjust+0x109c/0x24a0 [ 2868.488101][T15031] ? __vma_link_rb+0x710/0x710 [ 2868.492878][T15031] ? __lock_acquire+0x166e/0x56d0 [ 2868.498346][T15031] ? vm_area_alloc+0x110/0x110 [ 2868.503129][T15031] ? perf_event_namespaces+0x50/0x50 [ 2868.508427][T15031] ? vma_merge+0x47a/0xeb0 [ 2868.512863][T15031] ? ima_file_mprotect+0x175/0x470 [ 2868.518002][T15031] ? ima_file_mmap+0x130/0x130 [ 2868.522793][T15031] ? vma_wants_writenotify+0x1f8/0x370 [ 2868.528281][T15031] ? __ia32_sys_mmap_pgoff+0x1b0/0x1b0 [ 2868.533760][T15031] ? vma_merge+0x47a/0xeb0 [ 2868.538200][T15031] ? __vma_adjust+0x24a0/0x24a0 [ 2868.543059][T15031] __split_vma+0xa5/0x550 [ 2868.547410][T15031] split_vma+0x95/0xd0 [ 2868.551492][T15031] mprotect_fixup+0x6d9/0x970 [ 2868.556189][T15031] ? change_protection+0x40e0/0x40e0 [ 2868.561491][T15031] ? vmacache_find+0x62/0x330 [ 2868.566188][T15031] do_mprotect_pkey+0x6c5/0x9e0 [ 2868.571054][T15031] ? __ct_user_exit+0xff/0x150 [ 2868.575832][T15031] ? mprotect_fixup+0x970/0x970 [ 2868.580711][T15031] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2868.586623][T15031] __x64_sys_mprotect+0x74/0xb0 [ 2868.591498][T15031] do_syscall_64+0x35/0xb0 [ 2868.595937][T15031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2868.601848][T15031] RIP: 0033:0x7f5161e89387 [ 2868.606281][T15031] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2868.625912][T15031] RSP: 002b:00007f51624cfab8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2868.634341][T15031] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5161e89387 [ 2868.642332][T15031] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5162f8a000 [ 2868.650323][T15031] RBP: 00007f51624cfb90 R08: 00000000ffffffff R09: 00007f5162fa9700 [ 2868.658298][T15031] R10: 0000000000020022 R11: 0000000000000206 R12: 00007f51624cfcb0 [ 2868.666274][T15031] R13: 00007f5162fa9700 R14: 0000000000000000 R15: 0000000000022000 [ 2868.674271][T15031] [ 2868.790525][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:21:25 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x1100000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2868.958122][T15031] memory: usage 307196kB, limit 307200kB, failcnt 43406 [ 2868.972018][T15031] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2868.986969][T15031] Memory cgroup stats for /syz2: [ 2868.987211][T15031] anon 155648 [ 2868.987211][T15031] file 221184 [ 2868.987211][T15031] kernel 314191872 [ 2868.987211][T15031] kernel_stack 65536 [ 2868.987211][T15031] pagetables 81920 [ 2868.987211][T15031] percpu 5435744 [ 2868.987211][T15031] sock 0 [ 2868.987211][T15031] vmalloc 16384 [ 2868.987211][T15031] shmem 221184 [ 2868.987211][T15031] zswap 0 [ 2868.987211][T15031] zswapped 0 [ 2868.987211][T15031] file_mapped 221184 [ 2868.987211][T15031] file_dirty 0 [ 2868.987211][T15031] file_writeback 0 [ 2868.987211][T15031] swapcached 0 [ 2868.987211][T15031] anon_thp 0 [ 2868.987211][T15031] file_thp 0 [ 2868.987211][T15031] shmem_thp 0 [ 2868.987211][T15031] inactive_anon 172032 [ 2868.987211][T15031] active_anon 204800 11:21:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x411d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x411d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2868.987211][T15031] inactive_file 0 [ 2868.987211][T15031] active_file 0 [ 2868.987211][T15031] unevictable 0 [ 2868.987211][T15031] slab_reclaimable 16760 [ 2868.987211][T15031] slab_unreclaimable 308540264 [ 2868.987211][T15031] slab 308557024 11:21:26 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0x1100000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2869.202337][T15031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15031,uid=0 11:21:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x28a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2869.265940][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2869.285751][T15031] Memory cgroup out of memory: Killed process 15031 (syz-executor.2) total-vm:54640kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:21:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4c00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x411d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2869.345064][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2869.383735][T15050] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2869.412586][T15050] CPU: 0 PID: 15050 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2869.422842][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2869.432945][T15050] Call Trace: [ 2869.436253][T15050] [ 2869.439220][T15050] dump_stack_lvl+0xcd/0x134 [ 2869.444292][T15050] dump_header+0x10b/0x7f9 [ 2869.448754][T15050] oom_kill_process.cold+0x10/0x15 [ 2869.453917][T15050] out_of_memory+0x358/0x14a0 [ 2869.458650][T15050] ? find_held_lock+0x2d/0x110 [ 2869.463450][T15050] ? oom_killer_disable+0x270/0x270 [ 2869.468694][T15050] ? find_held_lock+0x2d/0x110 [ 2869.473498][T15050] mem_cgroup_out_of_memory+0x206/0x270 [ 2869.479080][T15050] ? mem_cgroup_margin+0x130/0x130 [ 2869.484229][T15050] ? lock_downgrade+0x6e0/0x6e0 [ 2869.489132][T15050] try_charge_memcg+0xf67/0x13f0 [ 2869.494108][T15050] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2869.500115][T15050] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2869.505862][T15050] ? lock_downgrade+0x6e0/0x6e0 [ 2869.510755][T15050] ? lock_downgrade+0x6e0/0x6e0 [ 2869.515666][T15050] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2869.521263][T15050] __alloc_pages+0x1ef/0x510 [ 2869.525901][T15050] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2869.532722][T15050] ? find_held_lock+0x2d/0x110 [ 2869.537543][T15050] alloc_pages+0x1a6/0x270 [ 2869.542004][T15050] pte_alloc_one+0x16/0x230 [ 2869.546543][T15050] __pte_alloc+0x69/0x250 [ 2869.550922][T15050] ? pmd_install+0x150/0x150 [ 2869.555555][T15050] ? hugepage_vma_check+0x44e/0x780 [ 2869.560797][T15050] ? __pmd_alloc+0x2ff/0x5c0 [ 2869.565437][T15050] __handle_mm_fault+0x310b/0x39b0 [ 2869.570604][T15050] ? vm_iomap_memory+0x190/0x190 [ 2869.575619][T15050] handle_mm_fault+0x1c8/0x780 [ 2869.580442][T15050] do_user_addr_fault+0x475/0x1210 [ 2869.585607][T15050] exc_page_fault+0x94/0x170 [ 2869.590237][T15050] asm_exc_page_fault+0x22/0x30 [ 2869.595112][T15050] RIP: 0033:0x7f0741484695 [ 2869.599557][T15050] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2869.619206][T15050] RSP: 002b:00007f0741acfb98 EFLAGS: 00010202 [ 2869.625312][T15050] RAX: 00000000200003c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2869.633324][T15050] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200003c0 [ 2869.641364][T15050] RBP: 00007f0741acfc58 R08: 00007f07419a0000 R09: 00007f07415a00c8 [ 2869.649364][T15050] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00000000002bc837 [ 2869.657400][T15050] R13: 00007f0741acfc80 R14: 00007f074159bf80 R15: 0000000000000032 [ 2869.665454][T15050] [ 2869.996065][T15050] memory: usage 307176kB, limit 307200kB, failcnt 42850 [ 2870.126210][T15050] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2870.143491][T15050] Memory cgroup stats for /syz3: [ 2870.144938][T15050] anon 143360 [ 2870.144938][T15050] file 143360 [ 2870.144938][T15050] kernel 314261504 [ 2870.144938][T15050] kernel_stack 65536 [ 2870.144938][T15050] pagetables 81920 [ 2870.144938][T15050] percpu 5436928 [ 2870.144938][T15050] sock 0 [ 2870.144938][T15050] vmalloc 0 [ 2870.144938][T15050] shmem 143360 [ 2870.144938][T15050] zswap 0 [ 2870.144938][T15050] zswapped 0 [ 2870.144938][T15050] file_mapped 143360 [ 2870.144938][T15050] file_dirty 0 [ 2870.144938][T15050] file_writeback 0 [ 2870.144938][T15050] swapcached 0 [ 2870.144938][T15050] anon_thp 0 [ 2870.144938][T15050] file_thp 0 [ 2870.144938][T15050] shmem_thp 0 [ 2870.144938][T15050] inactive_anon 159744 [ 2870.144938][T15050] active_anon 126976 [ 2870.144938][T15050] inactive_file 0 [ 2870.144938][T15050] active_file 0 [ 2870.144938][T15050] unevictable 0 11:21:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x411d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2870.144938][T15050] slab_reclaimable 17144 [ 2870.144938][T15050] slab_unreclaimable 308624832 [ 2870.144938][T15050] slab 308641976 [ 2870.158976][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:21:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x5a010000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2870.345437][T15050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15050,uid=0 [ 2870.385736][T15050] Memory cgroup out of memory: Killed process 15050 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:21:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0xc}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2870.469752][T15069] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2870.480222][T15069] CPU: 0 PID: 15069 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2870.490418][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2870.500507][T15069] Call Trace: [ 2870.503823][T15069] [ 2870.506783][T15069] dump_stack_lvl+0xcd/0x134 [ 2870.511422][T15069] dump_header+0x10b/0x7f9 [ 2870.515889][T15069] oom_kill_process.cold+0x10/0x15 [ 2870.521040][T15069] out_of_memory+0x358/0x14a0 [ 2870.525757][T15069] ? find_held_lock+0x2d/0x110 [ 2870.530556][T15069] ? oom_killer_disable+0x270/0x270 [ 2870.535788][T15069] ? find_held_lock+0x2d/0x110 [ 2870.540579][T15069] mem_cgroup_out_of_memory+0x206/0x270 [ 2870.546154][T15069] ? mem_cgroup_margin+0x130/0x130 [ 2870.551302][T15069] ? lock_downgrade+0x6e0/0x6e0 [ 2870.556215][T15069] try_charge_memcg+0xf67/0x13f0 [ 2870.561203][T15069] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2870.567245][T15069] ? lock_downgrade+0x6e0/0x6e0 [ 2870.572149][T15069] charge_memcg+0x31/0x320 [ 2870.576617][T15069] __mem_cgroup_charge+0x27/0x90 [ 2870.581593][T15069] ? _compound_head+0x5d/0x150 [ 2870.586397][T15069] __handle_mm_fault+0x17df/0x39b0 [ 2870.591569][T15069] ? vm_iomap_memory+0x190/0x190 [ 2870.596587][T15069] handle_mm_fault+0x1c8/0x780 [ 2870.601396][T15069] do_user_addr_fault+0x475/0x1210 [ 2870.606560][T15069] exc_page_fault+0x94/0x170 [ 2870.611201][T15069] asm_exc_page_fault+0x22/0x30 [ 2870.616105][T15069] RIP: 0033:0x7f5161e84695 11:21:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x294, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2870.620555][T15069] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2870.627767][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2870.640177][T15069] RSP: 002b:00007f51624cfb98 EFLAGS: 00010202 [ 2870.640213][T15069] RAX: 00000000200003c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2870.640229][T15069] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200003c0 [ 2870.640244][T15069] RBP: 00007f51624cfc58 R08: 00007f51623a0000 R09: 00007f5161fa00c8 [ 2870.640260][T15069] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00000000002bcc86 [ 2870.640275][T15069] R13: 00007f51624cfc80 R14: 00007f5161f9bf80 R15: 0000000000000032 [ 2870.640311][T15069] [ 2870.786776][T15069] memory: usage 307184kB, limit 307200kB, failcnt 43456 [ 2870.807432][T15069] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2870.814558][T15069] Memory cgroup stats for /syz2: [ 2870.814741][T15069] anon 143360 [ 2870.814741][T15069] file 221184 [ 2870.814741][T15069] kernel 314191872 [ 2870.814741][T15069] kernel_stack 65536 [ 2870.814741][T15069] pagetables 81920 [ 2870.814741][T15069] percpu 5435744 [ 2870.814741][T15069] sock 0 [ 2870.814741][T15069] vmalloc 16384 [ 2870.814741][T15069] shmem 221184 [ 2870.814741][T15069] zswap 0 [ 2870.814741][T15069] zswapped 0 [ 2870.814741][T15069] file_mapped 221184 [ 2870.814741][T15069] file_dirty 0 [ 2870.814741][T15069] file_writeback 0 [ 2870.814741][T15069] swapcached 0 [ 2870.814741][T15069] anon_thp 0 [ 2870.814741][T15069] file_thp 0 [ 2870.814741][T15069] shmem_thp 0 [ 2870.814741][T15069] inactive_anon 159744 [ 2870.814741][T15069] active_anon 204800 [ 2870.814741][T15069] inactive_file 0 [ 2870.814741][T15069] active_file 0 [ 2870.814741][T15069] unevictable 0 [ 2870.814741][T15069] slab_reclaimable 16760 [ 2870.814741][T15069] slab_unreclaimable 308540264 [ 2870.814741][T15069] slab 308557024 11:21:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x411d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2871.080013][T15069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15069,uid=0 [ 2871.096508][T15069] Memory cgroup out of memory: Killed process 15069 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2871.274531][T15082] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2871.306342][T15082] CPU: 1 PID: 15082 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2871.316563][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2871.326645][T15082] Call Trace: [ 2871.329972][T15082] [ 2871.332923][T15082] dump_stack_lvl+0xcd/0x134 [ 2871.337534][T15082] dump_header+0x10b/0x7f9 [ 2871.342141][T15082] oom_kill_process.cold+0x10/0x15 [ 2871.347277][T15082] out_of_memory+0x358/0x14a0 [ 2871.351973][T15082] ? find_held_lock+0x2d/0x110 [ 2871.356763][T15082] ? oom_killer_disable+0x270/0x270 [ 2871.361976][T15082] ? find_held_lock+0x2d/0x110 [ 2871.366754][T15082] mem_cgroup_out_of_memory+0x206/0x270 [ 2871.373027][T15082] ? mem_cgroup_margin+0x130/0x130 [ 2871.378161][T15082] ? lock_downgrade+0x6e0/0x6e0 [ 2871.383046][T15082] try_charge_memcg+0xf67/0x13f0 [ 2871.388004][T15082] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2871.393997][T15082] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2871.399728][T15082] ? lock_downgrade+0x6e0/0x6e0 [ 2871.404608][T15082] ? lock_downgrade+0x6e0/0x6e0 [ 2871.409470][T15082] ? rcu_read_unlock+0x9/0x60 [ 2871.414177][T15082] obj_cgroup_charge+0x2ab/0x5e0 [ 2871.419133][T15082] ? copy_process+0x4ce/0x7090 [ 2871.423914][T15082] kmem_cache_alloc_node+0x92/0x3f0 [ 2871.429121][T15082] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2871.434346][T15082] copy_process+0x4ce/0x7090 [ 2871.438954][T15082] ? find_held_lock+0x2d/0x110 [ 2871.443738][T15082] ? __cleanup_sighand+0xb0/0xb0 [ 2871.448704][T15082] kernel_clone+0xe7/0xab0 [ 2871.453132][T15082] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2871.459125][T15082] ? create_io_thread+0xe0/0xe0 [ 2871.463996][T15082] ? find_held_lock+0x2d/0x110 [ 2871.468774][T15082] ? __ct_user_exit+0xff/0x150 [ 2871.473555][T15082] __do_sys_clone+0xba/0x100 [ 2871.478155][T15082] ? kernel_clone+0xab0/0xab0 [ 2871.482952][T15082] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2871.488858][T15082] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2871.494771][T15082] do_syscall_64+0x35/0xb0 [ 2871.499197][T15082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2871.505284][T15082] RIP: 0033:0x7f074148a6a1 [ 2871.509706][T15082] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2871.529427][T15082] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2871.537856][T15082] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2871.545835][T15082] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2871.553815][T15082] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2871.561790][T15082] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e 11:21:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4d00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2871.569788][T15082] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2871.577794][T15082] [ 2871.706923][T15082] memory: usage 307196kB, limit 307200kB, failcnt 42905 [ 2871.727296][T15082] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2871.752774][T15082] Memory cgroup stats for /syz3: [ 2871.752963][T15082] anon 159744 [ 2871.752963][T15082] file 143360 [ 2871.752963][T15082] kernel 314265600 [ 2871.752963][T15082] kernel_stack 65536 [ 2871.752963][T15082] pagetables 86016 [ 2871.752963][T15082] percpu 5436928 [ 2871.752963][T15082] sock 0 [ 2871.752963][T15082] vmalloc 0 [ 2871.752963][T15082] shmem 143360 [ 2871.752963][T15082] zswap 0 [ 2871.752963][T15082] zswapped 0 [ 2871.752963][T15082] file_mapped 143360 [ 2871.752963][T15082] file_dirty 0 [ 2871.752963][T15082] file_writeback 0 [ 2871.752963][T15082] swapcached 0 [ 2871.752963][T15082] anon_thp 0 [ 2871.752963][T15082] file_thp 0 [ 2871.752963][T15082] shmem_thp 0 [ 2871.752963][T15082] inactive_anon 172032 [ 2871.752963][T15082] active_anon 126976 [ 2871.752963][T15082] inactive_file 0 [ 2871.752963][T15082] active_file 0 [ 2871.752963][T15082] unevictable 0 [ 2871.752963][T15082] slab_reclaimable 17144 [ 2871.752963][T15082] slab_unreclaimable 308626144 [ 2871.752963][T15082] slab 308643288 11:21:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x411d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2871.917876][ T3702] kworker/dying (3702) used greatest stack depth: 21824 bytes left 11:21:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x5a010000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x29a, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2872.077217][T15082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15082,uid=0 [ 2872.101604][T15082] Memory cgroup out of memory: Killed process 15082 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 2872.141291][T15092] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2872.161331][T15092] CPU: 0 PID: 15092 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2872.171570][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2872.181665][T15092] Call Trace: [ 2872.184970][T15092] [ 2872.187926][T15092] dump_stack_lvl+0xcd/0x134 [ 2872.192559][T15092] dump_header+0x10b/0x7f9 [ 2872.197035][T15092] oom_kill_process.cold+0x10/0x15 [ 2872.202196][T15092] out_of_memory+0x358/0x14a0 [ 2872.206923][T15092] ? oom_killer_disable+0x270/0x270 [ 2872.212176][T15092] ? find_held_lock+0x2d/0x110 [ 2872.216987][T15092] mem_cgroup_out_of_memory+0x206/0x270 [ 2872.222584][T15092] ? mem_cgroup_margin+0x130/0x130 [ 2872.227734][T15092] ? lock_downgrade+0x6e0/0x6e0 [ 2872.232652][T15092] try_charge_memcg+0xf67/0x13f0 [ 2872.237641][T15092] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2872.243665][T15092] ? lock_downgrade+0x6e0/0x6e0 [ 2872.248570][T15092] charge_memcg+0x31/0x320 [ 2872.253037][T15092] __mem_cgroup_charge+0x27/0x90 [ 2872.258062][T15092] ? _compound_head+0x5d/0x150 [ 2872.262876][T15092] wp_page_copy+0x27c/0x1b60 [ 2872.267516][T15092] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2872.273031][T15092] ? lock_downgrade+0x6e0/0x6e0 [ 2872.277936][T15092] ? vm_normal_page+0x146/0x2a0 [ 2872.282853][T15092] do_wp_page+0x1d1/0x1910 [ 2872.287325][T15092] __handle_mm_fault+0x1813/0x39b0 [ 2872.292486][T15092] ? vm_iomap_memory+0x190/0x190 [ 2872.297472][T15092] handle_mm_fault+0x1c8/0x780 [ 2872.302255][T15092] do_user_addr_fault+0x475/0x1210 [ 2872.307392][T15092] exc_page_fault+0x94/0x170 [ 2872.311996][T15092] asm_exc_page_fault+0x22/0x30 [ 2872.316863][T15092] RIP: 0033:0x7f5161e374b0 [ 2872.321287][T15092] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2872.340905][T15092] RSP: 002b:00007f51624cfab0 EFLAGS: 00010246 [ 2872.346979][T15092] RAX: 00000000098f1ddc RBX: 00007f5161f9c018 RCX: 0000001b2f920000 [ 2872.354970][T15092] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000d570f0d [ 2872.362954][T15092] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2872.370958][T15092] R10: 00007f51624cfc80 R11: 0000000000000246 R12: 00007f5161f90000 [ 2872.378963][T15092] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2872.386960][T15092] ? __x64_sys_socket+0xd/0xb0 11:21:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x411d0400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2872.391779][T15092] [ 2872.398522][T15100] __nla_validate_parse: 4 callbacks suppressed [ 2872.398541][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:21:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0xd}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2872.612382][T15092] memory: usage 307164kB, limit 307200kB, failcnt 43482 [ 2872.623041][T15092] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2872.638472][T15092] Memory cgroup stats for /syz2: [ 2872.638660][T15092] anon 135168 [ 2872.638660][T15092] file 221184 [ 2872.638660][T15092] kernel 314179584 [ 2872.638660][T15092] kernel_stack 65536 [ 2872.638660][T15092] pagetables 73728 [ 2872.638660][T15092] percpu 5435744 [ 2872.638660][T15092] sock 0 [ 2872.638660][T15092] vmalloc 16384 [ 2872.638660][T15092] shmem 221184 [ 2872.638660][T15092] zswap 0 [ 2872.638660][T15092] zswapped 0 [ 2872.638660][T15092] file_mapped 221184 [ 2872.638660][T15092] file_dirty 0 [ 2872.638660][T15092] file_writeback 0 [ 2872.638660][T15092] swapcached 0 [ 2872.638660][T15092] anon_thp 0 [ 2872.638660][T15092] file_thp 0 [ 2872.638660][T15092] shmem_thp 0 [ 2872.638660][T15092] inactive_anon 151552 [ 2872.638660][T15092] active_anon 204800 [ 2872.638660][T15092] inactive_file 0 [ 2872.638660][T15092] active_file 0 [ 2872.638660][T15092] unevictable 0 [ 2872.638660][T15092] slab_reclaimable 14832 [ 2872.638660][T15092] slab_unreclaimable 308539880 [ 2872.638660][T15092] slab 308554712 [ 2872.862532][T15092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15092,uid=0 [ 2872.906531][T15092] Memory cgroup out of memory: Killed process 15092 (syz-executor.2) total-vm:54508kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:21:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x58020000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2872.978066][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:21:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4e00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2873.041282][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2873.205026][T15114] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2873.241103][T15114] CPU: 0 PID: 15114 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2873.251328][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2873.261419][T15114] Call Trace: [ 2873.264722][T15114] [ 2873.267678][T15114] dump_stack_lvl+0xcd/0x134 [ 2873.272317][T15114] dump_header+0x10b/0x7f9 [ 2873.276781][T15114] oom_kill_process.cold+0x10/0x15 [ 2873.281941][T15114] out_of_memory+0x358/0x14a0 [ 2873.286182][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2873.286646][T15114] ? find_held_lock+0x2d/0x110 [ 2873.300706][T15114] ? oom_killer_disable+0x270/0x270 [ 2873.305957][T15114] ? find_held_lock+0x2d/0x110 [ 2873.310770][T15114] mem_cgroup_out_of_memory+0x206/0x270 [ 2873.316375][T15114] ? mem_cgroup_margin+0x130/0x130 [ 2873.321525][T15114] ? lock_downgrade+0x6e0/0x6e0 [ 2873.326433][T15114] try_charge_memcg+0xf67/0x13f0 [ 2873.331422][T15114] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2873.337467][T15114] ? lock_downgrade+0x6e0/0x6e0 [ 2873.342387][T15114] charge_memcg+0x31/0x320 [ 2873.346853][T15114] __mem_cgroup_charge+0x27/0x90 [ 2873.351835][T15114] ? _compound_head+0x5d/0x150 [ 2873.356652][T15114] wp_page_copy+0x27c/0x1b60 [ 2873.361298][T15114] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2873.366803][T15114] ? lock_downgrade+0x6e0/0x6e0 [ 2873.371688][T15114] ? vm_normal_page+0x146/0x2a0 [ 2873.376584][T15114] do_wp_page+0x52c/0x1910 [ 2873.381034][T15114] __handle_mm_fault+0x1813/0x39b0 [ 2873.386197][T15114] ? vm_iomap_memory+0x190/0x190 [ 2873.391208][T15114] handle_mm_fault+0x1c8/0x780 [ 2873.396021][T15114] do_user_addr_fault+0x475/0x1210 [ 2873.401200][T15114] exc_page_fault+0x94/0x170 [ 2873.405841][T15114] asm_exc_page_fault+0x22/0x30 [ 2873.410737][T15114] RIP: 0033:0x7f5161e380fa [ 2873.415181][T15114] Code: 24 7e 13 00 48 89 05 15 7e 13 00 c7 05 fb 7d 13 00 01 00 00 00 48 c7 05 e8 d2 09 01 00 00 00 00 c7 05 e6 d2 09 01 00 00 00 00 05 44 13 0a 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 2873.434899][T15114] RSP: 002b:00007f51624cfd28 EFLAGS: 00010202 [ 2873.441006][T15114] RAX: 00005555555826c0 RBX: 0000000000000001 RCX: 00007f5162ed53c0 11:21:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2a2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2873.449018][T15114] RDX: 0000000000000001 RSI: 00007f5161f6fef0 RDI: 0000000000000001 [ 2873.457032][T15114] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f5161f6fef0 [ 2873.465039][T15114] R10: 0000555555582400 R11: 0000000000000202 R12: 0000000000000001 [ 2873.473047][T15114] R13: 0000000000000001 R14: 0000000000000001 R15: 00007f51624cfe40 [ 2873.477656][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x5a010000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2873.481063][T15114] 11:21:30 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0xf01000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2873.633895][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2873.635072][T15114] memory: usage 307044kB, limit 307200kB, failcnt 43503 [ 2873.684375][T15114] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2873.706060][T15114] Memory cgroup stats for /syz2: [ 2873.706372][T15114] anon 81920 [ 2873.706372][T15114] file 221184 [ 2873.706372][T15114] kernel 314109952 [ 2873.706372][T15114] kernel_stack 32768 [ 2873.706372][T15114] pagetables 61440 [ 2873.706372][T15114] percpu 5435744 [ 2873.706372][T15114] sock 0 [ 2873.706372][T15114] vmalloc 16384 [ 2873.706372][T15114] shmem 221184 [ 2873.706372][T15114] zswap 0 [ 2873.706372][T15114] zswapped 0 [ 2873.706372][T15114] file_mapped 221184 [ 2873.706372][T15114] file_dirty 0 [ 2873.706372][T15114] file_writeback 0 [ 2873.706372][T15114] swapcached 0 [ 2873.706372][T15114] anon_thp 0 [ 2873.706372][T15114] file_thp 0 [ 2873.706372][T15114] shmem_thp 0 [ 2873.706372][T15114] inactive_anon 98304 [ 2873.706372][T15114] active_anon 204800 [ 2873.706372][T15114] inactive_file 0 [ 2873.706372][T15114] active_file 0 [ 2873.706372][T15114] unevictable 0 [ 2873.706372][T15114] slab_reclaimable 7848 [ 2873.706372][T15114] slab_unreclaimable 308523136 [ 2873.706372][T15114] slab 308530984 [ 2873.770015][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:21:30 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0xe01000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:21:30 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0xf01000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:21:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:31 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0xe01000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:21:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x52030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:31 executing program 0: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0xb01000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) [ 2874.253041][T15114] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3668,uid=0 [ 2874.268782][T15114] Memory cgroup out of memory: Killed process 3668 (syz-executor.2) total-vm:50536kB, anon-rss:400kB, file-rss:9072kB, shmem-rss:4kB, UID:0 pgtables:76kB oom_score_adj:0 [ 2874.292564][T15109] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2874.309385][T15109] CPU: 1 PID: 15109 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2874.319611][T15109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2874.329694][T15109] Call Trace: [ 2874.332999][T15109] [ 2874.335967][T15109] dump_stack_lvl+0xcd/0x134 [ 2874.340621][T15109] dump_header+0x10b/0x7f9 [ 2874.345103][T15109] oom_kill_process.cold+0x10/0x15 [ 2874.350270][T15109] out_of_memory+0x358/0x14a0 [ 2874.355039][T15109] ? oom_killer_disable+0x270/0x270 [ 2874.360288][T15109] ? find_held_lock+0x2d/0x110 [ 2874.365104][T15109] mem_cgroup_out_of_memory+0x206/0x270 [ 2874.370712][T15109] ? mem_cgroup_margin+0x130/0x130 [ 2874.375889][T15109] ? lock_downgrade+0x6e0/0x6e0 [ 2874.380813][T15109] try_charge_memcg+0xf67/0x13f0 [ 2874.385810][T15109] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2874.391856][T15109] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2874.397630][T15109] ? lock_downgrade+0x6e0/0x6e0 [ 2874.402535][T15109] ? lock_downgrade+0x6e0/0x6e0 [ 2874.407432][T15109] ? rcu_read_unlock+0x9/0x60 [ 2874.412171][T15109] obj_cgroup_charge+0x2ab/0x5e0 [ 2874.417167][T15109] ? copy_process+0x4ce/0x7090 [ 2874.421975][T15109] kmem_cache_alloc_node+0x92/0x3f0 [ 2874.427216][T15109] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2874.432460][T15109] copy_process+0x4ce/0x7090 [ 2874.437078][T15109] ? __lock_acquire+0xbc3/0x56d0 [ 2874.442053][T15109] ? __cleanup_sighand+0xb0/0xb0 [ 2874.447018][T15109] kernel_clone+0xe7/0xab0 [ 2874.451446][T15109] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2874.457437][T15109] ? create_io_thread+0xe0/0xe0 [ 2874.462321][T15109] ? find_held_lock+0x2d/0x110 [ 2874.467099][T15109] ? __ct_user_exit+0xff/0x150 [ 2874.471887][T15109] __do_sys_clone+0xba/0x100 [ 2874.476493][T15109] ? kernel_clone+0xab0/0xab0 [ 2874.481219][T15109] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2874.487219][T15109] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2874.493152][T15109] do_syscall_64+0x35/0xb0 [ 2874.497597][T15109] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2874.503507][T15109] RIP: 0033:0x7f074148a6a1 [ 2874.507943][T15109] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2874.527571][T15109] RSP: 002b:00007f0741acfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2874.536006][T15109] RAX: ffffffffffffffda RBX: 00007f0742611700 RCX: 00007f074148a6a1 [ 2874.543985][T15109] RDX: 00007f07426119d0 RSI: 00007f07426112f0 RDI: 00000000003d0f00 [ 2874.551970][T15109] RBP: 00007f0741acfcb0 R08: 00007f0742611700 R09: 00007f0742611700 [ 2874.559960][T15109] R10: 00007f07426119d0 R11: 0000000000000206 R12: 00007f0741acfb1e [ 2874.567955][T15109] R13: 00007f0741acfb1f R14: 00007f0742611300 R15: 0000000000022000 [ 2874.575953][T15109] [ 2874.612246][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2874.696721][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2874.736823][T15109] memory: usage 307184kB, limit 307200kB, failcnt 42998 [ 2874.784696][T15109] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2874.866292][T15109] Memory cgroup stats for /syz3: [ 2874.866488][T15109] anon 159744 [ 2874.866488][T15109] file 143360 [ 2874.866488][T15109] kernel 314253312 [ 2874.866488][T15109] kernel_stack 65536 [ 2874.866488][T15109] pagetables 86016 [ 2874.866488][T15109] percpu 5436928 [ 2874.866488][T15109] sock 0 [ 2874.866488][T15109] vmalloc 0 [ 2874.866488][T15109] shmem 143360 [ 2874.866488][T15109] zswap 0 [ 2874.866488][T15109] zswapped 0 [ 2874.866488][T15109] file_mapped 143360 [ 2874.866488][T15109] file_dirty 0 [ 2874.866488][T15109] file_writeback 0 [ 2874.866488][T15109] swapcached 0 [ 2874.866488][T15109] anon_thp 0 [ 2874.866488][T15109] file_thp 0 [ 2874.866488][T15109] shmem_thp 0 [ 2874.866488][T15109] inactive_anon 176128 [ 2874.866488][T15109] active_anon 126976 [ 2874.866488][T15109] inactive_file 0 [ 2874.866488][T15109] active_file 0 [ 2874.866488][T15109] unevictable 0 [ 2874.866488][T15109] slab_reclaimable 17144 [ 2874.866488][T15109] slab_unreclaimable 308615048 [ 2874.866488][T15109] slab 308632192 [ 2875.137392][T15109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15109,uid=0 [ 2875.247055][T15109] Memory cgroup out of memory: Killed process 15109 (syz-executor.3) total-vm:54640kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:21:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0xf}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xaa220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2875.542776][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2875.624928][T15146] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2875.684412][T15146] CPU: 1 PID: 15146 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2875.694646][T15146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2875.704766][T15146] Call Trace: [ 2875.708077][T15146] [ 2875.711029][T15146] dump_stack_lvl+0xcd/0x134 [ 2875.715650][T15146] dump_header+0x10b/0x7f9 [ 2875.720101][T15146] oom_kill_process.cold+0x10/0x15 [ 2875.725301][T15146] out_of_memory+0x358/0x14a0 [ 2875.730032][T15146] ? find_held_lock+0x2d/0x110 [ 2875.734846][T15146] ? oom_killer_disable+0x270/0x270 [ 2875.740096][T15146] ? find_held_lock+0x2d/0x110 [ 2875.744909][T15146] mem_cgroup_out_of_memory+0x206/0x270 [ 2875.750490][T15146] ? mem_cgroup_margin+0x130/0x130 [ 2875.755623][T15146] ? lock_downgrade+0x6e0/0x6e0 [ 2875.760521][T15146] try_charge_memcg+0xf67/0x13f0 [ 2875.765493][T15146] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2875.771510][T15146] ? lock_downgrade+0x6e0/0x6e0 [ 2875.776406][T15146] charge_memcg+0x31/0x320 [ 2875.780852][T15146] __mem_cgroup_charge+0x27/0x90 [ 2875.785815][T15146] ? _compound_head+0x5d/0x150 [ 2875.790610][T15146] wp_page_copy+0x27c/0x1b60 [ 2875.795237][T15146] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2875.800739][T15146] ? lock_downgrade+0x6e0/0x6e0 [ 2875.805640][T15146] ? vm_normal_page+0x146/0x2a0 [ 2875.810554][T15146] do_wp_page+0x1d1/0x1910 [ 2875.815019][T15146] __handle_mm_fault+0x1813/0x39b0 [ 2875.820185][T15146] ? vm_iomap_memory+0x190/0x190 [ 2875.825193][T15146] handle_mm_fault+0x1c8/0x780 [ 2875.830013][T15146] do_user_addr_fault+0x475/0x1210 [ 2875.835183][T15146] exc_page_fault+0x94/0x170 [ 2875.839827][T15146] asm_exc_page_fault+0x22/0x30 [ 2875.844714][T15146] RIP: 0033:0x7f07414374b0 [ 2875.849167][T15146] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2875.868816][T15146] RSP: 002b:00007f0741acfab0 EFLAGS: 00010246 [ 2875.874928][T15146] RAX: 000000002feed7de RBX: 00007f074159c018 RCX: 0000001b2fa20000 [ 2875.882937][T15146] RDX: 0000000000000000 RSI: 0000001b2fa20018 RDI: 000000000a19aef0 [ 2875.890940][T15146] RBP: 000000002feed7de R08: 00000000000017de R09: 000000002feed7e2 [ 2875.898935][T15146] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00007f0741590000 [ 2875.906912][T15146] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83bb623b [ 2875.914902][T15146] ? security_socket_create+0x3b/0xc0 [ 2875.920306][T15146] [ 2876.024521][T15146] memory: usage 307200kB, limit 307200kB, failcnt 43086 [ 2876.036581][T15146] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2876.054144][T15146] Memory cgroup stats for /syz3: [ 2876.054370][T15146] anon 139264 [ 2876.054370][T15146] file 143360 [ 2876.054370][T15146] kernel 314269696 [ 2876.054370][T15146] kernel_stack 65536 [ 2876.054370][T15146] pagetables 77824 [ 2876.054370][T15146] percpu 5436928 [ 2876.054370][T15146] sock 0 [ 2876.054370][T15146] vmalloc 0 [ 2876.054370][T15146] shmem 143360 [ 2876.054370][T15146] zswap 0 [ 2876.054370][T15146] zswapped 0 [ 2876.054370][T15146] file_mapped 143360 [ 2876.054370][T15146] file_dirty 0 [ 2876.054370][T15146] file_writeback 0 [ 2876.054370][T15146] swapcached 0 [ 2876.054370][T15146] anon_thp 0 [ 2876.054370][T15146] file_thp 0 [ 2876.054370][T15146] shmem_thp 0 [ 2876.054370][T15146] inactive_anon 98304 [ 2876.054370][T15146] active_anon 126976 [ 2876.054370][T15146] inactive_file 0 [ 2876.054370][T15146] active_file 0 [ 2876.054370][T15146] unevictable 0 [ 2876.054370][T15146] slab_reclaimable 24912 [ 2876.054370][T15146] slab_unreclaimable 308637240 [ 2876.054370][T15146] slab 308662152 [ 2876.434108][T15146] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15146,uid=0 [ 2876.496586][T15146] Memory cgroup out of memory: Killed process 15146 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2876.578078][ T3922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:21:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x4f00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x4a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2ca, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x52030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x10}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2877.304426][T15156] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2877.435405][T15156] CPU: 1 PID: 15156 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2877.445643][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2877.455747][T15156] Call Trace: [ 2877.459053][T15156] [ 2877.462020][T15156] dump_stack_lvl+0xcd/0x134 [ 2877.466658][T15156] dump_header+0x10b/0x7f9 [ 2877.471131][T15156] oom_kill_process.cold+0x10/0x15 [ 2877.476314][T15156] out_of_memory+0x358/0x14a0 [ 2877.481049][T15156] ? find_held_lock+0x2d/0x110 [ 2877.485851][T15156] ? oom_killer_disable+0x270/0x270 [ 2877.491136][T15156] ? find_held_lock+0x2d/0x110 [ 2877.495953][T15156] mem_cgroup_out_of_memory+0x206/0x270 [ 2877.501556][T15156] ? mem_cgroup_margin+0x130/0x130 [ 2877.506743][T15156] ? lock_downgrade+0x6e0/0x6e0 [ 2877.507628][T15152] __nla_validate_parse: 2 callbacks suppressed [ 2877.507646][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2877.511654][T15156] try_charge_memcg+0xf67/0x13f0 [ 2877.532061][T15156] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2877.538093][T15156] ? lock_downgrade+0x6e0/0x6e0 [ 2877.542991][T15156] charge_memcg+0x31/0x320 [ 2877.547428][T15156] __mem_cgroup_charge+0x27/0x90 [ 2877.552389][T15156] ? _compound_head+0x5d/0x150 [ 2877.557174][T15156] __handle_mm_fault+0x17df/0x39b0 [ 2877.562323][T15156] ? vm_iomap_memory+0x190/0x190 [ 2877.567302][T15156] handle_mm_fault+0x1c8/0x780 [ 2877.572089][T15156] do_user_addr_fault+0x475/0x1210 [ 2877.577244][T15156] exc_page_fault+0x94/0x170 [ 2877.581875][T15156] asm_exc_page_fault+0x22/0x30 [ 2877.586735][T15156] RIP: 0033:0x7f074142f20c [ 2877.591161][T15156] Code: c0 e8 88 65 ff ff b8 ff ff ff ff e9 33 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 54 31 c0 55 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 08 48 0a 00 48 89 34 24 48 8b 14 24 48 8b [ 2877.610789][T15156] RSP: 002b:00007f07426310e0 EFLAGS: 00010202 [ 2877.616922][T15156] RAX: 0000000000000000 RBX: 00007f074159bf80 RCX: 0000000000000000 [ 2877.624926][T15156] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000200003c0 [ 2877.633879][T15156] RBP: 00007f07414e3189 R08: 0000000000000000 R09: 0000000000000000 [ 2877.641863][T15156] R10: 00000000200003c0 R11: 0000000000000000 R12: 0000000000000000 [ 2877.649847][T15156] R13: 00007f0741acfb1f R14: 00007f0742632300 R15: 0000000000022000 [ 2877.657849][T15156] [ 2877.765730][T15156] memory: usage 307184kB, limit 307200kB, failcnt 43134 [ 2877.793040][T15156] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2877.806152][T15156] Memory cgroup stats for /syz3: [ 2877.806399][T15156] anon 147456 [ 2877.806399][T15156] file 143360 [ 2877.806399][T15156] kernel 314265600 [ 2877.806399][T15156] kernel_stack 65536 [ 2877.806399][T15156] pagetables 86016 [ 2877.806399][T15156] percpu 5436928 [ 2877.806399][T15156] sock 0 [ 2877.806399][T15156] vmalloc 0 [ 2877.806399][T15156] shmem 143360 [ 2877.806399][T15156] zswap 0 [ 2877.806399][T15156] zswapped 0 [ 2877.806399][T15156] file_mapped 143360 [ 2877.806399][T15156] file_dirty 0 [ 2877.806399][T15156] file_writeback 0 [ 2877.806399][T15156] swapcached 0 [ 2877.806399][T15156] anon_thp 0 [ 2877.806399][T15156] file_thp 0 [ 2877.806399][T15156] shmem_thp 0 [ 2877.806399][T15156] inactive_anon 143360 [ 2877.806399][T15156] active_anon 126976 [ 2877.806399][T15156] inactive_file 0 [ 2877.806399][T15156] active_file 0 [ 2877.806399][T15156] unevictable 0 [ 2877.806399][T15156] slab_reclaimable 17144 [ 2877.806399][T15156] slab_unreclaimable 308626168 [ 2877.806399][T15156] slab 308643312 11:21:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2d2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2878.034463][T15156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15154,uid=0 [ 2878.112945][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2878.119216][T15156] Memory cgroup out of memory: Killed process 15154 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 11:21:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x5000}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x52030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x11}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2878.568808][ T3922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:21:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x4a030000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2878.759753][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2878.809670][T15173] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2878.908908][T15173] CPU: 1 PID: 15173 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2878.919141][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2878.929233][T15173] Call Trace: [ 2878.932536][T15173] [ 2878.935503][T15173] dump_stack_lvl+0xcd/0x134 [ 2878.940145][T15173] dump_header+0x10b/0x7f9 [ 2878.944611][T15173] oom_kill_process.cold+0x10/0x15 [ 2878.949773][T15173] out_of_memory+0x358/0x14a0 [ 2878.954504][T15173] ? find_held_lock+0x2d/0x110 [ 2878.959304][T15173] ? oom_killer_disable+0x270/0x270 [ 2878.964562][T15173] ? find_held_lock+0x2d/0x110 [ 2878.968126][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2878.969379][T15173] mem_cgroup_out_of_memory+0x206/0x270 [ 2878.984226][T15173] ? mem_cgroup_margin+0x130/0x130 [ 2878.989378][T15173] ? lock_downgrade+0x6e0/0x6e0 [ 2878.994289][T15173] try_charge_memcg+0xf67/0x13f0 [ 2878.999277][T15173] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2879.005307][T15173] ? lock_downgrade+0x6e0/0x6e0 [ 2879.010206][T15173] charge_memcg+0x31/0x320 [ 2879.014665][T15173] __mem_cgroup_charge+0x27/0x90 [ 2879.019642][T15173] ? _compound_head+0x5d/0x150 [ 2879.024452][T15173] wp_page_copy+0x27c/0x1b60 [ 2879.029089][T15173] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2879.034582][T15173] ? lock_downgrade+0x6e0/0x6e0 [ 2879.039472][T15173] ? vm_normal_page+0x146/0x2a0 [ 2879.044373][T15173] do_wp_page+0x1d1/0x1910 [ 2879.048833][T15173] __handle_mm_fault+0x1813/0x39b0 [ 2879.053996][T15173] ? vm_iomap_memory+0x190/0x190 [ 2879.059000][T15173] handle_mm_fault+0x1c8/0x780 [ 2879.063822][T15173] do_user_addr_fault+0x475/0x1210 [ 2879.068980][T15173] exc_page_fault+0x94/0x170 [ 2879.073607][T15173] asm_exc_page_fault+0x22/0x30 [ 2879.078487][T15173] RIP: 0033:0x7f07414374b0 [ 2879.082926][T15173] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2879.102648][T15173] RSP: 002b:00007f0741acfab0 EFLAGS: 00010246 [ 2879.108747][T15173] RAX: 00000000098f1ddc RBX: 00007f074159c018 RCX: 0000001b2fa20000 [ 2879.116755][T15173] RDX: 0000000000000000 RSI: 0000001b2fa20018 RDI: 000000000d570f0d [ 2879.124756][T15173] RBP: 00000000098f1ddc R08: 0000000000001ddc R09: 00000000098f1de0 [ 2879.132751][T15173] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00007f0741590000 [ 2879.140760][T15173] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874bbdbd [ 2879.148766][T15173] ? __x64_sys_socket+0xd/0xb0 [ 2879.153592][T15173] 11:21:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2da, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2879.378032][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:21:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2c2, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2879.792895][T15173] memory: usage 307160kB, limit 307200kB, failcnt 43170 [ 2879.806479][T15173] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2879.813706][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2879.896193][T15173] Memory cgroup stats for /syz3: [ 2879.896550][T15173] anon 135168 [ 2879.896550][T15173] file 143360 [ 2879.896550][T15173] kernel 314253312 [ 2879.896550][T15173] kernel_stack 65536 [ 2879.896550][T15173] pagetables 77824 [ 2879.896550][T15173] percpu 5436928 [ 2879.896550][T15173] sock 0 [ 2879.896550][T15173] vmalloc 0 [ 2879.896550][T15173] shmem 143360 [ 2879.896550][T15173] zswap 0 [ 2879.896550][T15173] zswapped 0 [ 2879.896550][T15173] file_mapped 143360 [ 2879.896550][T15173] file_dirty 0 [ 2879.896550][T15173] file_writeback 0 [ 2879.896550][T15173] swapcached 0 [ 2879.896550][T15173] anon_thp 0 [ 2879.896550][T15173] file_thp 0 [ 2879.896550][T15173] shmem_thp 0 [ 2879.896550][T15173] inactive_anon 151552 [ 2879.896550][T15173] active_anon 126976 [ 2879.896550][T15173] inactive_file 0 [ 2879.896550][T15173] active_file 0 [ 2879.896550][T15173] unevictable 0 [ 2879.896550][T15173] slab_reclaimable 15216 [ 2879.896550][T15173] slab_unreclaimable 308624184 [ 2879.896550][T15173] slab 308639400 [ 2880.085248][T15173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15173,uid=0 [ 2880.179902][T15173] Memory cgroup out of memory: Killed process 15173 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2880.198338][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:21:37 executing program 4: r0 = memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xe9>~\x93\xd1\xb7\x1eh\x15\x97pm\x8f\x94\\\xd5\b\x9e\f\x80\x8f\xf8\xb25\xa7\xae\x843b\x98\xb0;\f\xe0}\xfd\tY5\xd4|\xbb|\xb2\xbe\xff\xb3EM\x19\x9f)\x8a==V\x01\x15\r\x8c\xb8\x1a\x00\x00\x00\x00\x00\x05,\x17i\xaa\xe9\x1fG\xee\xe4\x900@\xe9\xa8\xab\xbb\xacZZ\x15\x13\x02\x03\x9ee!z\xec\xdf\x8cZ\x871\xdd\x1d\xdf\x87\xa7\x93\xd1\xd0\xd7\xe8\xd1\x9c\x01\xe1\xcen\x05Th^c\xd5\xad$0\xf9\xa66\x88C/e@\x0fxKAN\xd6\x0e\xae\xca\xb6\xbd7\xed\xb9\xbd\x9d\x95\xdb\x8b\xaa\xd88\b(\r\x01\x0e\x83\x93a\xf5M\xe6\xb9t2\xed\x00\x99LD\x91\xec\xfb\xdb\x04\x8e\xbda\xf3\t|\x10\xa1\x7fG\x91\xd9\xf0\x87)J\x82\xe8\x1f\b\xdd\x00\xbbuWt\xa0]\xder\\E\x8c,7v[>\x93\x03\x0e\x85\xccj5B\xd8\xfd\xc5X\xd2\x00\x00\x00\x00\x00\x00\xe5\xd78\xdc\xf7\x80Kt\xa7[d+\xd2\x12\xf5\xd7\x92q\xc9\\g\xfc\xe2v\xe5\xee=\xbc7\x94\"\xed\xb0\x87\x9a\xca}\x98\xe1W\xbf\r\xc8\xe4y', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400017, 0x3, 0x2012, r0, 0xa00000000000000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xc901) 11:21:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xaa000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2ea, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x12}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 11:21:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x4a000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2880.930842][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2881.062827][T15191] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2881.099742][T15191] CPU: 1 PID: 15191 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 2881.110002][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2881.120093][T15191] Call Trace: [ 2881.123394][T15191] [ 2881.126344][T15191] dump_stack_lvl+0xcd/0x134 [ 2881.130995][T15191] dump_header+0x10b/0x7f9 [ 2881.135461][T15191] oom_kill_process.cold+0x10/0x15 [ 2881.140624][T15191] out_of_memory+0x358/0x14a0 [ 2881.145336][T15191] ? find_held_lock+0x2d/0x110 [ 2881.150145][T15191] ? oom_killer_disable+0x270/0x270 [ 2881.155386][T15191] ? find_held_lock+0x2d/0x110 [ 2881.160179][T15191] mem_cgroup_out_of_memory+0x206/0x270 [ 2881.165752][T15191] ? mem_cgroup_margin+0x130/0x130 [ 2881.170924][T15191] ? lock_downgrade+0x6e0/0x6e0 [ 2881.175825][T15191] try_charge_memcg+0xf67/0x13f0 [ 2881.180801][T15191] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2881.186810][T15191] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2881.192640][T15191] ? lock_downgrade+0x6e0/0x6e0 [ 2881.197522][T15191] ? lock_downgrade+0x6e0/0x6e0 [ 2881.202439][T15191] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2881.208016][T15191] __alloc_pages+0x1ef/0x510 [ 2881.212635][T15191] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2881.219450][T15191] ? find_held_lock+0x2d/0x110 [ 2881.224267][T15191] alloc_pages+0x1a6/0x270 [ 2881.228721][T15191] pte_alloc_one+0x16/0x230 [ 2881.233253][T15191] __pte_alloc+0x69/0x250 [ 2881.237613][T15191] ? pmd_install+0x150/0x150 [ 2881.242245][T15191] ? hugepage_vma_check+0x44e/0x780 [ 2881.247485][T15191] ? __pmd_alloc+0x2ff/0x5c0 [ 2881.252110][T15191] __handle_mm_fault+0x310b/0x39b0 [ 2881.257275][T15191] ? vm_iomap_memory+0x190/0x190 [ 2881.262280][T15191] handle_mm_fault+0x1c8/0x780 [ 2881.267090][T15191] do_user_addr_fault+0x475/0x1210 [ 2881.272263][T15191] exc_page_fault+0x94/0x170 [ 2881.276904][T15191] asm_exc_page_fault+0x22/0x30 [ 2881.281793][T15191] RIP: 0033:0x7f0741484695 [ 2881.286253][T15191] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2881.305995][T15191] RSP: 002b:00007f0741acfb98 EFLAGS: 00010202 [ 2881.312100][T15191] RAX: 00000000200003c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2881.320106][T15191] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200003c0 [ 2881.328115][T15191] RBP: 00007f0741acfc58 R08: 00007f07419a0000 R09: 00007f07415a00c8 [ 2881.336126][T15191] R10: 00007f0741acfc80 R11: 0000000000000246 R12: 00000000002bf5c9 [ 2881.344135][T15191] R13: 00007f0741acfc80 R14: 00007f074159bf80 R15: 0000000000000032 [ 2881.352194][T15191] 11:21:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000045075e440124c865d00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa9220400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) [ 2881.474934][ T3922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.489575][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2881.524789][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2881.825391][T15191] memory: usage 307176kB, limit 307200kB, failcnt 43205 [ 2881.849188][T15191] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2881.872024][T15191] Memory cgroup stats for /syz3: [ 2881.872270][T15191] anon 143360 [ 2881.872270][T15191] file 143360 [ 2881.872270][T15191] kernel 314261504 [ 2881.872270][T15191] kernel_stack 65536 [ 2881.872270][T15191] pagetables 81920 [ 2881.872270][T15191] percpu 5436928 [ 2881.872270][T15191] sock 0 [ 2881.872270][T15191] vmalloc 0 [ 2881.872270][T15191] shmem 143360 [ 2881.872270][T15191] zswap 0 [ 2881.872270][T15191] zswapped 0 [ 2881.872270][T15191] file_mapped 143360 [ 2881.872270][T15191] file_dirty 0 [ 2881.872270][T15191] file_writeback 0 [ 2881.872270][T15191] swapcached 0 [ 2881.872270][T15191] anon_thp 0 [ 2881.872270][T15191] file_thp 0 [ 2881.872270][T15191] shmem_thp 0 [ 2881.872270][T15191] inactive_anon 159744 [ 2881.872270][T15191] active_anon 126976 [ 2881.872270][T15191] inactive_file 0 [ 2881.872270][T15191] active_file 0 [ 2881.872270][T15191] unevictable 0 [ 2881.872270][T15191] slab_reclaimable 17144 [ 2881.872270][T15191] slab_unreclaimable 308624832 [ 2881.872270][T15191] slab 308641976 [ 2882.007375][T15191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15191,uid=0 [ 2882.046234][T15191] Memory cgroup out of memory: Killed process 15191 (syz-executor.3) total-vm:54508kB, anon-rss:404kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2882.573797][ T3922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2883.436035][ T3664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2883.595637][T15211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2883.635179][T15211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2883.678252][ T3664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2883.726028][ T3664] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2883.795814][ T3664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2884.462776][T15214] chnl_net:caif_netlink_parms(): no params data found [ 2885.172095][T15214] bridge0: port 1(bridge_slave_0) entered blocking state [ 2885.218745][T15214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2885.282188][T15214] device bridge_slave_0 entered promiscuous mode [ 2885.337543][T15214] bridge0: port 2(bridge_slave_1) entered blocking state [ 2885.344783][T15214] bridge0: port 2(bridge_slave_1) entered disabled state [ 2885.384866][T15214] device bridge_slave_1 entered promiscuous mode [ 2885.933676][T14385] Bluetooth: hci2: command 0x0409 tx timeout [ 2886.035033][T15214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2886.136182][T15214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2886.916108][T15214] team0: Port device team_slave_0 added [ 2887.273212][T15214] team0: Port device team_slave_1 added [ 2887.613472][T15214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2887.654407][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2887.727573][T15214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2887.803403][T15214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2887.823116][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2887.915797][T15214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2888.014040][T14385] Bluetooth: hci2: command 0x041b tx timeout [ 2888.555339][T15214] device hsr_slave_0 entered promiscuous mode [ 2888.606600][T15214] device hsr_slave_1 entered promiscuous mode [ 2888.806455][T15214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2888.872856][T15214] Cannot create hsr debugfs directory [ 2890.093822][T14385] Bluetooth: hci2: command 0x040f tx timeout [ 2892.256945][T14889] Bluetooth: hci2: command 0x0419 tx timeout [ 2897.406179][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.423719][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 2912.014734][ T3922] device hsr_slave_0 left promiscuous mode [ 2912.025938][ T3922] device hsr_slave_1 left promiscuous mode [ 2912.045898][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2912.066316][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2912.090885][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2912.175945][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2912.206091][ T3922] device bridge_slave_1 left promiscuous mode [ 2912.235297][ T3922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2912.275430][ T3922] device bridge_slave_0 left promiscuous mode [ 2912.288464][ T3922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2912.425302][ T3922] device bridge2037 left promiscuous mode [ 2912.444159][ T3922] device bridge2033 left promiscuous mode [ 2912.455448][ T3922] device bridge2031 left promiscuous mode [ 2912.465942][ T3922] device bridge2023 left promiscuous mode [ 2912.476245][ T3922] device bridge2017 left promiscuous mode [ 2912.486996][ T3922] device bridge2014 left promiscuous mode [ 2912.493032][ T3922] device bridge1984 left promiscuous mode [ 2912.512878][ T3922] device bridge1942 left promiscuous mode [ 2912.525053][ T3922] device bridge1913 left promiscuous mode [ 2912.535505][ T3922] device bridge1853 left promiscuous mode [ 2912.547005][ T3922] device bridge1766 left promiscuous mode [ 2912.553930][ T3922] device bridge1764 left promiscuous mode [ 2912.573493][ T3922] device bridge1763 left promiscuous mode [ 2912.585873][ T3922] device bridge1712 left promiscuous mode [ 2912.596086][ T3922] device bridge1671 left promiscuous mode [ 2912.609530][ T3922] device bridge4 left promiscuous mode [ 2912.616121][ T3922] device team_slave_0 left promiscuous mode [ 2912.623979][ T3922] device team_slave_1 left promiscuous mode [ 2912.665454][ T3922] device veth1_macvtap left promiscuous mode [ 2912.685456][ T3922] device veth0_macvtap left promiscuous mode [ 2912.703076][ T3922] device veth1_vlan left promiscuous mode [ 2912.714030][ T3922] device veth0_vlan left promiscuous mode [ 2952.492824][ T3664] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 2955.891583][ T3656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2955.920935][ T3656] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2955.961242][ T3656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2955.982072][ T3656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2955.995561][ T3656] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2956.015294][ T3656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2958.091144][T14381] Bluetooth: hci6: command 0x0409 tx timeout [ 2958.808596][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.814963][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.171577][T14889] Bluetooth: hci6: command 0x041b tx timeout [ 2962.251188][T14889] Bluetooth: hci6: command 0x040f tx timeout [ 2964.330652][T14889] Bluetooth: hci6: command 0x0419 tx timeout [ 3006.971227][T14381] Bluetooth: hci2: command 0x0406 tx timeout [ 3020.284634][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.291051][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 3024.970777][ T3664] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 3030.351207][ T3664] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 3035.781462][ T3664] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 3039.166485][ T3656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3039.192880][ T3656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3039.205219][ T3656] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3039.223468][ T3656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3039.246284][ T3656] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3039.262406][ T3656] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3040.102609][ T28] INFO: task dhcpcd:3186 blocked for more than 143 seconds. [ 3040.110010][ T28] Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 3040.133064][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3040.151470][ T28] task:dhcpcd state:D stack:23000 pid: 3186 ppid: 3185 flags:0x00004000 [ 3040.165476][ T28] Call Trace: [ 3040.174820][ T28] [ 3040.183045][ T28] __schedule+0xadf/0x52b0 [ 3040.191967][ T28] ? io_schedule_timeout+0x140/0x140 [ 3040.201881][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 3040.211364][ T28] schedule+0xda/0x1b0 [ 3040.215481][ T28] schedule_preempt_disabled+0xf/0x20 [ 3040.225204][ T28] __mutex_lock+0xa44/0x1350 [ 3040.235371][ T28] ? netlink_dump+0xae/0xc20 [ 3040.245899][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 3040.256711][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3040.271372][ T28] ? kasan_quarantine_put+0xf5/0x210 [ 3040.276734][ T28] ? kasan_quarantine_put+0xf5/0x210 [ 3040.286574][ T28] netlink_dump+0xae/0xc20 [ 3040.295691][ T28] ? slab_free_freelist_hook+0x8b/0x1c0 [ 3040.306578][ T28] ? netlink_deliver_tap+0xc40/0xc40 [ 3040.316509][ T28] ? kmem_cache_free+0xeb/0x5b0 [ 3040.326143][ T28] ? kfree_skbmem+0xef/0x1b0 [ 3040.349807][ T28] netlink_recvmsg+0xbdd/0xe50 [ 3040.354664][ T28] ? netlink_dump+0xc20/0xc20 [ 3040.368402][ T28] ? aa_af_perm+0x230/0x230 [ 3040.373054][ T28] ? _copy_from_user+0xf9/0x170 [ 3040.386725][ T28] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 3040.396462][ T28] ? security_socket_recvmsg+0x8f/0xc0 [ 3040.406536][ T28] ? netlink_dump+0xc20/0xc20 [ 3040.415982][ T28] ____sys_recvmsg+0x2c7/0x600 [ 3040.425027][ T28] ? kernel_recvmsg+0x160/0x160 [ 3040.433961][ T28] ? copy_msghdr_from_user+0xfc/0x150 [ 3040.444332][ T28] ? __copy_msghdr+0x4a0/0x4a0 [ 3040.454691][ T28] ? __lock_acquire+0x166e/0x56d0 [ 3040.465407][ T28] ___sys_recvmsg+0xf2/0x180 [ 3040.474534][ T28] ? copy_msghdr_from_user+0x150/0x150 [ 3040.484440][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3040.495229][ T28] ? __fget_light+0x20a/0x270 [ 3040.505558][ T28] __sys_recvmsg+0xf0/0x1c0 [ 3040.514183][ T28] ? __sys_recvmsg_sock+0x40/0x40 [ 3040.523987][ T28] ? up_write+0x470/0x470 [ 3040.532750][ T28] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3040.543136][ T28] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3040.554177][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 3040.564282][ T28] do_syscall_64+0x35/0xb0 [ 3040.574480][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3040.586060][ T28] RIP: 0033:0x7f147edff003 [ 3040.595029][ T28] RSP: 002b:00007ffd7028e3b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3040.612220][ T28] RAX: ffffffffffffffda RBX: 00007ffd7028f4f0 RCX: 00007f147edff003 [ 3040.624708][ T28] RDX: 0000000000000000 RSI: 00007ffd7028f410 RDI: 0000000000000015 [ 3040.641855][ T28] RBP: 00007ffd7028f480 R08: 0000000000000000 R09: 00007f147eebfa60 [ 3040.655709][ T28] R10: 0000000000000062 R11: 0000000000000246 R12: 00007ffd7028f410 [ 3040.672307][ T28] R13: 00007ffd7028f3f4 R14: 00007ffd7028f400 R15: 0000000000000e60 [ 3040.685943][ T28] [ 3040.697578][ T28] INFO: task kworker/1:1:6469 blocked for more than 143 seconds. [ 3040.706646][ T28] Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 3040.727057][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3040.735889][ T28] task:kworker/1:1 state:D stack:26448 pid: 6469 ppid: 2 flags:0x00004000 [ 3040.754721][ T28] Workqueue: events linkwatch_event [ 3040.765782][ T28] Call Trace: [ 3040.773445][ T28] [ 3040.776421][ T28] __schedule+0xadf/0x52b0 [ 3040.785612][ T28] ? find_held_lock+0x2d/0x110 [ 3040.795217][ T28] ? mark_held_locks+0x10/0xe0 [ 3040.804712][ T28] ? io_schedule_timeout+0x140/0x140 [ 3040.814951][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 3040.824011][ T28] schedule+0xda/0x1b0 [ 3040.835092][ T28] schedule_preempt_disabled+0xf/0x20 [ 3040.844480][ T28] __mutex_lock+0xa44/0x1350 [ 3040.853726][ T28] ? linkwatch_event+0xb/0x60 [ 3040.864247][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 3040.874494][ T28] ? lock_release+0x780/0x780 [ 3040.883570][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3040.894092][ T28] linkwatch_event+0xb/0x60 [ 3040.903027][ T28] process_one_work+0x991/0x1610 [ 3040.912508][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3040.922462][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 3040.931992][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 3040.942055][ T28] worker_thread+0x665/0x1080 [ 3040.946806][ T28] ? __kthread_parkme+0x15f/0x220 [ 3040.964564][ T28] ? process_one_work+0x1610/0x1610 [ 3040.974496][ T28] kthread+0x2e4/0x3a0 [ 3040.982928][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3040.992958][ T28] ret_from_fork+0x1f/0x30 [ 3041.001845][ T28] [ 3041.004977][ T28] INFO: task kworker/1:2:9781 blocked for more than 144 seconds. [ 3041.022941][ T28] Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 3041.034278][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3041.085698][ T28] task:kworker/1:2 state:D stack:27776 pid: 9781 ppid: 2 flags:0x00004000 [ 3041.106203][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 3041.124489][ T28] Call Trace: [ 3041.134237][ T28] [ 3041.142229][ T28] __schedule+0xadf/0x52b0 [ 3041.146700][ T28] ? find_held_lock+0x2d/0x110 [ 3041.162428][ T28] ? mark_held_locks+0x10/0xe0 [ 3041.172415][ T28] ? io_schedule_timeout+0x140/0x140 [ 3041.182435][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 3041.192716][ T28] schedule+0xda/0x1b0 [ 3041.196932][ T28] schedule_preempt_disabled+0xf/0x20 [ 3041.202336][ T28] __mutex_lock+0xa44/0x1350 [ 3041.215789][ T28] ? addrconf_dad_work+0xa3/0x12d0 [ 3041.224971][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 3041.234827][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 3041.245115][ T28] addrconf_dad_work+0xa3/0x12d0 [ 3041.254194][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 3041.263700][ T28] ? addrconf_dad_completed+0xd80/0xd80 [ 3041.274379][ T28] process_one_work+0x991/0x1610 [ 3041.283511][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3041.292847][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 3041.302266][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 3041.311527][ T28] worker_thread+0x665/0x1080 [ 3041.316275][ T28] ? __kthread_parkme+0x15f/0x220 [ 3041.325536][ T28] ? process_one_work+0x1610/0x1610 [ 3041.334781][ T28] kthread+0x2e4/0x3a0 [ 3041.342859][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3041.354426][ T28] ret_from_fork+0x1f/0x30 [ 3041.363410][ T28] [ 3041.369957][ T28] INFO: task syz-executor.2:15214 blocked for more than 144 seconds. [ 3041.386210][T15275] Bluetooth: hci7: command 0x0409 tx timeout [ 3041.412442][ T28] Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 3041.425494][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3041.444908][ T28] task:syz-executor.2 state:D stack:24536 pid:15214 ppid: 1 flags:0x00004004 [ 3041.463891][ T28] Call Trace: [ 3041.471415][ T28] [ 3041.474899][ T28] __schedule+0xadf/0x52b0 [ 3041.484820][ T28] ? io_schedule_timeout+0x140/0x140 [ 3041.494611][ T28] schedule+0xda/0x1b0 [ 3041.502867][ T28] schedule_preempt_disabled+0xf/0x20 [ 3041.512875][ T28] __mutex_lock+0xa44/0x1350 [ 3041.521643][ T28] ? rtnetlink_rcv_msg+0x3e5/0xc90 [ 3041.526807][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 3041.541417][ T28] ? rtnetlink_rcv_msg+0x3af/0xc90 [ 3041.546606][ T28] rtnetlink_rcv_msg+0x3e5/0xc90 [ 3041.555941][ T28] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 3041.565522][ T28] netlink_rcv_skb+0x153/0x420 [ 3041.576171][ T28] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 3041.585596][ T28] ? netlink_ack+0xa80/0xa80 [ 3041.594429][ T28] ? netlink_deliver_tap+0x1a2/0xc40 [ 3041.605091][ T28] ? netlink_deliver_tap+0x1b1/0xc40 [ 3041.615212][ T28] netlink_unicast+0x543/0x7f0 [ 3041.624265][ T28] ? netlink_attachskb+0x880/0x880 [ 3041.633772][ T28] ? __phys_addr+0xc4/0x140 [ 3041.642972][ T28] ? __phys_addr_symbol+0x2c/0x70 [ 3041.654339][ T28] ? __check_object_size+0x2de/0x700 [ 3041.664300][ T28] netlink_sendmsg+0x917/0xe10 [ 3041.673148][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3041.684680][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3041.694592][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3041.703976][ T28] sock_sendmsg+0xcf/0x120 [ 3041.713306][ T28] __sys_sendto+0x236/0x340 [ 3041.723032][ T28] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3041.732763][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3041.743073][ T28] ? __ct_user_exit+0xff/0x150 [ 3041.752238][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 3041.761742][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 3041.766666][ T28] __x64_sys_sendto+0xdd/0x1b0 [ 3041.784722][ T28] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3041.795455][ T28] do_syscall_64+0x35/0xb0 [ 3041.806105][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3041.816617][ T28] RIP: 0033:0x7fded8a3c03c [ 3041.826897][ T28] RSP: 002b:00007fded90cf700 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3041.835378][ T28] RAX: ffffffffffffffda RBX: 00007fded9ad4320 RCX: 00007fded8a3c03c [ 3041.856687][ T28] RDX: 0000000000000020 RSI: 00007fded9ad4370 RDI: 0000000000000003 [ 3041.874151][ T28] RBP: 0000000000000000 R08: 00007fded90cf754 R09: 000000000000000c [ 3041.886998][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3041.895038][ T28] R13: 00007fded9ad4370 R14: 0000000000000003 R15: 0000000000000000 [ 3041.921163][ T28] [ 3041.926708][ T28] [ 3041.926708][ T28] Showing all locks held in the system: [ 3041.944559][ T28] 1 lock held by rcu_tasks_kthre/12: [ 3041.954596][ T28] #0: ffffffff8bf886f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 3041.973837][ T28] 1 lock held by rcu_tasks_trace/13: [ 3041.983928][ T28] #0: ffffffff8bf883f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 3042.003647][ T28] 1 lock held by khungtaskd/28: [ 3042.012836][ T28] #0: ffffffff8bf89240 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 3042.031967][ T28] 2 locks held by kworker/u4:3/46: [ 3042.044048][ T28] #0: ffff8880b9b39f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 3042.062551][ T28] #1: ffff8880b9b277c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3e7/0x4e0 [ 3042.082789][ T28] 1 lock held by dhcpcd/3186: [ 3042.092099][ T28] #0: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xae/0xc20 [ 3042.105483][ T28] 2 locks held by getty/3294: [ 3042.114463][ T28] #0: ffff88814ad26098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 3042.132260][ T28] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef0/0x13e0 [ 3042.146677][ T28] 5 locks held by kworker/u4:6/3922: [ 3042.164098][ T28] #0: ffff8880119c6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 3042.182938][ T28] #1: ffffc9000502fda8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 3042.203073][ T28] #2: ffffffff8d799e50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00 [ 3042.216536][ T28] #3: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8e/0x590 [ 3042.235297][ T28] #4: ffffffff8bf93ef8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x562/0x670 [ 3042.256263][ T28] 3 locks held by kworker/1:1/6469: [ 3042.265429][ T28] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 3042.291746][ T28] #1: ffffc90015547da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 3042.306223][ T28] #2: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60 [ 3042.324888][ T28] 3 locks held by kworker/0:5/14385: [ 3042.334680][ T28] #0: ffff888025aee938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 3042.353546][ T28] #1: ffffc90003ddfda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 3042.376106][ T28] #2: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xe/0x20 [ 3042.393979][ T28] 2 locks held by kworker/u4:10/6035: [ 3042.404460][ T28] 3 locks held by kworker/1:2/9781: [ 3042.422809][ T28] #0: ffff888025aee938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 3042.446140][ T28] #1: ffffc90005aafda8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 3042.467091][ T28] #2: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa3/0x12d0 [ 3042.476588][ T28] 3 locks held by kworker/1:3/15143: [ 3042.497519][ T28] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 3042.515495][ T28] #1: ffffc9000a2e7da8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 3042.534155][ T28] #2: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 3042.552678][ T28] 1 lock held by syz-executor.2/15214: [ 3042.562585][ T28] #0: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e5/0xc90 [ 3042.576533][ T28] 2 locks held by kworker/1:4/15266: [ 3042.586083][ T28] #0: ffff888011866538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 3042.611062][ T28] #1: ffffc90002effda8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 3042.632172][ T28] 2 locks held by syz-executor.2/15272: [ 3042.643604][ T28] #0: ffffffff8d799e50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 3042.662180][ T28] #1: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x214/0x460 [ 3042.677236][ T28] 2 locks held by syz-executor.2/15283: [ 3042.682845][ T28] #0: ffffffff8d799e50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 3042.705453][ T28] #1: ffffffff8d7ae728 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x214/0x460 [ 3042.727542][ T28] [ 3042.729922][ T28] ============================================= [ 3042.729922][ T28] [ 3042.750908][ T28] NMI backtrace for cpu 1 [ 3042.755292][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 3042.764928][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3042.775010][ T28] Call Trace: [ 3042.778305][ T28] [ 3042.781258][ T28] dump_stack_lvl+0xcd/0x134 [ 3042.785891][ T28] nmi_cpu_backtrace.cold+0x46/0x14f [ 3042.791222][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 3042.796457][ T28] nmi_trigger_cpumask_backtrace+0x206/0x250 [ 3042.802518][ T28] watchdog+0xc18/0xf50 [ 3042.806716][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3042.812744][ T28] kthread+0x2e4/0x3a0 [ 3042.816842][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3042.822504][ T28] ret_from_fork+0x1f/0x30 [ 3042.826962][ T28] [ 3042.873464][ T28] Sending NMI from CPU 1 to CPUs 0: [ 3042.882653][ C0] NMI backtrace for cpu 0 [ 3042.882665][ C0] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 3042.882687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3042.882698][ C0] Workqueue: phy10 ieee80211_iface_work [ 3042.882819][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x60 [ 3042.882847][ C0] Code: 81 e1 00 01 00 00 65 48 8b 14 25 80 6f 02 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 bc 15 00 00 85 c0 74 2b 8b 82 98 15 00 00 <83> f8 02 75 20 48 8b 8a a0 15 00 00 8b 92 9c 15 00 00 48 8b 01 48 [ 3042.882867][ C0] RSP: 0018:ffffc90000b779d8 EFLAGS: 00000246 [ 3042.882882][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3042.882894][ C0] RDX: ffff888011bc1d80 RSI: ffffffff88d5cf28 RDI: 0000000000000004 [ 3042.882908][ C0] RBP: 000000000000000c R08: 0000000000000004 R09: 0000000000000000 [ 3042.882920][ C0] R10: 0000000000000000 R11: 000000000008c07c R12: 0000000000000007 [ 3042.882932][ C0] R13: 0000000000000007 R14: ffff888028dcdf8c R15: 0000000000000000 [ 3042.882945][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 3042.882965][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3042.882980][ C0] CR2: 000055ecaab2a4b0 CR3: 000000000bc8e000 CR4: 00000000003506f0 [ 3042.882993][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3042.883004][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3042.883016][ C0] Call Trace: [ 3042.883021][ C0] [ 3042.883027][ C0] ieee80211_sta_get_rates+0x4e8/0x960 [ 3042.883075][ C0] ieee80211_ibss_rx_queued_mgmt+0x1126/0x3150 [ 3042.883099][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3042.883126][ C0] ? ieee80211_ibss_rx_no_sta+0x840/0x840 [ 3042.883149][ C0] ? find_held_lock+0x2d/0x110 [ 3042.883169][ C0] ? kcov_remote_start+0x277/0x7a0 [ 3042.883194][ C0] ? kcov_remote_start+0x156/0x7a0 [ 3042.883215][ C0] ? kcov_remote_start+0x156/0x7a0 [ 3042.883237][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 3042.883260][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 3042.883342][ C0] ieee80211_iface_work+0xa47/0xd30 [ 3042.883369][ C0] process_one_work+0x991/0x1610 [ 3042.883397][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3042.883421][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 3042.883441][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 3042.883466][ C0] worker_thread+0x665/0x1080 [ 3042.883493][ C0] ? process_one_work+0x1610/0x1610 [ 3042.883515][ C0] kthread+0x2e4/0x3a0 [ 3042.883533][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 3042.883562][ C0] ret_from_fork+0x1f/0x30 [ 3042.883589][ C0] [ 3042.886118][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 3043.146567][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 3043.156114][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3043.166170][ T28] Call Trace: [ 3043.169449][ T28] [ 3043.172383][ T28] dump_stack_lvl+0xcd/0x134 [ 3043.176989][ T28] panic+0x2c8/0x627 [ 3043.180925][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 3043.186916][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 3043.192125][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 3043.197508][ T28] ? watchdog.cold+0x130/0x158 [ 3043.202287][ T28] watchdog.cold+0x141/0x158 [ 3043.206884][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3043.212886][ T28] kthread+0x2e4/0x3a0 [ 3043.216967][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3043.222609][ T28] ret_from_fork+0x1f/0x30 [ 3043.227047][ T28] [ 3043.230510][ T28] Kernel Offset: disabled [ 3043.234848][ T28] Rebooting in 86400 seconds..