t1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:54:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x1e00, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x3000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x60, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x4000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2561.311987][T20958] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2561.336590][T20956] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2561.344838][T20951] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x5000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2561.398820][T20968] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2561.436047][T20966] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2562.136735][T20959] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2562.148203][T20959] CPU: 1 PID: 20959 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2562.158692][T20959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2562.168816][T20959] Call Trace: [ 2562.172158][T20959] [ 2562.175108][T20959] dump_stack_lvl+0xda/0x130 [ 2562.179709][T20959] dump_stack+0x15/0x20 [ 2562.183917][T20959] dump_header+0x82/0x2d0 [ 2562.188298][T20959] oom_kill_process+0x33a/0x4c0 [ 2562.193237][T20959] out_of_memory+0x9ca/0xbf0 [ 2562.197915][T20959] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2562.204027][T20959] mem_cgroup_out_of_memory+0x139/0x190 [ 2562.209724][T20959] try_charge_memcg+0x75c/0xd30 [ 2562.214825][T20959] ? __swap_duplicate+0x29b/0x2b0 [ 2562.219911][T20959] ? radix_tree_lookup+0xf9/0x150 [ 2562.224949][T20959] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2562.231028][T20959] __read_swap_cache_async+0x2f6/0x550 [ 2562.236553][T20959] swap_cluster_readahead+0x27c/0x4c0 [ 2562.241948][T20959] swapin_readahead+0xe9/0x7f0 [ 2562.246713][T20959] ? __filemap_get_folio+0x41a/0x5a0 [ 2562.252040][T20959] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2562.257676][T20959] ? swap_cache_get_folio+0x6e/0x200 [ 2562.262965][T20959] do_swap_page+0x4a0/0x1670 [ 2562.267627][T20959] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2562.272946][T20959] ? __rcu_read_lock+0x35/0x50 [ 2562.277711][T20959] ? pte_offset_map_nolock+0x124/0x1d0 [ 2562.283181][T20959] handle_mm_fault+0xa36/0x2dd0 [ 2562.288053][T20959] exc_page_fault+0x3ff/0x6c0 [ 2562.292827][T20959] asm_exc_page_fault+0x26/0x30 [ 2562.297685][T20959] RIP: 0033:0x7f07d1420bc4 [ 2562.302134][T20959] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2562.322341][T20959] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2562.328407][T20959] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2562.336387][T20959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2562.344356][T20959] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2562.352347][T20959] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027188e [ 2562.360314][T20959] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027154d [ 2562.368278][T20959] [ 2562.371508][T20959] memory: usage 307200kB, limit 307200kB, failcnt 195840 [ 2562.378567][T20959] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 2562.386602][T20959] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 2562.393920][T20959] Memory cgroup stats for /syz1: [ 2562.394051][T20959] cache 4096 [ 2562.402256][T20959] rss 8192 [ 2562.405374][T20959] shmem 0 [ 2562.408388][T20959] mapped_file 0 [ 2562.411921][T20959] dirty 0 [ 2562.414893][T20959] writeback 8192 [ 2562.418465][T20959] workingset_refault_anon 89457 [ 2562.423333][T20959] workingset_refault_file 314 [ 2562.428055][T20959] swap 540672 [ 2562.431312][T20959] swapcached 12288 [ 2562.435037][T20959] pgpgin 1997811 [ 2562.438587][T20959] pgpgout 1997807 [ 2562.442240][T20959] pgfault 2091335 [ 2562.445878][T20959] pgmajfault 39420 [ 2562.449619][T20959] inactive_anon 0 [ 2562.453293][T20959] active_anon 0 [ 2562.456819][T20959] inactive_file 0 [ 2562.460439][T20959] active_file 4096 [ 2562.464188][T20959] unevictable 0 [ 2562.467777][T20959] hierarchical_memory_limit 314572800 [ 2562.473154][T20959] hierarchical_memsw_limit 9223372036854771712 [ 2562.479338][T20959] total_cache 4096 [ 2562.483051][T20959] total_rss 8192 [ 2562.486711][T20959] total_shmem 0 [ 2562.490158][T20959] total_mapped_file 0 [ 2562.494119][T20959] total_dirty 0 [ 2562.497623][T20959] total_writeback 8192 [ 2562.501720][T20959] total_workingset_refault_anon 89457 [ 2562.507133][T20959] total_workingset_refault_file 314 [ 2562.512314][T20959] total_swap 540672 [ 2562.516104][T20959] total_swapcached 12288 [ 2562.520373][T20959] total_pgpgin 1997811 [ 2562.524530][T20959] total_pgpgout 1997807 [ 2562.529188][T20959] total_pgfault 2091335 [ 2562.533478][T20959] total_pgmajfault 39420 [ 2562.537735][T20959] total_inactive_anon 0 [ 2562.541872][T20959] total_active_anon 0 [ 2562.545827][T20959] total_inactive_file 0 [ 2562.550000][T20959] total_active_file 4096 [ 2562.554250][T20959] total_unevictable 0 [ 2562.558382][T20959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20959,uid=0 [ 2562.573750][T20959] Memory cgroup out of memory: Killed process 20959 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2562.591103][T20952] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2562.604629][T20952] CPU: 0 PID: 20952 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2562.615192][T20952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2562.625385][T20952] Call Trace: [ 2562.628660][T20952] [ 2562.631587][T20952] dump_stack_lvl+0xda/0x130 [ 2562.636189][T20952] dump_stack+0x15/0x20 [ 2562.640381][T20952] dump_header+0x82/0x2d0 [ 2562.644734][T20952] oom_kill_process+0x33a/0x4c0 [ 2562.649593][T20952] out_of_memory+0x9ca/0xbf0 [ 2562.654395][T20952] mem_cgroup_out_of_memory+0x139/0x190 [ 2562.659977][T20952] try_charge_memcg+0x75c/0xd30 [ 2562.664827][T20952] obj_cgroup_charge_pages+0xab/0x130 [ 2562.670203][T20952] __memcg_kmem_charge_page+0x9c/0x170 [ 2562.675729][T20952] __alloc_pages+0x1bb/0x340 [ 2562.680309][T20952] alloc_pages_mpol+0xb1/0x1d0 [ 2562.685179][T20952] alloc_pages+0xe0/0x100 [ 2562.689505][T20952] __vmalloc_node_range+0x6d2/0xea0 [ 2562.694805][T20952] kvmalloc_node+0x121/0x160 [ 2562.699387][T20952] ? xt_alloc_table_info+0x3d/0x80 [ 2562.704530][T20952] xt_alloc_table_info+0x3d/0x80 [ 2562.709462][T20952] do_arpt_set_ctl+0x634/0x13b0 [ 2562.714361][T20952] ? __futex_wait+0x227/0x280 [ 2562.719029][T20952] ? __futex_wake_mark+0x70/0x70 [ 2562.723958][T20952] ? tcp_release_cb+0xfe/0x370 [ 2562.728752][T20952] ? _raw_spin_unlock_bh+0x36/0x40 [ 2562.733877][T20952] nf_setsockopt+0x18d/0x1b0 [ 2562.738463][T20952] ip_setsockopt+0xe6/0x100 [ 2562.743087][T20952] tcp_setsockopt+0x90/0xa0 [ 2562.747591][T20952] sock_common_setsockopt+0x61/0x70 [ 2562.752835][T20952] ? sock_common_recvmsg+0xe0/0xe0 [ 2562.757943][T20952] __sys_setsockopt+0x1d4/0x240 [ 2562.762785][T20952] __x64_sys_setsockopt+0x66/0x80 [ 2562.767810][T20952] do_syscall_64+0x44/0x110 [ 2562.772412][T20952] ? syscall_exit_to_user_mode+0x38/0x140 [ 2562.778276][T20952] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2562.784205][T20952] RIP: 0033:0x7f50c0fa7ba9 [ 2562.788608][T20952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2562.808368][T20952] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2562.816794][T20952] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2562.824774][T20952] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2562.832751][T20952] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2562.840713][T20952] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2562.848684][T20952] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2562.856651][T20952] [ 2562.859801][T20952] memory: usage 307200kB, limit 307200kB, failcnt 93140 [ 2562.866818][T20952] memory+swap: usage 309048kB, limit 9007199254740988kB, failcnt 0 [ 2562.874726][T20952] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2562.882017][T20952] Memory cgroup stats for /syz3: [ 2562.895290][T20952] cache 16384 [ 2562.903542][T20952] rss 0 [ 2562.906430][T20952] shmem 0 [ 2562.909535][T20952] mapped_file 0 [ 2562.912997][T20952] dirty 0 [ 2562.915923][T20952] writeback 0 [ 2562.919231][T20952] workingset_refault_anon 73387 [ 2562.924138][T20952] workingset_refault_file 320 [ 2562.928809][T20952] swap 1892352 [ 2562.932170][T20952] swapcached 12288 [ 2562.935875][T20952] pgpgin 375953 [ 2562.939338][T20952] pgpgout 375946 [ 2562.942869][T20952] pgfault 557395 [ 2562.946433][T20952] pgmajfault 38928 [ 2562.950189][T20952] inactive_anon 0 [ 2562.953807][T20952] active_anon 0 [ 2562.957345][T20952] inactive_file 12288 [ 2562.961314][T20952] active_file 4096 [ 2562.965057][T20952] unevictable 0 [ 2562.968528][T20952] hierarchical_memory_limit 314572800 [ 2562.974006][T20952] hierarchical_memsw_limit 9223372036854771712 [ 2562.980194][T20952] total_cache 16384 [ 2562.983989][T20952] total_rss 0 [ 2562.987299][T20952] total_shmem 0 [ 2562.990762][T20952] total_mapped_file 0 03:55:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x7]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x6000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x68, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2562.994736][T20952] total_dirty 0 [ 2562.998223][T20952] total_writeback 0 [ 2563.002028][T20952] total_workingset_refault_anon 73387 [ 2563.007437][T20952] total_workingset_refault_file 320 [ 2563.012797][T20952] total_swap 1892352 [ 2563.016723][T20952] total_swapcached 12288 [ 2563.021006][T20952] total_pgpgin 375953 [ 2563.025078][T20952] total_pgpgout 375946 [ 2563.029156][T20952] total_pgfault 557395 [ 2563.033216][T20952] total_pgmajfault 38928 [ 2563.035301][T20978] __nla_validate_parse: 3 callbacks suppressed [ 2563.035343][T20978] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2563.037489][T20952] total_inactive_anon 0 [ 2563.037497][T20952] total_active_anon 0 [ 2563.037502][T20952] total_inactive_file 12288 [ 2563.037509][T20952] total_active_file 4096 [ 2563.037515][T20952] total_unevictable 0 [ 2563.037526][T20952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20949,uid=0 [ 2563.089179][T20952] Memory cgroup out of memory: Killed process 20949 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2563.127733][T20955] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2563.141283][T20955] CPU: 0 PID: 20955 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2563.151709][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2563.161775][T20955] Call Trace: [ 2563.165059][T20955] [ 2563.167994][T20955] dump_stack_lvl+0xda/0x130 [ 2563.172751][T20955] dump_stack+0x15/0x20 [ 2563.176978][T20955] dump_header+0x82/0x2d0 [ 2563.181452][T20955] oom_kill_process+0x33a/0x4c0 [ 2563.186345][T20955] out_of_memory+0x9ca/0xbf0 [ 2563.190953][T20955] mem_cgroup_out_of_memory+0x139/0x190 [ 2563.196557][T20955] try_charge_memcg+0x75c/0xd30 [ 2563.201408][T20955] obj_cgroup_charge_pages+0xab/0x130 [ 2563.206784][T20955] __memcg_kmem_charge_page+0x9c/0x170 [ 2563.212342][T20955] __alloc_pages+0x1bb/0x340 [ 2563.216925][T20955] alloc_pages_mpol+0xb1/0x1d0 [ 2563.221687][T20955] alloc_pages+0xe0/0x100 [ 2563.226010][T20955] __vmalloc_node_range+0x6d2/0xea0 [ 2563.231241][T20955] kvmalloc_node+0x121/0x160 [ 2563.235882][T20955] ? xt_alloc_table_info+0x3d/0x80 [ 2563.240989][T20955] xt_alloc_table_info+0x3d/0x80 [ 2563.245979][T20955] do_arpt_set_ctl+0x634/0x13b0 [ 2563.250957][T20955] ? __futex_wait+0x227/0x280 [ 2563.255631][T20955] ? __futex_wake_mark+0x70/0x70 [ 2563.260591][T20955] ? tcp_release_cb+0xfe/0x370 [ 2563.265440][T20955] ? _raw_spin_unlock_bh+0x36/0x40 [ 2563.270545][T20955] nf_setsockopt+0x18d/0x1b0 [ 2563.275148][T20955] ip_setsockopt+0xe6/0x100 [ 2563.279647][T20955] tcp_setsockopt+0x90/0xa0 [ 2563.284143][T20955] sock_common_setsockopt+0x61/0x70 [ 2563.289400][T20955] ? sock_common_recvmsg+0xe0/0xe0 [ 2563.294525][T20955] __sys_setsockopt+0x1d4/0x240 [ 2563.299367][T20955] __x64_sys_setsockopt+0x66/0x80 [ 2563.304387][T20955] do_syscall_64+0x44/0x110 [ 2563.308992][T20955] ? syscall_exit_to_user_mode+0x38/0x140 [ 2563.314703][T20955] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2563.320609][T20955] RIP: 0033:0x7ffbf0714ba9 [ 2563.325021][T20955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2563.344634][T20955] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2563.353036][T20955] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2563.361021][T20955] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2563.368984][T20955] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2563.376947][T20955] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2563.384914][T20955] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2563.392893][T20955] [ 2563.396103][T20955] memory: usage 307200kB, limit 307200kB, failcnt 46345 [ 2563.403067][T20955] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2563.411027][T20955] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2563.418405][T20955] Memory cgroup stats for /syz4: [ 2563.419847][T20955] cache 12288 [ 2563.428086][T20955] rss 0 [ 2563.430838][T20955] shmem 0 [ 2563.433761][T20955] mapped_file 0 [ 2563.437237][T20955] dirty 0 [ 2563.440201][T20955] writeback 0 [ 2563.443522][T20955] workingset_refault_anon 63582 [ 2563.448412][T20955] workingset_refault_file 309 [ 2563.453253][T20955] swap 4632576 [ 2563.456658][T20955] swapcached 8192 [ 2563.460276][T20955] pgpgin 889584 [ 2563.463800][T20955] pgpgout 889579 [ 2563.467447][T20955] pgfault 964352 [ 2563.470980][T20955] pgmajfault 33378 [ 2563.474690][T20955] inactive_anon 0 [ 2563.478503][T20955] active_anon 0 [ 2563.481954][T20955] inactive_file 12288 [ 2563.485998][T20955] active_file 0 [ 2563.489475][T20955] unevictable 0 [ 2563.492990][T20955] hierarchical_memory_limit 314572800 [ 2563.498376][T20955] hierarchical_memsw_limit 9223372036854771712 [ 2563.504531][T20955] total_cache 12288 [ 2563.508395][T20955] total_rss 0 [ 2563.511669][T20955] total_shmem 0 [ 2563.515152][T20955] total_mapped_file 0 [ 2563.519139][T20955] total_dirty 0 [ 2563.522595][T20955] total_writeback 0 [ 2563.526521][T20955] total_workingset_refault_anon 63582 [ 2563.531885][T20955] total_workingset_refault_file 309 [ 2563.537101][T20955] total_swap 4632576 [ 2563.540994][T20955] total_swapcached 8192 [ 2563.545142][T20955] total_pgpgin 889584 [ 2563.549183][T20955] total_pgpgout 889579 [ 2563.553243][T20955] total_pgfault 964352 [ 2563.557373][T20955] total_pgmajfault 33378 [ 2563.561605][T20955] total_inactive_anon 0 [ 2563.565845][T20955] total_active_anon 0 [ 2563.569842][T20955] total_inactive_file 12288 [ 2563.574350][T20955] total_active_file 0 [ 2563.578365][T20955] total_unevictable 0 [ 2563.582344][T20955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20953,uid=0 [ 2563.597692][T20955] Memory cgroup out of memory: Killed process 20953 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x6c, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xda450000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x7000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x74, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x7a, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x300, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x8]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x500, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2564.074694][T20990] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2564.742605][T21008] validate_nla: 11 callbacks suppressed [ 2564.742619][T21008] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2564.950542][T21000] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2564.962012][T21000] CPU: 0 PID: 21000 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2564.972661][T21000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2564.982702][T21000] Call Trace: [ 2564.985971][T21000] [ 2564.988911][T21000] dump_stack_lvl+0xda/0x130 [ 2564.993584][T21000] dump_stack+0x15/0x20 [ 2564.997749][T21000] dump_header+0x82/0x2d0 [ 2565.002071][T21000] oom_kill_process+0x33a/0x4c0 [ 2565.006973][T21000] out_of_memory+0x9ca/0xbf0 [ 2565.011652][T21000] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2565.017767][T21000] mem_cgroup_out_of_memory+0x139/0x190 [ 2565.023311][T21000] try_charge_memcg+0x75c/0xd30 [ 2565.028158][T21000] ? __swap_duplicate+0x29b/0x2b0 [ 2565.033242][T21000] ? radix_tree_lookup+0xf9/0x150 [ 2565.038388][T21000] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2565.044487][T21000] __read_swap_cache_async+0x2f6/0x550 [ 2565.050025][T21000] swap_cluster_readahead+0x27c/0x4c0 [ 2565.055390][T21000] swapin_readahead+0xe9/0x7f0 [ 2565.060140][T21000] ? __filemap_get_folio+0x41a/0x5a0 [ 2565.065446][T21000] ? __perf_event_task_sched_in+0x769/0x790 [ 2565.071331][T21000] ? swap_cache_get_folio+0x6e/0x200 [ 2565.076647][T21000] do_swap_page+0x4a0/0x1670 [ 2565.081479][T21000] ? __rcu_read_lock+0x35/0x50 [ 2565.086230][T21000] ? pte_offset_map_nolock+0x124/0x1d0 [ 2565.091681][T21000] handle_mm_fault+0xa36/0x2dd0 [ 2565.096521][T21000] ? mt_find+0x1d9/0x310 [ 2565.100750][T21000] exc_page_fault+0x2f7/0x6c0 [ 2565.105415][T21000] asm_exc_page_fault+0x26/0x30 [ 2565.110334][T21000] RIP: 0010:__get_user_8+0x11/0x20 [ 2565.115538][T21000] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2565.135233][T21000] RSP: 0018:ffffc90000e17e38 EFLAGS: 00050202 [ 2565.141355][T21000] RAX: 000055555595bda8 RBX: ffffc90000e17e40 RCX: ffffffff81443e13 [ 2565.149330][T21000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888100e06b50 [ 2565.157325][T21000] RBP: ffffc90000e17ef8 R08: 0001888100e06b57 R09: 0000000000000000 [ 2565.165288][T21000] R10: 0001ffffffffffff R11: 0001888100e06810 R12: ffff888100e06180 [ 2565.173332][T21000] R13: ffff888100e06b50 R14: ffffc90000e17f58 R15: ffffc90000e17fd8 [ 2565.181298][T21000] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2565.187269][T21000] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2565.193025][T21000] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2565.198968][T21000] exit_to_user_mode_loop+0xcc/0xe0 [ 2565.204176][T21000] exit_to_user_mode_prepare+0x6c/0xb0 [ 2565.209692][T21000] irqentry_exit_to_user_mode+0x9/0x20 [ 2565.215175][T21000] irqentry_exit+0x12/0x40 [ 2565.219644][T21000] asm_exc_page_fault+0x26/0x30 [ 2565.224480][T21000] RIP: 0033:0x7f07d1420bc4 [ 2565.228894][T21000] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2565.248489][T21000] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2565.254672][T21000] RAX: 0000000000000000 RBX: 00007f07d1586050 RCX: 0000000000000000 [ 2565.262626][T21000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2565.270584][T21000] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2565.278616][T21000] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027235b [ 2565.286577][T21000] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027201a [ 2565.294603][T21000] [ 2565.297698][T21000] memory: usage 307200kB, limit 307200kB, failcnt 195989 [ 2565.304772][T21000] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 2565.312700][T21000] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 2565.320026][T21000] Memory cgroup stats for /syz1: [ 2565.324360][T21000] cache 4096 [ 2565.332568][T21000] rss 8192 [ 2565.335579][T21000] shmem 0 [ 2565.338522][T21000] mapped_file 0 [ 2565.341995][T21000] dirty 0 [ 2565.344923][T21000] writeback 8192 [ 2565.348483][T21000] workingset_refault_anon 89519 [ 2565.353406][T21000] workingset_refault_file 314 [ 2565.358104][T21000] swap 540672 [ 2565.361450][T21000] swapcached 12288 [ 2565.365152][T21000] pgpgin 1997919 [ 2565.368756][T21000] pgpgout 1997915 [ 2565.372374][T21000] pgfault 2091618 [ 2565.375991][T21000] pgmajfault 39451 [ 2565.379719][T21000] inactive_anon 0 [ 2565.383394][T21000] active_anon 0 [ 2565.386875][T21000] inactive_file 0 [ 2565.390497][T21000] active_file 4096 [ 2565.394198][T21000] unevictable 0 03:55:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x3e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x600, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x8000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x700, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2565.397662][T21000] hierarchical_memory_limit 314572800 [ 2565.403019][T21000] hierarchical_memsw_limit 9223372036854771712 [ 2565.409186][T21000] total_cache 4096 [ 2565.412946][T21000] total_rss 8192 [ 2565.416520][T21000] total_shmem 0 [ 2565.420076][T21000] total_mapped_file 0 [ 2565.424107][T21000] total_dirty 0 [ 2565.427610][T21000] total_writeback 8192 [ 2565.430725][T21014] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2565.431656][T21000] total_workingset_refault_anon 89519 [ 2565.431687][T21000] total_workingset_refault_file 314 [ 2565.431694][T21000] total_swap 540672 [ 2565.431699][T21000] total_swapcached 12288 [ 2565.431705][T21000] total_pgpgin 1997919 [ 2565.431710][T21000] total_pgpgout 1997915 [ 2565.431715][T21000] total_pgfault 2091618 [ 2565.431720][T21000] total_pgmajfault 39451 [ 2565.475379][T21000] total_inactive_anon 0 [ 2565.479598][T21000] total_active_anon 0 [ 2565.483585][T21000] total_inactive_file 0 [ 2565.487859][T21000] total_active_file 4096 [ 2565.492110][T21000] total_unevictable 0 [ 2565.496163][T21000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21000,uid=0 [ 2565.511505][T21000] Memory cgroup out of memory: Killed process 21000 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2565.538345][T21046] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x900, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x9000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2565.548509][T21053] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2565.556783][T21079] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2565.590229][T21123] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2565.636757][T21125] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x9]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffea}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xa00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x2900, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xa000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2565.838341][T21131] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2565.847052][T21132] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2565.887004][T21136] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2566.241315][T21011] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2566.252694][T21011] CPU: 1 PID: 21011 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2566.263237][T21011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2566.273290][T21011] Call Trace: [ 2566.276637][T21011] [ 2566.279584][T21011] dump_stack_lvl+0xda/0x130 [ 2566.284229][T21011] dump_stack+0x15/0x20 [ 2566.288389][T21011] dump_header+0x82/0x2d0 [ 2566.292752][T21011] oom_kill_process+0x33a/0x4c0 [ 2566.297632][T21011] out_of_memory+0x9ca/0xbf0 [ 2566.302236][T21011] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2566.308315][T21011] mem_cgroup_out_of_memory+0x139/0x190 [ 2566.313880][T21011] try_charge_memcg+0x75c/0xd30 [ 2566.318831][T21011] ? __swap_duplicate+0x29b/0x2b0 [ 2566.323965][T21011] ? radix_tree_lookup+0xf9/0x150 [ 2566.329443][T21011] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2566.335526][T21011] __read_swap_cache_async+0x2f6/0x550 [ 2566.340994][T21011] swap_cluster_readahead+0x27c/0x4c0 [ 2566.346404][T21011] swapin_readahead+0xe9/0x7f0 [ 2566.351217][T21011] ? __filemap_get_folio+0x41a/0x5a0 [ 2566.356603][T21011] ? swap_cache_get_folio+0x6e/0x200 [ 2566.361962][T21011] do_swap_page+0x4a0/0x1670 [ 2566.366597][T21011] ? asm_exc_page_fault+0x26/0x30 [ 2566.371647][T21011] ? __rcu_read_lock+0x35/0x50 [ 2566.376418][T21011] ? pte_offset_map_nolock+0x124/0x1d0 [ 2566.381883][T21011] handle_mm_fault+0xa36/0x2dd0 [ 2566.386827][T21011] exc_page_fault+0x3ff/0x6c0 [ 2566.391527][T21011] asm_exc_page_fault+0x26/0x30 [ 2566.396379][T21011] RIP: 0033:0x7f50c0f61b8f [ 2566.400793][T21011] Code: 49 39 c4 4c 0f 42 e0 48 8b 05 25 eb c8 00 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d ff 6d 16 00 00 0f 8e 12 ff ff ff 4c 07 ff ff 49 39 c4 0f 82 60 01 00 00 69 3d e9 ea c8 00 e8 03 [ 2566.420405][T21011] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2566.426534][T21011] RAX: 0000000000000000 RBX: 00007f50c10c8980 RCX: 0000000000000000 [ 2566.434505][T21011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2566.442483][T21011] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2566.450454][T21011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000272899 [ 2566.458435][T21011] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 0000000000272558 [ 2566.466435][T21011] [ 2566.469593][T21011] memory: usage 307200kB, limit 307200kB, failcnt 93291 [ 2566.476669][T21011] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2566.484604][T21011] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2566.491944][T21011] Memory cgroup stats for /syz3: [ 2566.517588][T21011] cache 16384 [ 2566.525810][T21011] rss 8192 [ 2566.528950][T21011] shmem 0 [ 2566.531877][T21011] mapped_file 0 [ 2566.535327][T21011] dirty 0 [ 2566.538308][T21011] writeback 8192 [ 2566.541842][T21011] workingset_refault_anon 73472 [ 2566.546743][T21011] workingset_refault_file 320 [ 2566.551441][T21011] swap 1896448 [ 2566.554926][T21011] swapcached 8192 [ 2566.558573][T21011] pgpgin 376084 [ 2566.562031][T21011] pgpgout 376078 [ 2566.565623][T21011] pgfault 557731 [ 2566.569181][T21011] pgmajfault 38964 [ 2566.572899][T21011] inactive_anon 0 [ 2566.576553][T21011] active_anon 0 [ 2566.580018][T21011] inactive_file 12288 [ 2566.583986][T21011] active_file 4096 [ 2566.587722][T21011] unevictable 0 [ 2566.591174][T21011] hierarchical_memory_limit 314572800 [ 2566.596547][T21011] hierarchical_memsw_limit 9223372036854771712 [ 2566.602786][T21011] total_cache 16384 [ 2566.606616][T21011] total_rss 8192 [ 2566.610307][T21011] total_shmem 0 [ 2566.613749][T21011] total_mapped_file 0 [ 2566.617796][T21011] total_dirty 0 [ 2566.621254][T21011] total_writeback 8192 [ 2566.625309][T21011] total_workingset_refault_anon 73472 [ 2566.630745][T21011] total_workingset_refault_file 320 [ 2566.635931][T21011] total_swap 1896448 [ 2566.639837][T21011] total_swapcached 8192 [ 2566.644065][T21011] total_pgpgin 376084 [ 2566.648073][T21011] total_pgpgout 376078 [ 2566.652214][T21011] total_pgfault 557731 [ 2566.656271][T21011] total_pgmajfault 38964 [ 2566.660545][T21011] total_inactive_anon 0 [ 2566.664830][T21011] total_active_anon 0 [ 2566.668853][T21011] total_inactive_file 12288 [ 2566.673418][T21011] total_active_file 4096 [ 2566.677667][T21011] total_unevictable 0 [ 2566.681657][T21011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21011,uid=0 [ 2566.697042][T21011] Memory cgroup out of memory: Killed process 21011 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xb000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xfe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0xa]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35f7, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xb00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xc000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2566.955114][T21140] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2566.970685][T21147] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2566.988476][T21146] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xc00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x3, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xd00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xd000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2567.046587][T21151] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2567.071669][T21155] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xe00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2567.126704][T21159] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2567.171557][T21163] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x4, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xf00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xe000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35f8, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0xd]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x1100, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x19, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x1200, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x10000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0) [ 2568.087241][T21176] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2568.112360][T21178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 03:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x1a2c, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x11000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x4, @mcast1}]}, 0x30}}, 0x0) [ 2568.165968][T21184] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x2000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2568.230171][T21191] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2568.940171][T21166] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2568.951564][T21166] CPU: 1 PID: 21166 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2568.961976][T21166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2568.972030][T21166] Call Trace: [ 2568.975306][T21166] [ 2568.978230][T21166] dump_stack_lvl+0xda/0x130 [ 2568.982903][T21166] dump_stack+0x15/0x20 [ 2568.987058][T21166] dump_header+0x82/0x2d0 [ 2568.991483][T21166] oom_kill_process+0x33a/0x4c0 [ 2568.996336][T21166] out_of_memory+0x9ca/0xbf0 [ 2569.000992][T21166] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2569.007058][T21166] mem_cgroup_out_of_memory+0x139/0x190 [ 2569.012614][T21166] try_charge_memcg+0x75c/0xd30 [ 2569.017505][T21166] ? __swap_duplicate+0x29b/0x2b0 [ 2569.022673][T21166] ? radix_tree_lookup+0xf9/0x150 [ 2569.027755][T21166] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2569.033843][T21166] __read_swap_cache_async+0x2f6/0x550 [ 2569.039328][T21166] swap_cluster_readahead+0x27c/0x4c0 [ 2569.044710][T21166] swapin_readahead+0xe9/0x7f0 [ 2569.049482][T21166] ? __filemap_get_folio+0x41a/0x5a0 [ 2569.054768][T21166] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2569.060525][T21166] ? swap_cache_get_folio+0x6e/0x200 [ 2569.065812][T21166] do_swap_page+0x4a0/0x1670 [ 2569.070423][T21166] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2569.075720][T21166] ? __rcu_read_lock+0x35/0x50 [ 2569.080485][T21166] ? pte_offset_map_nolock+0x124/0x1d0 [ 2569.085970][T21166] handle_mm_fault+0xa36/0x2dd0 [ 2569.090830][T21166] exc_page_fault+0x3ff/0x6c0 [ 2569.095510][T21166] asm_exc_page_fault+0x26/0x30 [ 2569.100361][T21166] RIP: 0033:0x7ffbf06ced24 [ 2569.104765][T21166] Code: 02 ff ff 48 8d 1d 7c 52 16 00 83 3d 7d 6c 16 00 00 48 8d ab 00 1a 00 00 7f 25 e9 88 fd ff ff 48 8b 00 89 83 9c 00 00 00 31 f6 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 [ 2569.124434][T21166] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010246 [ 2569.130517][T21166] RAX: 000000000003ffff RBX: 00007ffbf0833f80 RCX: 0000000000272f40 [ 2569.138480][T21166] RDX: 000000000000039a RSI: 0000000000000000 RDI: 00007ffbf0833f80 [ 2569.146547][T21166] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2569.154529][T21166] R10: 00007ffc335ae080 R11: 000000000007a3c2 R12: 00000000002732d7 [ 2569.162509][T21166] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000272f96 [ 2569.170591][T21166] [ 2569.173725][T21166] memory: usage 307200kB, limit 307200kB, failcnt 46746 [ 2569.180693][T21166] memory+swap: usage 311716kB, limit 9007199254740988kB, failcnt 0 [ 2569.188660][T21166] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2569.196252][T21166] Memory cgroup stats for /syz4: [ 2569.196474][T21166] cache 12288 [ 2569.204713][T21166] rss 8192 [ 2569.208150][T21166] shmem 0 [ 2569.211073][T21166] mapped_file 0 [ 2569.214507][T21166] dirty 0 [ 2569.217469][T21166] writeback 4096 [ 2569.221041][T21166] workingset_refault_anon 63742 [ 2569.225919][T21166] workingset_refault_file 309 [ 2569.230620][T21166] swap 4624384 [ 2569.233997][T21166] swapcached 16384 [ 2569.237746][T21166] pgpgin 889848 [ 2569.241220][T21166] pgpgout 889841 [ 2569.244914][T21166] pgfault 965127 [ 2569.248554][T21166] pgmajfault 33457 [ 2569.252267][T21166] inactive_anon 0 [ 2569.255877][T21166] active_anon 0 [ 2569.259439][T21166] inactive_file 12288 [ 2569.263431][T21166] active_file 0 [ 2569.266889][T21166] unevictable 0 [ 2569.270336][T21166] hierarchical_memory_limit 314572800 [ 2569.275741][T21166] hierarchical_memsw_limit 9223372036854771712 [ 2569.281943][T21166] total_cache 12288 [ 2569.285756][T21166] total_rss 8192 [ 2569.289305][T21166] total_shmem 0 [ 2569.292797][T21166] total_mapped_file 0 [ 2569.296780][T21166] total_dirty 0 [ 2569.300279][T21166] total_writeback 4096 [ 2569.304440][T21166] total_workingset_refault_anon 63742 [ 2569.309830][T21166] total_workingset_refault_file 309 [ 2569.315016][T21166] total_swap 4624384 [ 2569.318904][T21166] total_swapcached 16384 [ 2569.323129][T21166] total_pgpgin 889848 [ 2569.327103][T21166] total_pgpgout 889841 [ 2569.331192][T21166] total_pgfault 965127 [ 2569.335321][T21166] total_pgmajfault 33457 [ 2569.339581][T21166] total_inactive_anon 0 [ 2569.343724][T21166] total_active_anon 0 [ 2569.347721][T21166] total_inactive_file 12288 [ 2569.352285][T21166] total_active_file 0 [ 2569.356263][T21166] total_unevictable 0 [ 2569.360322][T21166] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21166,uid=0 [ 2569.375966][T21166] Memory cgroup out of memory: Killed process 21166 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2569.393390][T21174] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2569.404723][T21174] CPU: 0 PID: 21174 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2569.415145][T21174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2569.425197][T21174] Call Trace: [ 2569.428487][T21174] [ 2569.431446][T21174] dump_stack_lvl+0xda/0x130 [ 2569.436054][T21174] dump_stack+0x15/0x20 [ 2569.440264][T21174] dump_header+0x82/0x2d0 [ 2569.444673][T21174] oom_kill_process+0x33a/0x4c0 [ 2569.449651][T21174] out_of_memory+0x9ca/0xbf0 [ 2569.454281][T21174] mem_cgroup_out_of_memory+0x139/0x190 [ 2569.459964][T21174] try_charge_memcg+0x75c/0xd30 [ 2569.464909][T21174] ? __swap_duplicate+0x29b/0x2b0 [ 2569.469987][T21174] ? radix_tree_lookup+0xf9/0x150 [ 2569.475064][T21174] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2569.481194][T21174] __read_swap_cache_async+0x2f6/0x550 [ 2569.486677][T21174] swap_cluster_readahead+0x452/0x4c0 [ 2569.492045][T21174] swapin_readahead+0xe9/0x7f0 [ 2569.496802][T21174] ? __filemap_get_folio+0x41a/0x5a0 [ 2569.502144][T21174] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2569.507918][T21174] ? swap_cache_get_folio+0x6e/0x200 [ 2569.513195][T21174] do_swap_page+0x4a0/0x1670 [ 2569.517776][T21174] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2569.523091][T21174] ? __rcu_read_lock+0x35/0x50 [ 2569.527866][T21174] ? pte_offset_map_nolock+0x124/0x1d0 [ 2569.533365][T21174] handle_mm_fault+0xa36/0x2dd0 [ 2569.538216][T21174] exc_page_fault+0x3ff/0x6c0 [ 2569.542920][T21174] asm_exc_page_fault+0x26/0x30 [ 2569.547765][T21174] RIP: 0033:0x7f50c0f638e7 [ 2569.552183][T21174] Code: 25 ff 0f 00 00 09 c5 80 3d de cd c8 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 2569.571835][T21174] RSP: 002b:00007ffd61c03b70 EFLAGS: 00010202 [ 2569.577892][T21174] RAX: 00000000819449e9 RBX: 00007f50c10c7018 RCX: 0000000000000008 [ 2569.585850][T21174] RDX: ffffffff81944a42 RSI: 0000000080000000 RDI: 000000000001fbbc [ 2569.593809][T21174] RBP: 00000000819449e9 R08: 0000001b2d420000 R09: 00000000000009e9 [ 2569.601779][T21174] R10: 00000000819449ed R11: 000000000007a3c6 R12: 0000000000000008 [ 2569.610283][T21174] R13: 0000000000000001 R14: 00007f50c10bb000 R15: ffffffff81944a42 [ 2569.618244][T21174] ? avc_has_perm+0x32/0x150 [ 2569.622866][T21174] ? avc_has_perm+0x32/0x150 [ 2569.627454][T21174] [ 2569.630590][T21174] memory: usage 306956kB, limit 307200kB, failcnt 93551 [ 2569.637530][T21174] memory+swap: usage 308808kB, limit 9007199254740988kB, failcnt 0 [ 2569.645458][T21174] kmem: usage 306932kB, limit 9007199254740988kB, failcnt 0 [ 2569.652767][T21174] Memory cgroup stats for /syz3: [ 2569.654169][T21174] cache 16384 [ 2569.662471][T21174] rss 8192 [ 2569.665482][T21174] shmem 0 [ 2569.668440][T21174] mapped_file 0 [ 2569.671888][T21174] dirty 0 [ 2569.674826][T21174] writeback 0 [ 2569.678200][T21174] workingset_refault_anon 73560 [ 2569.683099][T21174] workingset_refault_file 320 [ 2569.687801][T21174] swap 1896448 [ 2569.691165][T21174] swapcached 8192 [ 2569.694825][T21174] pgpgin 376218 [ 2569.698306][T21174] pgpgout 376212 [ 2569.701839][T21174] pgfault 558108 [ 2569.705372][T21174] pgmajfault 39004 [ 2569.709110][T21174] inactive_anon 8192 [ 2569.712992][T21174] active_anon 0 [ 2569.716564][T21174] inactive_file 12288 [ 2569.720536][T21174] active_file 4096 [ 2569.724239][T21174] unevictable 0 [ 2569.727757][T21174] hierarchical_memory_limit 314572800 [ 2569.733214][T21174] hierarchical_memsw_limit 9223372036854771712 [ 2569.739461][T21174] total_cache 16384 03:55:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35f9, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2569.743276][T21174] total_rss 8192 [ 2569.746846][T21174] total_shmem 0 [ 2569.750365][T21174] total_mapped_file 0 [ 2569.754340][T21174] total_dirty 0 [ 2569.757844][T21174] total_writeback 0 [ 2569.761645][T21174] total_workingset_refault_anon 73560 [ 2569.767118][T21174] total_workingset_refault_file 320 [ 2569.772338][T21174] total_swap 1896448 [ 2569.776347][T21174] total_swapcached 8192 [ 2569.780503][T21174] total_pgpgin 376218 [ 2569.784474][T21174] total_pgpgout 376212 [ 2569.788667][T21174] total_pgfault 558108 [ 2569.792778][T21174] total_pgmajfault 39004 [ 2569.797078][T21174] total_inactive_anon 8192 [ 2569.801484][T21174] total_active_anon 0 [ 2569.805445][T21174] total_inactive_file 12288 [ 2569.809950][T21174] total_active_file 4096 [ 2569.814167][T21174] total_unevictable 0 [ 2569.818153][T21174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21174,uid=0 [ 2569.833547][T21174] Memory cgroup out of memory: Killed process 21174 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x12000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x5, @mcast1}]}, 0x30}}, 0x0) 03:55:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x2500, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0xe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x2c1a, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x6, @mcast1}]}, 0x30}}, 0x0) 03:55:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x20000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2570.052870][T21201] validate_nla: 11 callbacks suppressed [ 2570.052881][T21201] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2570.067873][T21199] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2570.080247][T21206] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 03:55:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x25000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x3141, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x7, @mcast1}]}, 0x30}}, 0x0) [ 2570.138456][T21209] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2570.148264][T21213] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2570.157859][T21212] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 2570.202711][T21216] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2570.219804][T21220] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2570.230805][T21219] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 2570.641453][T21196] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2570.652801][T21196] CPU: 0 PID: 21196 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2570.663350][T21196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2570.673414][T21196] Call Trace: [ 2570.676700][T21196] [ 2570.679629][T21196] dump_stack_lvl+0xda/0x130 [ 2570.684252][T21196] dump_stack+0x15/0x20 [ 2570.688423][T21196] dump_header+0x82/0x2d0 [ 2570.692776][T21196] oom_kill_process+0x33a/0x4c0 [ 2570.697646][T21196] out_of_memory+0x9ca/0xbf0 [ 2570.702249][T21196] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2570.708387][T21196] mem_cgroup_out_of_memory+0x139/0x190 [ 2570.713969][T21196] try_charge_memcg+0x75c/0xd30 [ 2570.718826][T21196] ? __swap_duplicate+0x29b/0x2b0 [ 2570.723850][T21196] ? radix_tree_lookup+0xf9/0x150 [ 2570.728890][T21196] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2570.734962][T21196] __read_swap_cache_async+0x2f6/0x550 [ 2570.740419][T21196] swap_cluster_readahead+0x27c/0x4c0 [ 2570.745799][T21196] swapin_readahead+0xe9/0x7f0 [ 2570.750562][T21196] ? __filemap_get_folio+0x41a/0x5a0 [ 2570.755847][T21196] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2570.761532][T21196] ? swap_cache_get_folio+0x6e/0x200 [ 2570.766825][T21196] do_swap_page+0x4a0/0x1670 [ 2570.771461][T21196] ? __rcu_read_lock+0x35/0x50 [ 2570.776228][T21196] ? pte_offset_map_nolock+0x124/0x1d0 [ 2570.781687][T21196] handle_mm_fault+0xa36/0x2dd0 [ 2570.786538][T21196] ? mt_find+0x1d9/0x310 [ 2570.790788][T21196] exc_page_fault+0x2f7/0x6c0 [ 2570.795467][T21196] asm_exc_page_fault+0x26/0x30 [ 2570.800373][T21196] RIP: 0010:__get_user_8+0x11/0x20 [ 2570.805527][T21196] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2570.825143][T21196] RSP: 0018:ffffc90000e57df8 EFLAGS: 00050202 [ 2570.831201][T21196] RAX: 000055555710bda8 RBX: ffffc90000e57e00 RCX: ffffffff81443e13 [ 2570.839166][T21196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810970cad0 [ 2570.847135][T21196] RBP: ffffc90000e57ec0 R08: 000188810970cad7 R09: 0000000000000000 [ 2570.855101][T21196] R10: 0001ffffffffffff R11: 00000000000030d0 R12: ffff88810970c100 [ 2570.863084][T21196] R13: ffff88810970cad0 R14: ffffc90000e57f58 R15: ffffc90000e57fd8 [ 2570.871071][T21196] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2570.876979][T21196] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2570.882708][T21196] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 2570.888803][T21196] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2570.894717][T21196] ? common_nsleep+0x68/0x80 [ 2570.899314][T21196] exit_to_user_mode_loop+0xcc/0xe0 [ 2570.904537][T21196] exit_to_user_mode_prepare+0x6c/0xb0 [ 2570.910021][T21196] syscall_exit_to_user_mode+0x26/0x140 [ 2570.915652][T21196] do_syscall_64+0x50/0x110 [ 2570.920201][T21196] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2570.926324][T21196] RIP: 0033:0x7ffbf073ffb5 [ 2570.930773][T21196] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2570.950463][T21196] RSP: 002b:00007ffc3358c9e0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2570.958968][T21196] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 00007ffbf073ffb5 [ 2570.966948][T21196] RDX: 00007ffc3358ca20 RSI: 0000000000000000 RDI: 0000000000000000 [ 2570.975082][T21196] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2570.983062][T21196] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002739ab [ 2570.991022][T21196] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000027366a [ 2570.998982][T21196] [ 2571.002072][T21196] memory: usage 307200kB, limit 307200kB, failcnt 46950 [ 2571.009536][T21196] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 2571.017454][T21196] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2571.024850][T21196] Memory cgroup stats for /syz4: [ 2571.028912][T21196] cache 12288 [ 2571.037147][T21196] rss 0 [ 2571.039901][T21196] shmem 0 [ 2571.042827][T21196] mapped_file 0 [ 2571.046273][T21196] dirty 0 [ 2571.049222][T21196] writeback 0 [ 2571.052493][T21196] workingset_refault_anon 63783 [ 2571.057351][T21196] workingset_refault_file 309 [ 2571.062071][T21196] swap 4640768 [ 2571.065450][T21196] swapcached 0 [ 2571.068828][T21196] pgpgin 889911 [ 2571.072279][T21196] pgpgout 889908 [ 2571.075824][T21196] pgfault 965302 [ 2571.079389][T21196] pgmajfault 33483 [ 2571.083098][T21196] inactive_anon 0 [ 2571.086841][T21196] active_anon 0 [ 2571.090305][T21196] inactive_file 0 [ 2571.093932][T21196] active_file 12288 [ 2571.097752][T21196] unevictable 0 [ 2571.101199][T21196] hierarchical_memory_limit 314572800 [ 2571.106679][T21196] hierarchical_memsw_limit 9223372036854771712 [ 2571.112812][T21196] total_cache 12288 [ 2571.116641][T21196] total_rss 0 [ 2571.119970][T21196] total_shmem 0 [ 2571.123424][T21196] total_mapped_file 0 [ 2571.127490][T21196] total_dirty 0 [ 2571.130936][T21196] total_writeback 0 [ 2571.134729][T21196] total_workingset_refault_anon 63783 [ 2571.140128][T21196] total_workingset_refault_file 309 [ 2571.145330][T21196] total_swap 4640768 [ 2571.149287][T21196] total_swapcached 0 [ 2571.153190][T21196] total_pgpgin 889911 [ 2571.157178][T21196] total_pgpgout 889908 [ 2571.161288][T21196] total_pgfault 965302 [ 2571.165345][T21196] total_pgmajfault 33483 [ 2571.169688][T21196] total_inactive_anon 0 [ 2571.173888][T21196] total_active_anon 0 [ 2571.177889][T21196] total_inactive_file 0 [ 2571.182032][T21196] total_active_file 12288 [ 2571.186378][T21196] total_unevictable 0 [ 2571.190352][T21196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21196,uid=0 [ 2571.205730][T21196] Memory cgroup out of memory: Killed process 21196 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x4131, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x313b0000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x8, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x10]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35fa, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x9, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x48000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x4788, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2571.409106][T21223] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2571.441687][T21230] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0xb, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x4c000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2571.472286][T21233] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2571.490286][T21238] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x4800, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x4888, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x60000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2571.521695][T21241] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2571.543198][T21243] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2571.552913][T21245] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0xf, @mcast1}]}, 0x30}}, 0x0) [ 2572.248213][T21226] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2572.259678][T21226] CPU: 0 PID: 21226 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2572.270188][T21226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2572.280303][T21226] Call Trace: [ 2572.283576][T21226] [ 2572.286500][T21226] dump_stack_lvl+0xda/0x130 [ 2572.291119][T21226] dump_stack+0x15/0x20 [ 2572.295347][T21226] dump_header+0x82/0x2d0 [ 2572.299813][T21226] oom_kill_process+0x33a/0x4c0 [ 2572.304671][T21226] out_of_memory+0x9ca/0xbf0 [ 2572.309354][T21226] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2572.315530][T21226] mem_cgroup_out_of_memory+0x139/0x190 [ 2572.321139][T21226] try_charge_memcg+0x75c/0xd30 [ 2572.326215][T21226] ? __swap_duplicate+0x29b/0x2b0 [ 2572.331244][T21226] ? radix_tree_lookup+0xf9/0x150 [ 2572.336453][T21226] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2572.342613][T21226] __read_swap_cache_async+0x2f6/0x550 [ 2572.348148][T21226] swap_cluster_readahead+0x27c/0x4c0 [ 2572.353542][T21226] swapin_readahead+0xe9/0x7f0 [ 2572.358381][T21226] ? __filemap_get_folio+0x41a/0x5a0 [ 2572.363675][T21226] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2572.369306][T21226] ? swap_cache_get_folio+0x6e/0x200 [ 2572.374598][T21226] do_swap_page+0x4a0/0x1670 [ 2572.379189][T21226] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2572.384548][T21226] ? __rcu_read_lock+0x35/0x50 [ 2572.389305][T21226] ? pte_offset_map_nolock+0x124/0x1d0 [ 2572.394837][T21226] handle_mm_fault+0xa36/0x2dd0 [ 2572.399685][T21226] exc_page_fault+0x3ff/0x6c0 [ 2572.404368][T21226] asm_exc_page_fault+0x26/0x30 [ 2572.409487][T21226] RIP: 0033:0x7f50c0f61b9d [ 2572.413995][T21226] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d ff 6d 16 00 00 0f 8e 12 ff ff ff e8 4c 07 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 [ 2572.433663][T21226] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2572.439719][T21226] RAX: 0000000000273fca RBX: 00007f50c10c8980 RCX: 0000000000273ee0 [ 2572.447682][T21226] RDX: 00000000000000ea RSI: 00007ffd61c03bf0 RDI: 7fffffffffffffff [ 2572.455641][T21226] RBP: 00007f50c10c8980 R08: 0000000000000010 R09: 00007ffd61de10b0 [ 2572.463610][T21226] R10: 00007ffd61de1080 R11: 000000000007a5f6 R12: 0000000000273fda [ 2572.471571][T21226] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 0000000000273c99 [ 2572.479648][T21226] [ 2572.482847][T21226] memory: usage 307200kB, limit 307200kB, failcnt 93669 [ 2572.489826][T21226] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2572.497741][T21226] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2572.505015][T21226] Memory cgroup stats for /syz3: [ 2572.547765][T21226] cache 16384 [ 2572.555992][T21226] rss 8192 [ 2572.559050][T21226] shmem 0 [ 2572.561994][T21226] mapped_file 0 [ 2572.565440][T21226] dirty 0 [ 2572.568404][T21226] writeback 8192 [ 2572.571939][T21226] workingset_refault_anon 73625 [ 2572.576802][T21226] workingset_refault_file 320 [ 2572.581464][T21226] swap 1896448 [ 2572.584823][T21226] swapcached 8192 [ 2572.588471][T21226] pgpgin 376329 [ 2572.591915][T21226] pgpgout 376323 [ 2572.595466][T21226] pgfault 558430 [ 2572.599036][T21226] pgmajfault 39039 [ 2572.602846][T21226] inactive_anon 0 [ 2572.606529][T21226] active_anon 0 [ 2572.609973][T21226] inactive_file 12288 [ 2572.613934][T21226] active_file 4096 [ 2572.617763][T21226] unevictable 0 [ 2572.621226][T21226] hierarchical_memory_limit 314572800 [ 2572.626641][T21226] hierarchical_memsw_limit 9223372036854771712 [ 2572.632840][T21226] total_cache 16384 [ 2572.636650][T21226] total_rss 8192 [ 2572.640226][T21226] total_shmem 0 [ 2572.643721][T21226] total_mapped_file 0 [ 2572.647724][T21226] total_dirty 0 [ 2572.651177][T21226] total_writeback 8192 [ 2572.655218][T21226] total_workingset_refault_anon 73625 [ 2572.660736][T21226] total_workingset_refault_file 320 [ 2572.665948][T21226] total_swap 1896448 [ 2572.669870][T21226] total_swapcached 8192 [ 2572.674009][T21226] total_pgpgin 376329 [ 2572.678046][T21226] total_pgpgout 376323 [ 2572.682098][T21226] total_pgfault 558430 [ 2572.686145][T21226] total_pgmajfault 39039 [ 2572.690406][T21226] total_inactive_anon 0 [ 2572.694554][T21226] total_active_anon 0 [ 2572.698549][T21226] total_inactive_file 12288 [ 2572.703053][T21226] total_active_file 4096 [ 2572.707316][T21226] total_unevictable 0 [ 2572.711298][T21226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21226,uid=0 [ 2572.726551][T21226] Memory cgroup out of memory: Killed process 21226 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2572.743856][T21224] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2572.757382][T21224] CPU: 1 PID: 21224 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2572.767873][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2572.777964][T21224] Call Trace: [ 2572.781223][T21224] [ 2572.784140][T21224] dump_stack_lvl+0xda/0x130 [ 2572.788721][T21224] dump_stack+0x15/0x20 [ 2572.792863][T21224] dump_header+0x82/0x2d0 [ 2572.797177][T21224] oom_kill_process+0x33a/0x4c0 [ 2572.802011][T21224] out_of_memory+0x9ca/0xbf0 [ 2572.806712][T21224] mem_cgroup_out_of_memory+0x139/0x190 [ 2572.812282][T21224] try_charge_memcg+0x75c/0xd30 [ 2572.817258][T21224] obj_cgroup_charge_pages+0xab/0x130 [ 2572.822616][T21224] __memcg_kmem_charge_page+0x9c/0x170 [ 2572.828070][T21224] __alloc_pages+0x1bb/0x340 [ 2572.832656][T21224] alloc_pages_mpol+0xb1/0x1d0 [ 2572.837405][T21224] alloc_pages+0xe0/0x100 [ 2572.841716][T21224] __vmalloc_node_range+0x6d2/0xea0 [ 2572.846986][T21224] kvmalloc_node+0x121/0x160 [ 2572.851579][T21224] ? xt_alloc_table_info+0x3d/0x80 [ 2572.856737][T21224] xt_alloc_table_info+0x3d/0x80 [ 2572.861686][T21224] do_arpt_set_ctl+0x634/0x13b0 [ 2572.866562][T21224] ? __futex_wait+0x227/0x280 [ 2572.871238][T21224] ? __futex_wake_mark+0x70/0x70 [ 2572.876161][T21224] ? tcp_release_cb+0xfe/0x370 [ 2572.880957][T21224] ? _raw_spin_unlock_bh+0x36/0x40 [ 2572.886064][T21224] nf_setsockopt+0x18d/0x1b0 [ 2572.890642][T21224] ip_setsockopt+0xe6/0x100 [ 2572.895160][T21224] tcp_setsockopt+0x90/0xa0 [ 2572.899658][T21224] sock_common_setsockopt+0x61/0x70 [ 2572.904852][T21224] ? sock_common_recvmsg+0xe0/0xe0 [ 2572.910127][T21224] __sys_setsockopt+0x1d4/0x240 [ 2572.914960][T21224] __x64_sys_setsockopt+0x66/0x80 [ 2572.920085][T21224] do_syscall_64+0x44/0x110 [ 2572.924574][T21224] ? syscall_exit_to_user_mode+0x38/0x140 [ 2572.930369][T21224] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2572.936351][T21224] RIP: 0033:0x7f07d1466ba9 [ 2572.940890][T21224] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2572.960571][T21224] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2572.969027][T21224] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2572.976981][T21224] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2572.984935][T21224] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2572.992976][T21224] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2573.000972][T21224] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2573.009306][T21224] [ 2573.012502][T21224] memory: usage 307200kB, limit 307200kB, failcnt 196312 [ 2573.019609][T21224] memory+swap: usage 307736kB, limit 9007199254740988kB, failcnt 0 [ 2573.027564][T21224] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 2573.035003][T21224] Memory cgroup stats for /syz1: [ 2573.035210][T21224] cache 4096 [ 2573.043449][T21224] rss 0 [ 2573.046241][T21224] shmem 0 [ 2573.049242][T21224] mapped_file 0 [ 2573.052829][T21224] dirty 0 [ 2573.055815][T21224] writeback 0 [ 2573.059172][T21224] workingset_refault_anon 89685 [ 2573.064046][T21224] workingset_refault_file 314 [ 2573.068861][T21224] swap 548864 [ 2573.072251][T21224] swapcached 4096 [ 2573.075862][T21224] pgpgin 1998200 [ 2573.079436][T21224] pgpgout 1998198 [ 2573.083171][T21224] pgfault 2092331 [ 2573.086819][T21224] pgmajfault 39534 [ 2573.090634][T21224] inactive_anon 4096 [ 2573.094525][T21224] active_anon 0 [ 2573.098058][T21224] inactive_file 0 [ 2573.101725][T21224] active_file 4096 [ 2573.105468][T21224] unevictable 0 [ 2573.109386][T21224] hierarchical_memory_limit 314572800 [ 2573.114748][T21224] hierarchical_memsw_limit 9223372036854771712 [ 2573.120962][T21224] total_cache 4096 [ 2573.124745][T21224] total_rss 0 [ 2573.128052][T21224] total_shmem 0 [ 2573.131576][T21224] total_mapped_file 0 [ 2573.135606][T21224] total_dirty 0 [ 2573.139149][T21224] total_writeback 0 [ 2573.142945][T21224] total_workingset_refault_anon 89685 [ 2573.148326][T21224] total_workingset_refault_file 314 [ 2573.153519][T21224] total_swap 548864 [ 2573.157412][T21224] total_swapcached 4096 [ 2573.161675][T21224] total_pgpgin 1998200 [ 2573.165751][T21224] total_pgpgout 1998198 [ 2573.169925][T21224] total_pgfault 2092331 [ 2573.174169][T21224] total_pgmajfault 39534 [ 2573.178494][T21224] total_inactive_anon 4096 [ 2573.182906][T21224] total_active_anon 0 [ 2573.186983][T21224] total_inactive_file 0 [ 2573.191179][T21224] total_active_file 4096 [ 2573.195412][T21224] total_unevictable 0 [ 2573.199556][T21224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21222,uid=0 [ 2573.215009][T21224] Memory cgroup out of memory: Killed process 21222 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x4c00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35fb, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x63430000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x11]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x12, @mcast1}]}, 0x30}}, 0x0) 03:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x15, @mcast1}]}, 0x30}}, 0x0) 03:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x5865, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2573.493755][T21260] __nla_validate_parse: 1 callbacks suppressed [ 2573.493770][T21260] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x679a0000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x16, @mcast1}]}, 0x30}}, 0x0) 03:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x6000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1e, @mcast1}]}, 0x30}}, 0x0) [ 2573.594914][T21271] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2574.184164][T21252] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2574.195610][T21252] CPU: 0 PID: 21252 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2574.206026][T21252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2574.216251][T21252] Call Trace: [ 2574.219535][T21252] [ 2574.222496][T21252] dump_stack_lvl+0xda/0x130 [ 2574.227117][T21252] dump_stack+0x15/0x20 [ 2574.231354][T21252] dump_header+0x82/0x2d0 [ 2574.235690][T21252] oom_kill_process+0x33a/0x4c0 [ 2574.240637][T21252] out_of_memory+0x9ca/0xbf0 [ 2574.245303][T21252] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2574.251434][T21252] mem_cgroup_out_of_memory+0x139/0x190 [ 2574.257092][T21252] try_charge_memcg+0x75c/0xd30 [ 2574.262010][T21252] ? __swap_duplicate+0x29b/0x2b0 [ 2574.267129][T21252] ? radix_tree_lookup+0xf9/0x150 [ 2574.272164][T21252] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2574.278378][T21252] __read_swap_cache_async+0x2f6/0x550 [ 2574.283886][T21252] swap_cluster_readahead+0x27c/0x4c0 [ 2574.289260][T21252] swapin_readahead+0xe9/0x7f0 [ 2574.294122][T21252] ? __filemap_get_folio+0x41a/0x5a0 [ 2574.299411][T21252] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2574.305066][T21252] ? swap_cache_get_folio+0x6e/0x200 [ 2574.310419][T21252] do_swap_page+0x4a0/0x1670 [ 2574.315009][T21252] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2574.320333][T21252] ? __rcu_read_lock+0x35/0x50 [ 2574.325101][T21252] ? pte_offset_map_nolock+0x124/0x1d0 [ 2574.330600][T21252] handle_mm_fault+0xa36/0x2dd0 [ 2574.335611][T21252] exc_page_fault+0x3ff/0x6c0 [ 2574.340281][T21252] asm_exc_page_fault+0x26/0x30 [ 2574.345133][T21252] RIP: 0033:0x7f50c0f61bc4 [ 2574.349543][T21252] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2574.369151][T21252] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010283 [ 2574.375325][T21252] RAX: 0000000000000000 RBX: 00007f50c10c8090 RCX: 0000000000000000 [ 2574.383292][T21252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2574.391294][T21252] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2574.399275][T21252] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027477e [ 2574.407278][T21252] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000027443d [ 2574.415263][T21252] [ 2574.418404][T21252] memory: usage 307200kB, limit 307200kB, failcnt 93894 [ 2574.425341][T21252] memory+swap: usage 309036kB, limit 9007199254740988kB, failcnt 0 [ 2574.433264][T21252] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 2574.440615][T21252] Memory cgroup stats for /syz3: [ 2574.460398][T21252] cache 16384 [ 2574.468709][T21252] rss 8192 [ 2574.471736][T21252] shmem 0 [ 2574.474662][T21252] mapped_file 0 [ 2574.478145][T21252] dirty 0 [ 2574.481098][T21252] writeback 12288 [ 2574.484791][T21252] workingset_refault_anon 73658 [ 2574.489652][T21252] workingset_refault_file 320 [ 2574.494385][T21252] swap 1888256 [ 2574.497770][T21252] swapcached 12288 [ 2574.501482][T21252] pgpgin 376386 [ 2574.504927][T21252] pgpgout 376378 [ 2574.509080][T21252] pgfault 558658 [ 2574.512721][T21252] pgmajfault 39056 [ 2574.516527][T21252] inactive_anon 0 [ 2574.520151][T21252] active_anon 4096 [ 2574.523852][T21252] inactive_file 0 [ 2574.527545][T21252] active_file 16384 [ 2574.531368][T21252] unevictable 0 [ 2574.534809][T21252] hierarchical_memory_limit 314572800 [ 2574.540196][T21252] hierarchical_memsw_limit 9223372036854771712 [ 2574.546514][T21252] total_cache 16384 [ 2574.550357][T21252] total_rss 8192 [ 2574.553889][T21252] total_shmem 0 [ 2574.557497][T21252] total_mapped_file 0 [ 2574.561641][T21252] total_dirty 0 [ 2574.565129][T21252] total_writeback 12288 [ 2574.569304][T21252] total_workingset_refault_anon 73658 [ 2574.574748][T21252] total_workingset_refault_file 320 [ 2574.579994][T21252] total_swap 1888256 [ 2574.584138][T21252] total_swapcached 12288 [ 2574.588383][T21252] total_pgpgin 376386 [ 2574.592349][T21252] total_pgpgout 376378 [ 2574.596416][T21252] total_pgfault 558658 [ 2574.600463][T21252] total_pgmajfault 39056 [ 2574.604677][T21252] total_inactive_anon 0 [ 2574.608830][T21252] total_active_anon 4096 [ 2574.613140][T21252] total_inactive_file 0 [ 2574.617397][T21252] total_active_file 16384 [ 2574.621770][T21252] total_unevictable 0 [ 2574.625727][T21252] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21252,uid=0 [ 2574.640998][T21252] Memory cgroup out of memory: Killed process 21252 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2574.658369][T21263] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2574.669720][T21263] CPU: 1 PID: 21263 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2574.680251][T21263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2574.690302][T21263] Call Trace: [ 2574.693631][T21263] [ 2574.696561][T21263] dump_stack_lvl+0xda/0x130 [ 2574.701160][T21263] dump_stack+0x15/0x20 [ 2574.705379][T21263] dump_header+0x82/0x2d0 [ 2574.709717][T21263] oom_kill_process+0x33a/0x4c0 [ 2574.714574][T21263] out_of_memory+0x9ca/0xbf0 [ 2574.719227][T21263] mem_cgroup_out_of_memory+0x139/0x190 [ 2574.724774][T21263] try_charge_memcg+0x75c/0xd30 [ 2574.729619][T21263] ? __swap_duplicate+0x29b/0x2b0 [ 2574.734805][T21263] ? radix_tree_lookup+0xf9/0x150 [ 2574.739856][T21263] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2574.745969][T21263] __read_swap_cache_async+0x2f6/0x550 [ 2574.751433][T21263] swap_cluster_readahead+0x27c/0x4c0 [ 2574.756886][T21263] swapin_readahead+0xe9/0x7f0 [ 2574.761696][T21263] ? __filemap_get_folio+0x41a/0x5a0 [ 2574.766968][T21263] ? _raw_spin_unlock+0x26/0x40 [ 2574.771815][T21263] ? swap_cache_get_folio+0x6e/0x200 [ 2574.777143][T21263] do_swap_page+0x4a0/0x1670 [ 2574.781815][T21263] ? __rcu_read_lock+0x35/0x50 [ 2574.786852][T21263] ? pte_offset_map_nolock+0x124/0x1d0 [ 2574.792295][T21263] handle_mm_fault+0xa36/0x2dd0 [ 2574.797135][T21263] exc_page_fault+0x3ff/0x6c0 [ 2574.801807][T21263] asm_exc_page_fault+0x26/0x30 [ 2574.806703][T21263] RIP: 0033:0x7f07d1420d4b [ 2574.811108][T21263] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2574.830859][T21263] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2574.836910][T21263] RAX: 0000000000000001 RBX: 00007f07d1585f80 RCX: 00000000002746b0 [ 2574.845000][T21263] RDX: 00000000000001ae RSI: 00007fffaf03b8f0 RDI: 00007f07d1585f80 [ 2574.852954][T21263] RBP: 00007f07d1587980 R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2574.860907][T21263] R10: 00007fffaf111080 R11: 000000000007a760 R12: 000000000027482e [ 2574.869072][T21263] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 00000000002744ed [ 2574.877029][T21263] [ 2574.880234][T21263] memory: usage 307200kB, limit 307200kB, failcnt 196694 [ 2574.887274][T21263] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2574.895160][T21263] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2574.902475][T21263] Memory cgroup stats for /syz1: [ 2574.902828][T21263] cache 4096 [ 2574.910952][T21263] rss 0 [ 2574.913704][T21263] shmem 0 [ 2574.916681][T21263] mapped_file 0 [ 2574.920132][T21263] dirty 0 [ 2574.923067][T21263] writeback 0 [ 2574.926359][T21263] workingset_refault_anon 89717 [ 2574.931224][T21263] workingset_refault_file 314 [ 2574.935919][T21263] swap 552960 [ 2574.939313][T21263] swapcached 0 [ 2574.942721][T21263] pgpgin 1998255 [ 2574.946253][T21263] pgpgout 1998254 [ 2574.949888][T21263] pgfault 2092501 [ 2574.953515][T21263] pgmajfault 39549 [ 2574.957263][T21263] inactive_anon 0 [ 2574.960885][T21263] active_anon 0 [ 2574.964368][T21263] inactive_file 0 [ 2574.968047][T21263] active_file 4096 [ 2574.971759][T21263] unevictable 0 [ 2574.975221][T21263] hierarchical_memory_limit 314572800 [ 2574.980599][T21263] hierarchical_memsw_limit 9223372036854771712 [ 2574.986748][T21263] total_cache 4096 [ 2574.990460][T21263] total_rss 0 [ 2574.993764][T21263] total_shmem 0 [ 2574.997272][T21263] total_mapped_file 0 [ 2575.001237][T21263] total_dirty 0 [ 2575.004719][T21263] total_writeback 0 [ 2575.008528][T21263] total_workingset_refault_anon 89717 [ 2575.013946][T21263] total_workingset_refault_file 314 [ 2575.019145][T21263] total_swap 552960 [ 2575.022938][T21263] total_swapcached 0 [ 2575.026835][T21263] total_pgpgin 1998255 [ 2575.030927][T21263] total_pgpgout 1998254 [ 2575.035064][T21263] total_pgfault 2092501 [ 2575.039231][T21263] total_pgmajfault 39549 [ 2575.043468][T21263] total_inactive_anon 0 [ 2575.047632][T21263] total_active_anon 0 [ 2575.051682][T21263] total_inactive_file 0 [ 2575.055823][T21263] total_active_file 4096 [ 2575.060089][T21263] total_unevictable 0 [ 2575.064090][T21263] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21263,uid=0 03:55:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x627d, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2575.079422][T21263] Memory cgroup out of memory: Killed process 21263 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2575.193765][T21279] validate_nla: 7 callbacks suppressed [ 2575.193779][T21279] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x300, @mcast1}]}, 0x30}}, 0x0) 03:55:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x68000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35fc, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x6558, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x12]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x6800, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x30}}, 0x0) 03:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x6c00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2575.310497][T21285] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2575.340177][T21291] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2575.351304][T21289] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x2}}]}, 0x30}}, 0x0) 03:55:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x6c000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2575.365629][T21296] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2575.388295][T21297] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2575.404159][T21299] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2575.458236][T21301] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2576.014496][T21278] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2576.025864][T21278] CPU: 0 PID: 21278 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2576.036324][T21278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2576.046413][T21278] Call Trace: [ 2576.049763][T21278] [ 2576.052699][T21278] dump_stack_lvl+0xda/0x130 [ 2576.057328][T21278] dump_stack+0x15/0x20 [ 2576.061513][T21278] dump_header+0x82/0x2d0 [ 2576.065869][T21278] oom_kill_process+0x33a/0x4c0 [ 2576.070731][T21278] out_of_memory+0x9ca/0xbf0 [ 2576.075329][T21278] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2576.081439][T21278] mem_cgroup_out_of_memory+0x139/0x190 [ 2576.086995][T21278] try_charge_memcg+0x75c/0xd30 [ 2576.091910][T21278] ? __swap_duplicate+0x29b/0x2b0 [ 2576.096969][T21278] ? radix_tree_lookup+0xf9/0x150 [ 2576.102048][T21278] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2576.108587][T21278] __read_swap_cache_async+0x2f6/0x550 [ 2576.114104][T21278] swap_cluster_readahead+0x27c/0x4c0 [ 2576.119491][T21278] swapin_readahead+0xe9/0x7f0 [ 2576.124314][T21278] ? __filemap_get_folio+0x41a/0x5a0 [ 2576.129601][T21278] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2576.135238][T21278] ? swap_cache_get_folio+0x6e/0x200 [ 2576.140524][T21278] do_swap_page+0x4a0/0x1670 [ 2576.145123][T21278] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2576.150418][T21278] ? __rcu_read_lock+0x35/0x50 [ 2576.155212][T21278] ? pte_offset_map_nolock+0x124/0x1d0 [ 2576.160666][T21278] handle_mm_fault+0xa36/0x2dd0 [ 2576.165529][T21278] exc_page_fault+0x3ff/0x6c0 [ 2576.170215][T21278] asm_exc_page_fault+0x26/0x30 [ 2576.175192][T21278] RIP: 0033:0x7f50c0f61bc4 [ 2576.179754][T21278] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2576.199539][T21278] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2576.205757][T21278] RAX: 0000000000000000 RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2576.213726][T21278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2576.221760][T21278] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2576.229720][T21278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000274e9d [ 2576.237722][T21278] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 0000000000274b5c [ 2576.245788][T21278] [ 2576.248972][T21278] memory: usage 307200kB, limit 307200kB, failcnt 94252 [ 2576.255896][T21278] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2576.263802][T21278] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2576.271144][T21278] Memory cgroup stats for /syz3: [ 2576.291238][T21278] cache 16384 [ 2576.299600][T21278] rss 8192 [ 2576.302620][T21278] shmem 0 [ 2576.305892][T21278] mapped_file 0 [ 2576.309413][T21278] dirty 0 [ 2576.312408][T21278] writeback 16384 [ 2576.316076][T21278] workingset_refault_anon 73690 [ 2576.321008][T21278] workingset_refault_file 320 [ 2576.325797][T21278] swap 1888256 [ 2576.329171][T21278] swapcached 16384 [ 2576.332894][T21278] pgpgin 376441 [ 2576.336352][T21278] pgpgout 376433 [ 2576.339987][T21278] pgfault 558868 [ 2576.343560][T21278] pgmajfault 39067 [ 2576.347287][T21278] inactive_anon 0 [ 2576.350901][T21278] active_anon 0 [ 2576.354332][T21278] inactive_file 12288 [ 2576.358329][T21278] active_file 4096 [ 2576.362036][T21278] unevictable 0 [ 2576.365507][T21278] hierarchical_memory_limit 314572800 [ 2576.370940][T21278] hierarchical_memsw_limit 9223372036854771712 [ 2576.377115][T21278] total_cache 16384 [ 2576.380935][T21278] total_rss 8192 [ 2576.384455][T21278] total_shmem 0 [ 2576.387933][T21278] total_mapped_file 0 [ 2576.391898][T21278] total_dirty 0 [ 2576.395351][T21278] total_writeback 16384 [ 2576.399511][T21278] total_workingset_refault_anon 73690 [ 2576.404870][T21278] total_workingset_refault_file 320 [ 2576.410152][T21278] total_swap 1888256 [ 2576.414028][T21278] total_swapcached 16384 [ 2576.418334][T21278] total_pgpgin 376441 [ 2576.422344][T21278] total_pgpgout 376433 [ 2576.426426][T21278] total_pgfault 558868 [ 2576.430478][T21278] total_pgmajfault 39067 [ 2576.434736][T21278] total_inactive_anon 0 [ 2576.438980][T21278] total_active_anon 0 [ 2576.442945][T21278] total_inactive_file 12288 [ 2576.447464][T21278] total_active_file 4096 [ 2576.451689][T21278] total_unevictable 0 [ 2576.455703][T21278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21278,uid=0 [ 2576.471072][T21278] Memory cgroup out of memory: Killed process 21278 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2576.488394][T21292] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2576.499830][T21292] CPU: 1 PID: 21292 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2576.510298][T21292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2576.520343][T21292] Call Trace: [ 2576.523610][T21292] [ 2576.526539][T21292] dump_stack_lvl+0xda/0x130 [ 2576.531143][T21292] dump_stack+0x15/0x20 [ 2576.535347][T21292] dump_header+0x82/0x2d0 [ 2576.539677][T21292] oom_kill_process+0x33a/0x4c0 [ 2576.544537][T21292] out_of_memory+0x9ca/0xbf0 [ 2576.549187][T21292] mem_cgroup_out_of_memory+0x139/0x190 [ 2576.554874][T21292] try_charge_memcg+0x75c/0xd30 [ 2576.559730][T21292] ? __swap_duplicate+0x29b/0x2b0 [ 2576.564800][T21292] ? radix_tree_lookup+0xf9/0x150 [ 2576.569901][T21292] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2576.575973][T21292] __read_swap_cache_async+0x2f6/0x550 [ 2576.581415][T21292] swap_cluster_readahead+0x27c/0x4c0 [ 2576.586878][T21292] swapin_readahead+0xe9/0x7f0 [ 2576.591635][T21292] ? __filemap_get_folio+0x41a/0x5a0 [ 2576.596908][T21292] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2576.602569][T21292] ? swap_cache_get_folio+0x6e/0x200 [ 2576.608187][T21292] do_swap_page+0x4a0/0x1670 [ 2576.612880][T21292] ? __rcu_read_lock+0x35/0x50 [ 2576.617626][T21292] ? pte_offset_map_nolock+0x124/0x1d0 [ 2576.623100][T21292] handle_mm_fault+0xa36/0x2dd0 [ 2576.627960][T21292] ? mt_find+0x1d9/0x310 [ 2576.632198][T21292] exc_page_fault+0x2f7/0x6c0 [ 2576.636860][T21292] asm_exc_page_fault+0x26/0x30 [ 2576.641858][T21292] RIP: 0010:__get_user_8+0x11/0x20 [ 2576.647038][T21292] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2576.666678][T21292] RSP: 0018:ffffc90000aa7e38 EFLAGS: 00050202 [ 2576.672734][T21292] RAX: 000055555595bda8 RBX: ffffc90000aa7e40 RCX: ffffffff81443e13 [ 2576.680687][T21292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88818c2d5b10 [ 2576.688655][T21292] RBP: ffffc90000aa7ef8 R08: 000188818c2d5b17 R09: 0000000000000000 [ 2576.696685][T21292] R10: 0001ffffffffffff R11: 0001c90000aa7ec0 R12: ffff88818c2d5140 [ 2576.704707][T21292] R13: ffff88818c2d5b10 R14: ffffc90000aa7f58 R15: ffffc90000aa7fd8 [ 2576.712764][T21292] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2576.718818][T21292] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2576.724547][T21292] ? __rcu_read_unlock+0x4d/0x70 [ 2576.729601][T21292] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2576.735491][T21292] exit_to_user_mode_loop+0xcc/0xe0 [ 2576.740667][T21292] exit_to_user_mode_prepare+0x6c/0xb0 [ 2576.746231][T21292] irqentry_exit_to_user_mode+0x9/0x20 [ 2576.751691][T21292] irqentry_exit+0x12/0x40 [ 2576.756126][T21292] asm_exc_page_fault+0x26/0x30 [ 2576.761039][T21292] RIP: 0033:0x7f07d1411226 [ 2576.765517][T21292] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 2576.785265][T21292] RSP: 002b:00007fffaf03b868 EFLAGS: 00010287 [ 2576.791379][T21292] RAX: 0000001b2ce22000 RBX: 00007f07d1586018 RCX: 0000001b2ce20000 [ 2576.799336][T21292] RDX: 0000001b2ce22004 RSI: 0000000080000000 RDI: 000000008162baed [ 2576.807294][T21292] RBP: 000000008162baed R08: 0000001b2d220000 R09: 0000000000001aed [ 2576.815258][T21292] R10: 000000008162baf1 R11: 000000000007a89e R12: 000000000000cccf [ 2576.823270][T21292] R13: 0000000000000001 R14: 00007f07d157a000 R15: ffffffff8162b0ac [ 2576.831226][T21292] ? buffer_check_dirty_writeback+0x13c/0x150 [ 2576.837343][T21292] [ 2576.840473][T21292] memory: usage 307200kB, limit 307200kB, failcnt 197039 [ 2576.847575][T21292] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2576.855506][T21292] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2576.862851][T21292] Memory cgroup stats for /syz1: [ 2576.863721][T21292] cache 4096 [ 2576.871893][T21292] rss 0 [ 2576.874636][T21292] shmem 0 [ 2576.877582][T21292] mapped_file 0 [ 2576.881101][T21292] dirty 0 [ 2576.884026][T21292] writeback 0 [ 2576.887323][T21292] workingset_refault_anon 89761 [ 2576.892190][T21292] workingset_refault_file 314 [ 2576.896869][T21292] swap 552960 [ 2576.900152][T21292] swapcached 0 [ 2576.903575][T21292] pgpgin 1998322 [ 2576.907188][T21292] pgpgout 1998321 [ 2576.910842][T21292] pgfault 2092645 [ 2576.914467][T21292] pgmajfault 39573 [ 2576.918218][T21292] inactive_anon 0 [ 2576.921847][T21292] active_anon 0 [ 2576.925292][T21292] inactive_file 4096 [ 2576.929196][T21292] active_file 0 [ 2576.932639][T21292] unevictable 0 [ 2576.936083][T21292] hierarchical_memory_limit 314572800 [ 2576.941502][T21292] hierarchical_memsw_limit 9223372036854771712 [ 2576.947727][T21292] total_cache 4096 [ 2576.951497][T21292] total_rss 0 [ 2576.954765][T21292] total_shmem 0 [ 2576.958241][T21292] total_mapped_file 0 [ 2576.962214][T21292] total_dirty 0 [ 2576.965659][T21292] total_writeback 0 [ 2576.969498][T21292] total_workingset_refault_anon 89761 [ 2576.974858][T21292] total_workingset_refault_file 314 [ 2576.980091][T21292] total_swap 552960 [ 2576.983879][T21292] total_swapcached 0 [ 2576.987766][T21292] total_pgpgin 1998322 [ 2576.991819][T21292] total_pgpgout 1998321 [ 2576.995958][T21292] total_pgfault 2092645 [ 2577.000168][T21292] total_pgmajfault 39573 [ 2577.004405][T21292] total_inactive_anon 0 [ 2577.008565][T21292] total_active_anon 0 [ 2577.012535][T21292] total_inactive_file 4096 03:55:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x4}}]}, 0x30}}, 0x0) 03:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x7400, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x74000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35fd, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2577.017041][T21292] total_active_file 0 [ 2577.021013][T21292] total_unevictable 0 [ 2577.025045][T21292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21292,uid=0 [ 2577.040437][T21292] Memory cgroup out of memory: Killed process 21292 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2577.102406][T21305] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2577.111383][T21309] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2577.120963][T21307] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x16]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x30}}, 0x0) 03:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x7a00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x7a000000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x7e450000, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x7d62, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2577.457347][T21317] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2577.467043][T21318] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2577.475201][T21314] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x8100, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x6}}]}, 0x30}}, 0x0) [ 2577.506438][T21322] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2577.892497][T21310] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2577.903860][T21310] CPU: 0 PID: 21310 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2577.914389][T21310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2577.924461][T21310] Call Trace: [ 2577.927779][T21310] [ 2577.930710][T21310] dump_stack_lvl+0xda/0x130 [ 2577.935349][T21310] dump_stack+0x15/0x20 [ 2577.939504][T21310] dump_header+0x82/0x2d0 [ 2577.943837][T21310] oom_kill_process+0x33a/0x4c0 [ 2577.948713][T21310] out_of_memory+0x9ca/0xbf0 [ 2577.953307][T21310] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2577.959456][T21310] mem_cgroup_out_of_memory+0x139/0x190 [ 2577.965006][T21310] try_charge_memcg+0x75c/0xd30 [ 2577.969956][T21310] ? __swap_duplicate+0x29b/0x2b0 [ 2577.974985][T21310] ? radix_tree_lookup+0xf9/0x150 [ 2577.980024][T21310] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2577.986218][T21310] __read_swap_cache_async+0x2f6/0x550 [ 2577.991680][T21310] swap_cluster_readahead+0x27c/0x4c0 [ 2577.997065][T21310] swapin_readahead+0xe9/0x7f0 [ 2578.001824][T21310] ? __filemap_get_folio+0x41a/0x5a0 [ 2578.007107][T21310] ? _raw_spin_unlock+0x26/0x40 [ 2578.012021][T21310] ? swap_cache_get_folio+0x6e/0x200 [ 2578.017307][T21310] do_swap_page+0x4a0/0x1670 [ 2578.021934][T21310] ? __rcu_read_lock+0x35/0x50 [ 2578.026716][T21310] ? pte_offset_map_nolock+0x124/0x1d0 [ 2578.032182][T21310] handle_mm_fault+0xa36/0x2dd0 [ 2578.037072][T21310] exc_page_fault+0x3ff/0x6c0 [ 2578.041823][T21310] asm_exc_page_fault+0x26/0x30 [ 2578.046671][T21310] RIP: 0033:0x7f50c0f61bc4 [ 2578.051097][T21310] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2578.070708][T21310] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2578.076768][T21310] RAX: 0000000000000000 RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2578.084748][T21310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2578.092776][T21310] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2578.100974][T21310] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000275630 [ 2578.109043][T21310] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 00000000002752ef [ 2578.117078][T21310] [ 2578.120192][T21310] memory: usage 307200kB, limit 307200kB, failcnt 94547 [ 2578.127152][T21310] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2578.135048][T21310] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2578.142359][T21310] Memory cgroup stats for /syz3: [ 2578.145468][T21310] cache 16384 [ 2578.153727][T21310] rss 8192 [ 2578.156836][T21310] shmem 0 [ 2578.159832][T21310] mapped_file 0 [ 2578.163288][T21310] dirty 0 [ 2578.166409][T21310] writeback 16384 [ 2578.170035][T21310] workingset_refault_anon 73718 [ 2578.174889][T21310] workingset_refault_file 320 [ 2578.179613][T21310] swap 1888256 [ 2578.182971][T21310] swapcached 16384 [ 2578.186704][T21310] pgpgin 376492 [ 2578.190151][T21310] pgpgout 376484 [ 2578.193731][T21310] pgfault 558968 [ 2578.197337][T21310] pgmajfault 39080 [ 2578.201064][T21310] inactive_anon 0 [ 2578.204686][T21310] active_anon 0 [ 2578.208170][T21310] inactive_file 12288 [ 2578.212142][T21310] active_file 4096 [ 2578.215850][T21310] unevictable 0 [ 2578.219334][T21310] hierarchical_memory_limit 314572800 [ 2578.224697][T21310] hierarchical_memsw_limit 9223372036854771712 [ 2578.230881][T21310] total_cache 16384 [ 2578.234678][T21310] total_rss 8192 [ 2578.238283][T21310] total_shmem 0 [ 2578.241727][T21310] total_mapped_file 0 [ 2578.245762][T21310] total_dirty 0 [ 2578.249249][T21310] total_writeback 16384 [ 2578.253395][T21310] total_workingset_refault_anon 73718 [ 2578.258853][T21310] total_workingset_refault_file 320 [ 2578.264038][T21310] total_swap 1888256 [ 2578.267977][T21310] total_swapcached 16384 [ 2578.272204][T21310] total_pgpgin 376492 [ 2578.276437][T21310] total_pgpgout 376484 [ 2578.280495][T21310] total_pgfault 558968 [ 2578.284550][T21310] total_pgmajfault 39080 [ 2578.288984][T21310] total_inactive_anon 0 [ 2578.293144][T21310] total_active_anon 0 [ 2578.297125][T21310] total_inactive_file 12288 [ 2578.301621][T21310] total_active_file 4096 [ 2578.305857][T21310] total_unevictable 0 [ 2578.309880][T21310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21310,uid=0 [ 2578.325221][T21310] Memory cgroup out of memory: Killed process 21310 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2578.342622][T21319] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2578.353974][T21319] CPU: 1 PID: 21319 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2578.364429][T21319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2578.374503][T21319] Call Trace: [ 2578.377794][T21319] [ 2578.380772][T21319] dump_stack_lvl+0xda/0x130 [ 2578.385375][T21319] dump_stack+0x15/0x20 [ 2578.389589][T21319] dump_header+0x82/0x2d0 [ 2578.394055][T21319] oom_kill_process+0x33a/0x4c0 [ 2578.398986][T21319] out_of_memory+0x9ca/0xbf0 [ 2578.403667][T21319] mem_cgroup_out_of_memory+0x139/0x190 [ 2578.409224][T21319] try_charge_memcg+0x75c/0xd30 [ 2578.414182][T21319] ? __swap_duplicate+0x29b/0x2b0 [ 2578.419279][T21319] ? radix_tree_lookup+0xf9/0x150 [ 2578.424352][T21319] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2578.430446][T21319] __read_swap_cache_async+0x2f6/0x550 [ 2578.435906][T21319] swap_cluster_readahead+0x27c/0x4c0 [ 2578.441376][T21319] swapin_readahead+0xe9/0x7f0 [ 2578.446203][T21319] ? __filemap_get_folio+0x41a/0x5a0 [ 2578.451470][T21319] ? swap_cache_get_folio+0x6e/0x200 [ 2578.456742][T21319] do_swap_page+0x4a0/0x1670 [ 2578.461441][T21319] ? asm_exc_page_fault+0x26/0x30 [ 2578.466463][T21319] ? __rcu_read_lock+0x35/0x50 [ 2578.471289][T21319] ? pte_offset_map_nolock+0x124/0x1d0 [ 2578.476735][T21319] handle_mm_fault+0xa36/0x2dd0 [ 2578.481591][T21319] exc_page_fault+0x3ff/0x6c0 [ 2578.486249][T21319] asm_exc_page_fault+0x26/0x30 [ 2578.491132][T21319] RIP: 0033:0x7f07d1420bc4 [ 2578.495524][T21319] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2578.515276][T21319] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2578.521384][T21319] RAX: 0000000000000000 RBX: 00007f07d1587090 RCX: 0000000000000000 [ 2578.529336][T21319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2578.537294][T21319] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2578.545253][T21319] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002757b1 [ 2578.553206][T21319] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000275470 [ 2578.561233][T21319] [ 2578.564383][T21319] memory: usage 307200kB, limit 307200kB, failcnt 197315 [ 2578.571515][T21319] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2578.579531][T21319] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2578.586846][T21319] Memory cgroup stats for /syz1: [ 2578.587196][T21319] cache 4096 [ 2578.595348][T21319] rss 8192 [ 2578.598382][T21319] shmem 0 [ 2578.601349][T21319] mapped_file 0 [ 2578.604792][T21319] dirty 0 [ 2578.607737][T21319] writeback 0 [ 2578.611050][T21319] workingset_refault_anon 89798 [ 2578.615926][T21319] workingset_refault_file 314 [ 2578.620657][T21319] swap 544768 [ 2578.624006][T21319] swapcached 4096 [ 2578.627677][T21319] pgpgin 1998382 [ 2578.631382][T21319] pgpgout 1998379 [ 2578.635077][T21319] pgfault 2092841 [ 2578.638802][T21319] pgmajfault 39590 [ 2578.642636][T21319] inactive_anon 8192 [ 2578.646556][T21319] active_anon 0 [ 2578.650070][T21319] inactive_file 4096 [ 2578.653956][T21319] active_file 0 [ 2578.657499][T21319] unevictable 0 [ 2578.660951][T21319] hierarchical_memory_limit 314572800 [ 2578.666358][T21319] hierarchical_memsw_limit 9223372036854771712 [ 2578.672635][T21319] total_cache 4096 [ 2578.676384][T21319] total_rss 8192 [ 2578.679983][T21319] total_shmem 0 [ 2578.683424][T21319] total_mapped_file 0 [ 2578.687455][T21319] total_dirty 0 [ 2578.690905][T21319] total_writeback 0 [ 2578.694700][T21319] total_workingset_refault_anon 89798 [ 2578.700209][T21319] total_workingset_refault_file 314 [ 2578.705505][T21319] total_swap 544768 [ 2578.709406][T21319] total_swapcached 4096 [ 2578.713552][T21319] total_pgpgin 1998382 [ 2578.717617][T21319] total_pgpgout 1998379 [ 2578.722316][T21319] total_pgfault 2092841 [ 2578.726471][T21319] total_pgmajfault 39590 [ 2578.730815][T21319] total_inactive_anon 8192 [ 2578.735217][T21319] total_active_anon 0 [ 2578.739220][T21319] total_inactive_file 4096 [ 2578.743627][T21319] total_active_file 0 [ 2578.747686][T21319] total_unevictable 0 [ 2578.751660][T21319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21319,uid=0 [ 2578.766920][T21319] Memory cgroup out of memory: Killed process 21319 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2578.804778][T21306] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2578.818395][T21306] CPU: 0 PID: 21306 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2578.828805][T21306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2578.838933][T21306] Call Trace: [ 2578.842217][T21306] [ 2578.845138][T21306] dump_stack_lvl+0xda/0x130 [ 2578.849769][T21306] dump_stack+0x15/0x20 [ 2578.853923][T21306] dump_header+0x82/0x2d0 [ 2578.858313][T21306] oom_kill_process+0x33a/0x4c0 [ 2578.863271][T21306] out_of_memory+0x9ca/0xbf0 [ 2578.867914][T21306] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2578.874039][T21306] mem_cgroup_out_of_memory+0x139/0x190 [ 2578.879584][T21306] try_charge_memcg+0x75c/0xd30 [ 2578.884487][T21306] obj_cgroup_charge_pages+0xab/0x130 [ 2578.889853][T21306] __memcg_kmem_charge_page+0x9c/0x170 [ 2578.895321][T21306] __alloc_pages+0x1bb/0x340 [ 2578.900021][T21306] alloc_pages_mpol+0xb1/0x1d0 [ 2578.904829][T21306] alloc_pages+0xe0/0x100 [ 2578.909153][T21306] __vmalloc_node_range+0x6d2/0xea0 [ 2578.914393][T21306] kvmalloc_node+0x121/0x160 [ 2578.918974][T21306] ? xt_alloc_table_info+0x3d/0x80 [ 2578.924079][T21306] xt_alloc_table_info+0x3d/0x80 [ 2578.929056][T21306] do_arpt_set_ctl+0x634/0x13b0 [ 2578.933924][T21306] ? __futex_wait+0x227/0x280 [ 2578.938672][T21306] ? __futex_wake_mark+0x70/0x70 [ 2578.943633][T21306] ? tcp_release_cb+0xfe/0x370 [ 2578.948467][T21306] ? _raw_spin_unlock_bh+0x36/0x40 [ 2578.953749][T21306] nf_setsockopt+0x18d/0x1b0 [ 2578.958373][T21306] ip_setsockopt+0xe6/0x100 [ 2578.962872][T21306] tcp_setsockopt+0x90/0xa0 [ 2578.967403][T21306] sock_common_setsockopt+0x61/0x70 [ 2578.972681][T21306] ? sock_common_recvmsg+0xe0/0xe0 [ 2578.978018][T21306] __sys_setsockopt+0x1d4/0x240 [ 2578.982862][T21306] __x64_sys_setsockopt+0x66/0x80 [ 2578.987877][T21306] do_syscall_64+0x44/0x110 [ 2578.992397][T21306] ? syscall_exit_to_user_mode+0x38/0x140 [ 2578.998106][T21306] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2579.003993][T21306] RIP: 0033:0x7ffbf0714ba9 [ 2579.008399][T21306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2579.028105][T21306] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2579.036526][T21306] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2579.044607][T21306] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2579.052568][T21306] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2579.060661][T21306] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2579.068707][T21306] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2579.076672][T21306] [ 2579.080216][T21306] memory: usage 307200kB, limit 307200kB, failcnt 47455 [ 2579.087158][T21306] memory+swap: usage 311720kB, limit 9007199254740988kB, failcnt 0 [ 2579.095192][T21306] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2579.102501][T21306] Memory cgroup stats for /syz4: [ 2579.110378][T21306] cache 12288 [ 2579.118706][T21306] rss 8192 [ 2579.121778][T21306] shmem 0 [ 2579.124761][T21306] mapped_file 0 [ 2579.128286][T21306] dirty 0 [ 2579.131349][T21306] writeback 8192 [ 2579.134885][T21306] workingset_refault_anon 63949 [ 2579.139767][T21306] workingset_refault_file 309 [ 2579.144443][T21306] swap 4628480 [ 2579.147929][T21306] swapcached 12288 [ 2579.151715][T21306] pgpgin 890165 [ 2579.155159][T21306] pgpgout 890159 [ 2579.158797][T21306] pgfault 965973 [ 2579.162363][T21306] pgmajfault 33562 [ 2579.166081][T21306] inactive_anon 0 [ 2579.169723][T21306] active_anon 0 [ 2579.173302][T21306] inactive_file 12288 [ 2579.177296][T21306] active_file 0 [ 2579.180795][T21306] unevictable 0 [ 2579.184246][T21306] hierarchical_memory_limit 314572800 [ 2579.189643][T21306] hierarchical_memsw_limit 9223372036854771712 [ 2579.195859][T21306] total_cache 12288 [ 2579.199693][T21306] total_rss 8192 [ 2579.203221][T21306] total_shmem 0 [ 2579.206707][T21306] total_mapped_file 0 03:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xeaffffff, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x7}}]}, 0x30}}, 0x0) 03:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x8847, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2579.210680][T21306] total_dirty 0 [ 2579.214127][T21306] total_writeback 8192 [ 2579.218265][T21306] total_workingset_refault_anon 63949 [ 2579.223632][T21306] total_workingset_refault_file 309 [ 2579.228849][T21306] total_swap 4628480 [ 2579.232737][T21306] total_swapcached 12288 [ 2579.237017][T21306] total_pgpgin 890165 [ 2579.241029][T21306] total_pgpgout 890159 [ 2579.245111][T21306] total_pgfault 965973 [ 2579.249216][T21306] total_pgmajfault 33562 [ 2579.253544][T21306] total_inactive_anon 0 [ 2579.257784][T21306] total_active_anon 0 [ 2579.261827][T21306] total_inactive_file 12288 [ 2579.266379][T21306] total_active_file 0 [ 2579.270356][T21306] total_unevictable 0 [ 2579.274429][T21306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21302,uid=0 [ 2579.287378][T21334] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2579.289703][T21306] Memory cgroup out of memory: Killed process 21302 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x8}}]}, 0x30}}, 0x0) 03:55:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35fe, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x17]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x8848, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xf0ffffff, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x34000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xfeffffff, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x9}}]}, 0x30}}, 0x0) [ 2579.475966][T21340] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x400300, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0xb}}]}, 0x30}}, 0x0) 03:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xffffff7f, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0xf}}]}, 0x30}}, 0x0) [ 2579.542979][T21350] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2579.609632][T21359] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2580.245191][T21345] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2580.256608][T21345] CPU: 1 PID: 21345 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2580.267036][T21345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2580.277086][T21345] Call Trace: [ 2580.280388][T21345] [ 2580.283325][T21345] dump_stack_lvl+0xda/0x130 [ 2580.287924][T21345] dump_stack+0x15/0x20 [ 2580.292174][T21345] dump_header+0x82/0x2d0 [ 2580.296511][T21345] oom_kill_process+0x33a/0x4c0 [ 2580.301386][T21345] out_of_memory+0x9ca/0xbf0 [ 2580.306057][T21345] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2580.312299][T21345] mem_cgroup_out_of_memory+0x139/0x190 [ 2580.317858][T21345] try_charge_memcg+0x75c/0xd30 [ 2580.322720][T21345] ? __swap_duplicate+0x29b/0x2b0 [ 2580.327838][T21345] ? radix_tree_lookup+0xf9/0x150 [ 2580.332921][T21345] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2580.338992][T21345] __read_swap_cache_async+0x2f6/0x550 [ 2580.344455][T21345] swap_cluster_readahead+0x27c/0x4c0 [ 2580.349930][T21345] swapin_readahead+0xe9/0x7f0 [ 2580.354710][T21345] ? __filemap_get_folio+0x41a/0x5a0 [ 2580.360069][T21345] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2580.365719][T21345] ? swap_cache_get_folio+0x6e/0x200 [ 2580.371003][T21345] do_swap_page+0x4a0/0x1670 [ 2580.375730][T21345] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2580.381034][T21345] ? __rcu_read_lock+0x35/0x50 [ 2580.385808][T21345] ? pte_offset_map_nolock+0x124/0x1d0 [ 2580.391277][T21345] handle_mm_fault+0xa36/0x2dd0 [ 2580.396225][T21345] exc_page_fault+0x3ff/0x6c0 [ 2580.400978][T21345] asm_exc_page_fault+0x26/0x30 [ 2580.405825][T21345] RIP: 0033:0x7ffbf06ceb9d [ 2580.410238][T21345] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d ff 6d 16 00 00 0f 8e 12 ff ff ff e8 4c 07 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 [ 2580.429850][T21345] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2580.435944][T21345] RAX: 0000000000275f12 RBX: 00007ffbf0835980 RCX: 0000000000275e20 [ 2580.443918][T21345] RDX: 00000000000000f2 RSI: 00007ffc3358ca30 RDI: 7fffffffffffffff [ 2580.451903][T21345] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2580.459875][T21345] R10: 00007ffc335ae080 R11: 000000000007ab64 R12: 0000000000275f6b [ 2580.467861][T21345] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000275c2a [ 2580.475855][T21345] [ 2580.479113][T21345] memory: usage 307200kB, limit 307200kB, failcnt 47565 [ 2580.486048][T21345] memory+swap: usage 311712kB, limit 9007199254740988kB, failcnt 0 [ 2580.494035][T21345] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2580.501422][T21345] Memory cgroup stats for /syz4: [ 2580.502245][T21345] cache 12288 [ 2580.510597][T21345] rss 8192 [ 2580.513691][T21345] shmem 0 [ 2580.516632][T21345] mapped_file 0 [ 2580.520077][T21345] dirty 0 [ 2580.523040][T21345] writeback 20480 [ 2580.526761][T21345] workingset_refault_anon 64001 [ 2580.531599][T21345] workingset_refault_file 309 [ 2580.536272][T21345] swap 4620288 [ 2580.539658][T21345] swapcached 20480 [ 2580.543370][T21345] pgpgin 890239 [ 2580.546881][T21345] pgpgout 890231 [ 2580.550412][T21345] pgfault 966138 [ 2580.553953][T21345] pgmajfault 33585 [ 2580.557696][T21345] inactive_anon 0 [ 2580.561321][T21345] active_anon 0 [ 2580.564764][T21345] inactive_file 12288 [ 2580.568843][T21345] active_file 0 [ 2580.572286][T21345] unevictable 0 [ 2580.575721][T21345] hierarchical_memory_limit 314572800 [ 2580.581208][T21345] hierarchical_memsw_limit 9223372036854771712 [ 2580.587395][T21345] total_cache 12288 [ 2580.591262][T21345] total_rss 8192 [ 2580.594940][T21345] total_shmem 0 [ 2580.598416][T21345] total_mapped_file 0 [ 2580.602816][T21345] total_dirty 0 [ 2580.606363][T21345] total_writeback 20480 [ 2580.610508][T21345] total_workingset_refault_anon 64001 [ 2580.615960][T21345] total_workingset_refault_file 309 [ 2580.621184][T21345] total_swap 4620288 [ 2580.625075][T21345] total_swapcached 20480 [ 2580.629332][T21345] total_pgpgin 890239 [ 2580.633321][T21345] total_pgpgout 890231 [ 2580.637408][T21345] total_pgfault 966138 [ 2580.641519][T21345] total_pgmajfault 33585 [ 2580.645867][T21345] total_inactive_anon 0 [ 2580.650024][T21345] total_active_anon 0 [ 2580.654132][T21345] total_inactive_file 12288 [ 2580.658645][T21345] total_active_file 0 [ 2580.662721][T21345] total_unevictable 0 [ 2580.666708][T21345] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21345,uid=0 [ 2580.682167][T21345] Memory cgroup out of memory: Killed process 21345 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2580.711598][T21342] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2580.725248][T21342] CPU: 1 PID: 21342 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2580.735671][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2580.745829][T21342] Call Trace: [ 2580.749099][T21342] [ 2580.752063][T21342] dump_stack_lvl+0xda/0x130 [ 2580.756655][T21342] dump_stack+0x15/0x20 [ 2580.760817][T21342] dump_header+0x82/0x2d0 [ 2580.765145][T21342] oom_kill_process+0x33a/0x4c0 [ 2580.770003][T21342] out_of_memory+0x9ca/0xbf0 [ 2580.774601][T21342] mem_cgroup_out_of_memory+0x139/0x190 [ 2580.780208][T21342] try_charge_memcg+0x75c/0xd30 [ 2580.785084][T21342] obj_cgroup_charge_pages+0xab/0x130 [ 2580.790490][T21342] __memcg_kmem_charge_page+0x9c/0x170 [ 2580.796044][T21342] __alloc_pages+0x1bb/0x340 [ 2580.800625][T21342] alloc_pages_mpol+0xb1/0x1d0 [ 2580.805392][T21342] alloc_pages+0xe0/0x100 [ 2580.809745][T21342] __vmalloc_node_range+0x6d2/0xea0 [ 2580.814971][T21342] kvmalloc_node+0x121/0x160 [ 2580.819556][T21342] ? xt_alloc_table_info+0x3d/0x80 [ 2580.824662][T21342] xt_alloc_table_info+0x3d/0x80 [ 2580.829596][T21342] do_arpt_set_ctl+0x634/0x13b0 [ 2580.834481][T21342] ? __futex_wait+0x227/0x280 [ 2580.839223][T21342] ? __futex_wake_mark+0x70/0x70 [ 2580.844151][T21342] ? tcp_release_cb+0xfe/0x370 [ 2580.848915][T21342] ? _raw_spin_unlock_bh+0x36/0x40 [ 2580.854076][T21342] nf_setsockopt+0x18d/0x1b0 [ 2580.858664][T21342] ip_setsockopt+0xe6/0x100 [ 2580.863176][T21342] tcp_setsockopt+0x90/0xa0 [ 2580.867698][T21342] sock_common_setsockopt+0x61/0x70 [ 2580.873191][T21342] ? sock_common_recvmsg+0xe0/0xe0 [ 2580.878419][T21342] __sys_setsockopt+0x1d4/0x240 [ 2580.883269][T21342] __x64_sys_setsockopt+0x66/0x80 [ 2580.888416][T21342] do_syscall_64+0x44/0x110 [ 2580.892988][T21342] ? syscall_exit_to_user_mode+0x38/0x140 [ 2580.898719][T21342] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2580.904606][T21342] RIP: 0033:0x7f07d1466ba9 [ 2580.909011][T21342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2580.928729][T21342] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2580.937131][T21342] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2580.945096][T21342] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2580.953119][T21342] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2580.961089][T21342] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2580.969054][T21342] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2580.977062][T21342] [ 2580.980194][T21342] memory: usage 307200kB, limit 307200kB, failcnt 197515 [ 2580.987443][T21342] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2580.995410][T21342] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 2581.002775][T21342] Memory cgroup stats for /syz1: [ 2581.003300][T21342] cache 4096 [ 2581.011547][T21342] rss 8192 [ 2581.014558][T21342] shmem 0 [ 2581.017528][T21342] mapped_file 0 [ 2581.021085][T21342] dirty 0 [ 2581.024019][T21342] writeback 0 [ 2581.027356][T21342] workingset_refault_anon 89835 [ 2581.032247][T21342] workingset_refault_file 314 [ 2581.037017][T21342] swap 544768 [ 2581.040299][T21342] swapcached 8192 [ 2581.043920][T21342] pgpgin 1998442 [ 2581.047477][T21342] pgpgout 1998439 [ 2581.051148][T21342] pgfault 2093031 [ 2581.054764][T21342] pgmajfault 39610 [ 2581.058542][T21342] inactive_anon 0 [ 2581.062353][T21342] active_anon 0 [ 2581.065848][T21342] inactive_file 0 [ 2581.069521][T21342] active_file 4096 [ 2581.073278][T21342] unevictable 0 [ 2581.076752][T21342] hierarchical_memory_limit 314572800 [ 2581.082195][T21342] hierarchical_memsw_limit 9223372036854771712 [ 2581.088372][T21342] total_cache 4096 [ 2581.092127][T21342] total_rss 8192 [ 2581.095682][T21342] total_shmem 0 [ 2581.099216][T21342] total_mapped_file 0 [ 2581.103234][T21342] total_dirty 0 [ 2581.106816][T21342] total_writeback 0 [ 2581.110617][T21342] total_workingset_refault_anon 89835 [ 2581.115979][T21342] total_workingset_refault_file 314 [ 2581.121265][T21342] total_swap 544768 [ 2581.125066][T21342] total_swapcached 8192 [ 2581.129240][T21342] total_pgpgin 1998442 [ 2581.133390][T21342] total_pgpgout 1998439 [ 2581.137630][T21342] total_pgfault 2093031 [ 2581.142475][T21342] total_pgmajfault 39610 03:55:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x35ff, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2581.146758][T21342] total_inactive_anon 0 [ 2581.150911][T21342] total_active_anon 0 [ 2581.154946][T21342] total_inactive_file 0 [ 2581.159175][T21342] total_active_file 4096 [ 2581.163404][T21342] total_unevictable 0 [ 2581.167467][T21342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21337,uid=0 [ 2581.182764][T21342] Memory cgroup out of memory: Killed process 21337 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2581.345975][T21344] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2581.359527][T21344] CPU: 1 PID: 21344 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2581.369938][T21344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2581.380000][T21344] Call Trace: [ 2581.383307][T21344] [ 2581.386240][T21344] dump_stack_lvl+0xda/0x130 [ 2581.390842][T21344] dump_stack+0x15/0x20 [ 2581.395003][T21344] dump_header+0x82/0x2d0 [ 2581.399343][T21344] oom_kill_process+0x33a/0x4c0 [ 2581.404200][T21344] out_of_memory+0x9ca/0xbf0 [ 2581.408797][T21344] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2581.414969][T21344] mem_cgroup_out_of_memory+0x139/0x190 [ 2581.420540][T21344] try_charge_memcg+0x75c/0xd30 [ 2581.425474][T21344] obj_cgroup_charge_pages+0xab/0x130 [ 2581.430851][T21344] __memcg_kmem_charge_page+0x9c/0x170 [ 2581.436314][T21344] __alloc_pages+0x1bb/0x340 [ 2581.440906][T21344] alloc_pages_mpol+0xb1/0x1d0 [ 2581.445706][T21344] alloc_pages+0xe0/0x100 [ 2581.450056][T21344] __vmalloc_node_range+0x6d2/0xea0 [ 2581.455357][T21344] kvmalloc_node+0x121/0x160 [ 2581.459955][T21344] ? xt_alloc_table_info+0x3d/0x80 [ 2581.465136][T21344] xt_alloc_table_info+0x3d/0x80 [ 2581.470173][T21344] do_arpt_set_ctl+0x634/0x13b0 [ 2581.475048][T21344] ? __futex_wait+0x227/0x280 [ 2581.479762][T21344] ? __futex_wake_mark+0x70/0x70 [ 2581.484809][T21344] ? tcp_release_cb+0xfe/0x370 [ 2581.489581][T21344] ? _raw_spin_unlock_bh+0x36/0x40 [ 2581.494716][T21344] nf_setsockopt+0x18d/0x1b0 [ 2581.499394][T21344] ip_setsockopt+0xe6/0x100 [ 2581.503934][T21344] tcp_setsockopt+0x90/0xa0 [ 2581.508444][T21344] sock_common_setsockopt+0x61/0x70 [ 2581.513666][T21344] ? sock_common_recvmsg+0xe0/0xe0 [ 2581.518787][T21344] __sys_setsockopt+0x1d4/0x240 [ 2581.523671][T21344] __x64_sys_setsockopt+0x66/0x80 [ 2581.528703][T21344] do_syscall_64+0x44/0x110 [ 2581.533300][T21344] ? syscall_exit_to_user_mode+0x38/0x140 [ 2581.539116][T21344] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2581.545021][T21344] RIP: 0033:0x7f50c0fa7ba9 [ 2581.549431][T21344] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2581.569048][T21344] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2581.577460][T21344] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2581.585434][T21344] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 03:55:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x18]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x1000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x12}}]}, 0x30}}, 0x0) [ 2581.593483][T21344] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2581.601482][T21344] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2581.609516][T21344] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2581.617501][T21344] [ 2581.620740][T21344] memory: usage 307200kB, limit 307200kB, failcnt 94929 [ 2581.627694][T21344] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2581.635675][T21344] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2581.643117][T21344] Memory cgroup stats for /syz3: [ 2581.645598][T21365] validate_nla: 12 callbacks suppressed [ 2581.645611][T21365] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2581.647180][T21344] cache 16384 [ 2581.667585][T21344] rss 0 [ 2581.670394][T21344] shmem 0 [ 2581.673387][T21344] mapped_file 0 [ 2581.676859][T21344] dirty 0 [ 2581.679832][T21344] writeback 0 [ 2581.683121][T21344] workingset_refault_anon 73782 [ 2581.688008][T21344] workingset_refault_file 320 [ 2581.692673][T21344] swap 1896448 [ 2581.696040][T21344] swapcached 8192 [ 2581.699703][T21344] pgpgin 376579 [ 2581.703167][T21344] pgpgout 376573 [ 2581.706813][T21344] pgfault 559154 [ 2581.710346][T21344] pgmajfault 39094 [ 2581.714053][T21344] inactive_anon 0 [ 2581.717697][T21344] active_anon 0 [ 2581.719832][T21367] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2581.721172][T21344] inactive_file 12288 [ 2581.721180][T21344] active_file 4096 [ 2581.721186][T21344] unevictable 0 [ 2581.721193][T21344] hierarchical_memory_limit 314572800 [ 2581.745887][T21344] hierarchical_memsw_limit 9223372036854771712 [ 2581.752064][T21344] total_cache 16384 [ 2581.755866][T21344] total_rss 0 [ 2581.759224][T21344] total_shmem 0 [ 2581.762676][T21344] total_mapped_file 0 [ 2581.766661][T21344] total_dirty 0 [ 2581.770152][T21344] total_writeback 0 [ 2581.773999][T21344] total_workingset_refault_anon 73782 [ 2581.779385][T21344] total_workingset_refault_file 320 [ 2581.784572][T21344] total_swap 1896448 [ 2581.788483][T21344] total_swapcached 8192 [ 2581.792635][T21344] total_pgpgin 376579 [ 2581.796621][T21344] total_pgpgout 376573 [ 2581.800685][T21344] total_pgfault 559154 [ 2581.804750][T21344] total_pgmajfault 39094 [ 2581.809036][T21344] total_inactive_anon 0 [ 2581.813192][T21344] total_active_anon 0 [ 2581.817200][T21344] total_inactive_file 12288 [ 2581.821697][T21344] total_active_file 4096 [ 2581.825935][T21344] total_unevictable 0 [ 2581.830007][T21344] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21343,uid=0 [ 2581.845335][T21344] Memory cgroup out of memory: Killed process 21343 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xffffffea, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x15}}]}, 0x30}}, 0x0) 03:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x2000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x1a]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2582.022960][T21362] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2582.034297][T21362] CPU: 0 PID: 21362 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2582.044708][T21362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2582.054766][T21362] Call Trace: [ 2582.058049][T21362] [ 2582.060998][T21362] dump_stack_lvl+0xda/0x130 [ 2582.065615][T21362] dump_stack+0x15/0x20 [ 2582.069882][T21362] dump_header+0x82/0x2d0 [ 2582.074232][T21362] oom_kill_process+0x33a/0x4c0 [ 2582.079129][T21362] out_of_memory+0x9ca/0xbf0 [ 2582.083726][T21362] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2582.090166][T21362] mem_cgroup_out_of_memory+0x139/0x190 [ 2582.095735][T21362] try_charge_memcg+0x75c/0xd30 [ 2582.100625][T21362] ? __swap_duplicate+0x29b/0x2b0 [ 2582.105719][T21362] ? radix_tree_lookup+0xf9/0x150 [ 2582.110806][T21362] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2582.116903][T21362] __read_swap_cache_async+0x2f6/0x550 [ 2582.122381][T21362] swap_cluster_readahead+0x27c/0x4c0 [ 2582.127841][T21362] swapin_readahead+0xe9/0x7f0 [ 2582.132760][T21362] ? __filemap_get_folio+0x41a/0x5a0 [ 2582.138052][T21362] ? __perf_event_task_sched_in+0x769/0x790 [ 2582.143949][T21362] ? swap_cache_get_folio+0x6e/0x200 [ 2582.149234][T21362] do_swap_page+0x4a0/0x1670 [ 2582.153930][T21362] ? __rcu_read_lock+0x35/0x50 [ 2582.156382][T21382] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2582.158684][T21362] ? pte_offset_map_nolock+0x124/0x1d0 03:55:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x16}}]}, 0x30}}, 0x0) 03:55:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x1b]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x3000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2582.158711][T21362] handle_mm_fault+0xa36/0x2dd0 [ 2582.172080][T21379] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2582.172190][T21362] ? mt_find+0x1d9/0x310 [ 2582.189460][T21362] exc_page_fault+0x2f7/0x6c0 [ 2582.194148][T21362] asm_exc_page_fault+0x26/0x30 [ 2582.199013][T21362] RIP: 0010:__get_user_8+0x11/0x20 [ 2582.204220][T21362] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2582.223835][T21362] RSP: 0018:ffffc90000f0fe38 EFLAGS: 00050202 [ 2582.229921][T21362] RAX: 000055555710bda8 RBX: ffffc90000f0fe40 RCX: ffffffff81443e13 [ 2582.237904][T21362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888152669a10 [ 2582.245948][T21362] RBP: ffffc90000f0fef8 R08: 0001888152669a17 R09: 0000000000000000 [ 2582.253953][T21362] R10: 0001ffffffffffff R11: 00018881526696d0 R12: ffff888152669040 [ 2582.261995][T21362] R13: ffff888152669a10 R14: ffffc90000f0ff58 R15: ffffc90000f0ffd8 [ 2582.270019][T21362] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2582.275930][T21362] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2582.281860][T21362] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2582.287836][T21362] exit_to_user_mode_loop+0xcc/0xe0 [ 2582.293036][T21362] exit_to_user_mode_prepare+0x6c/0xb0 [ 2582.298501][T21362] irqentry_exit_to_user_mode+0x9/0x20 [ 2582.304000][T21362] irqentry_exit+0x12/0x40 [ 2582.308463][T21362] asm_exc_page_fault+0x26/0x30 [ 2582.313368][T21362] RIP: 0033:0x7ffbf06cebc4 [ 2582.317881][T21362] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2582.337497][T21362] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2582.343572][T21362] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2582.351557][T21362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2582.359564][T21362] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2582.367532][T21362] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027661f [ 2582.375499][T21362] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 00000000002762de [ 2582.383470][T21362] [ 2582.386626][T21362] memory: usage 307200kB, limit 307200kB, failcnt 47704 [ 2582.393659][T21362] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2582.401930][T21362] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2582.409313][T21362] Memory cgroup stats for /syz4: [ 2582.431384][T21390] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2582.434757][T21362] cache 12288 [ 2582.447797][T21362] rss 8192 [ 2582.450866][T21362] shmem 0 [ 2582.453836][T21362] mapped_file 0 [ 2582.457358][T21362] dirty 0 [ 2582.460281][T21362] writeback 0 [ 2582.463555][T21362] workingset_refault_anon 64047 [ 2582.468472][T21362] workingset_refault_file 309 [ 2582.473229][T21362] swap 4632576 [ 2582.476639][T21362] swapcached 0 [ 2582.480007][T21362] pgpgin 890307 [ 2582.483460][T21362] pgpgout 890302 [ 2582.487033][T21362] pgfault 966360 [ 2582.490596][T21362] pgmajfault 33609 [ 2582.494301][T21362] inactive_anon 0 [ 2582.497970][T21362] active_anon 8192 [ 2582.501680][T21362] inactive_file 8192 [ 2582.505560][T21362] active_file 4096 [ 2582.509296][T21362] unevictable 0 [ 2582.512827][T21362] hierarchical_memory_limit 314572800 [ 2582.518214][T21362] hierarchical_memsw_limit 9223372036854771712 [ 2582.524357][T21362] total_cache 12288 [ 2582.528184][T21362] total_rss 8192 [ 2582.531718][T21362] total_shmem 0 [ 2582.535170][T21362] total_mapped_file 0 [ 2582.539226][T21362] total_dirty 0 [ 2582.542679][T21362] total_writeback 0 [ 2582.546547][T21362] total_workingset_refault_anon 64047 [ 2582.551989][T21362] total_workingset_refault_file 309 [ 2582.557195][T21362] total_swap 4632576 [ 2582.561081][T21362] total_swapcached 0 [ 2582.564987][T21362] total_pgpgin 890307 [ 2582.569100][T21362] total_pgpgout 890302 [ 2582.573156][T21362] total_pgfault 966360 [ 2582.577223][T21362] total_pgmajfault 33609 [ 2582.581455][T21362] total_inactive_anon 0 [ 2582.585597][T21362] total_active_anon 8192 [ 2582.589855][T21362] total_inactive_file 8192 [ 2582.594281][T21362] total_active_file 4096 [ 2582.598720][T21362] total_unevictable 0 [ 2582.602696][T21362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21362,uid=0 [ 2582.618049][T21362] Memory cgroup out of memory: Killed process 21362 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3600, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xfffffff0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1e}}]}, 0x30}}, 0x0) 03:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x4000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2582.898691][T21394] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2582.906958][T21395] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2582.915418][T21396] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x5000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x0}}]}, 0x30}}, 0x0) 03:55:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0xfffffffe, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x2}}]}, 0x30}}, 0x0) 03:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x6000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2583.083257][T21403] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2583.091489][T21404] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2583.099767][T21400] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2583.111615][T21408] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x1c]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x10, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2583.708428][T21397] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2583.719871][T21397] CPU: 0 PID: 21397 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2583.730293][T21397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2583.740416][T21397] Call Trace: [ 2583.743697][T21397] [ 2583.746643][T21397] dump_stack_lvl+0xda/0x130 [ 2583.751508][T21397] dump_stack+0x15/0x20 [ 2583.755682][T21397] dump_header+0x82/0x2d0 [ 2583.760078][T21397] oom_kill_process+0x33a/0x4c0 [ 2583.765023][T21397] out_of_memory+0x9ca/0xbf0 [ 2583.769686][T21397] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2583.775881][T21397] mem_cgroup_out_of_memory+0x139/0x190 [ 2583.781431][T21397] try_charge_memcg+0x75c/0xd30 [ 2583.786282][T21397] ? __swap_duplicate+0x29b/0x2b0 [ 2583.791395][T21397] ? radix_tree_lookup+0xf9/0x150 [ 2583.796422][T21397] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2583.802695][T21397] __read_swap_cache_async+0x2f6/0x550 [ 2583.808202][T21397] swap_cluster_readahead+0x27c/0x4c0 [ 2583.813577][T21397] swapin_readahead+0xe9/0x7f0 [ 2583.818409][T21397] ? __filemap_get_folio+0x41a/0x5a0 [ 2583.823770][T21397] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2583.829407][T21397] ? swap_cache_get_folio+0x6e/0x200 [ 2583.834795][T21397] do_swap_page+0x4a0/0x1670 [ 2583.839393][T21397] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2583.844689][T21397] ? __rcu_read_lock+0x35/0x50 [ 2583.849525][T21397] ? pte_offset_map_nolock+0x124/0x1d0 [ 2583.855068][T21397] handle_mm_fault+0xa36/0x2dd0 [ 2583.859932][T21397] exc_page_fault+0x3ff/0x6c0 [ 2583.864693][T21397] asm_exc_page_fault+0x26/0x30 [ 2583.869700][T21397] RIP: 0033:0x7ffbf06cebc4 [ 2583.874111][T21397] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2583.893722][T21397] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2583.899787][T21397] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2583.907752][T21397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2583.915774][T21397] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2583.923760][T21397] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000276ce2 [ 2583.931787][T21397] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 00000000002769a1 [ 2583.939858][T21397] [ 2583.943008][T21397] memory: usage 307200kB, limit 307200kB, failcnt 47855 [ 2583.950053][T21397] memory+swap: usage 311712kB, limit 9007199254740988kB, failcnt 0 [ 2583.958028][T21397] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2583.965355][T21397] Memory cgroup stats for /syz4: [ 2583.974762][T21397] cache 12288 [ 2583.983030][T21397] rss 8192 [ 2583.986046][T21397] shmem 0 [ 2583.989012][T21397] mapped_file 0 [ 2583.992483][T21397] dirty 0 [ 2583.995446][T21397] writeback 8192 [ 2583.998999][T21397] workingset_refault_anon 64079 [ 2584.003842][T21397] workingset_refault_file 309 [ 2584.008569][T21397] swap 4620288 [ 2584.011939][T21397] swapcached 20480 [ 2584.015773][T21397] pgpgin 890361 [ 2584.019256][T21397] pgpgout 890353 [ 2584.022789][T21397] pgfault 966593 [ 2584.026361][T21397] pgmajfault 33625 [ 2584.030079][T21397] inactive_anon 0 [ 2584.033847][T21397] active_anon 0 [ 2584.037318][T21397] inactive_file 12288 [ 2584.041291][T21397] active_file 0 [ 2584.044740][T21397] unevictable 0 [ 2584.048263][T21397] hierarchical_memory_limit 314572800 [ 2584.053623][T21397] hierarchical_memsw_limit 9223372036854771712 [ 2584.059804][T21397] total_cache 12288 [ 2584.063598][T21397] total_rss 8192 [ 2584.067150][T21397] total_shmem 0 [ 2584.070845][T21397] total_mapped_file 0 [ 2584.074822][T21397] total_dirty 0 [ 2584.078396][T21397] total_writeback 8192 [ 2584.082449][T21397] total_workingset_refault_anon 64079 [ 2584.087828][T21397] total_workingset_refault_file 309 [ 2584.093027][T21397] total_swap 4620288 [ 2584.096952][T21397] total_swapcached 20480 [ 2584.101320][T21397] total_pgpgin 890361 [ 2584.105289][T21397] total_pgpgout 890353 [ 2584.109391][T21397] total_pgfault 966593 [ 2584.113453][T21397] total_pgmajfault 33625 [ 2584.117721][T21397] total_inactive_anon 0 [ 2584.121869][T21397] total_active_anon 0 [ 2584.125837][T21397] total_inactive_file 12288 [ 2584.130398][T21397] total_active_file 0 [ 2584.134385][T21397] total_unevictable 0 [ 2584.138389][T21397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21397,uid=0 [ 2584.153876][T21397] Memory cgroup out of memory: Killed process 21397 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3601, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x4}}]}, 0x30}}, 0x0) 03:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x7000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x1d]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x8000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x5}}]}, 0x30}}, 0x0) 03:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x9000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x10, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x6}}]}, 0x30}}, 0x0) [ 2584.483227][T21433] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2585.226375][T21416] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2585.237786][T21416] CPU: 0 PID: 21416 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2585.248252][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2585.258523][T21416] Call Trace: [ 2585.262133][T21416] [ 2585.265060][T21416] dump_stack_lvl+0xda/0x130 [ 2585.269699][T21416] dump_stack+0x15/0x20 [ 2585.273913][T21416] dump_header+0x82/0x2d0 [ 2585.278319][T21416] oom_kill_process+0x33a/0x4c0 [ 2585.283195][T21416] out_of_memory+0x9ca/0xbf0 [ 2585.287804][T21416] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2585.293885][T21416] mem_cgroup_out_of_memory+0x139/0x190 [ 2585.299462][T21416] try_charge_memcg+0x75c/0xd30 [ 2585.304327][T21416] ? __swap_duplicate+0x29b/0x2b0 [ 2585.309406][T21416] ? radix_tree_lookup+0xf9/0x150 [ 2585.314520][T21416] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2585.320593][T21416] __read_swap_cache_async+0x2f6/0x550 [ 2585.326104][T21416] swap_cluster_readahead+0x27c/0x4c0 [ 2585.331524][T21416] swapin_readahead+0xe9/0x7f0 [ 2585.336385][T21416] ? __filemap_get_folio+0x41a/0x5a0 [ 2585.341671][T21416] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2585.347344][T21416] ? swap_cache_get_folio+0x6e/0x200 [ 2585.352756][T21416] do_swap_page+0x4a0/0x1670 [ 2585.357371][T21416] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2585.362688][T21416] ? __rcu_read_lock+0x35/0x50 [ 2585.367519][T21416] ? pte_offset_map_nolock+0x124/0x1d0 [ 2585.373058][T21416] handle_mm_fault+0xa36/0x2dd0 [ 2585.377947][T21416] exc_page_fault+0x3ff/0x6c0 [ 2585.382675][T21416] asm_exc_page_fault+0x26/0x30 [ 2585.387527][T21416] RIP: 0033:0x7f07d1420b9d [ 2585.391940][T21416] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d ff 6d 16 00 00 0f 8e 12 ff ff ff e8 4c 07 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 [ 2585.411543][T21416] RSP: 002b:00007fffaf03b910 EFLAGS: 00010206 [ 2585.417681][T21416] RAX: 0000000000277270 RBX: 00007f07d1587980 RCX: 00000000002771a8 [ 2585.425678][T21416] RDX: 00000000000000c8 RSI: 00007fffaf03b8f0 RDI: 7fffffffffffffff [ 2585.433639][T21416] RBP: 00007f07d1587980 R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2585.441605][T21416] R10: 00007fffaf111080 R11: 000000000007aee2 R12: 00000000002772c3 [ 2585.449565][T21416] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000276f82 [ 2585.457530][T21416] [ 2585.460665][T21416] memory: usage 307200kB, limit 307200kB, failcnt 197649 [ 2585.467746][T21416] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 2585.475630][T21416] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 2585.483095][T21416] Memory cgroup stats for /syz1: [ 2585.488301][T21416] cache 4096 [ 2585.496528][T21416] rss 8192 [ 2585.499613][T21416] shmem 0 [ 2585.502547][T21416] mapped_file 0 [ 2585.505994][T21416] dirty 0 [ 2585.509023][T21416] writeback 8192 [ 2585.512616][T21416] workingset_refault_anon 89968 [ 2585.517493][T21416] workingset_refault_file 314 [ 2585.522156][T21416] swap 540672 [ 2585.525431][T21416] swapcached 12288 [ 2585.529156][T21416] pgpgin 1998692 [ 2585.532692][T21416] pgpgout 1998688 [ 2585.536373][T21416] pgfault 2093666 [ 2585.540016][T21416] pgmajfault 39670 [ 2585.543736][T21416] inactive_anon 0 [ 2585.547395][T21416] active_anon 0 [ 2585.550841][T21416] inactive_file 0 [ 2585.554462][T21416] active_file 4096 [ 2585.558195][T21416] unevictable 0 [ 2585.561669][T21416] hierarchical_memory_limit 314572800 [ 2585.567060][T21416] hierarchical_memsw_limit 9223372036854771712 [ 2585.573207][T21416] total_cache 4096 [ 2585.576946][T21416] total_rss 8192 [ 2585.580487][T21416] total_shmem 0 [ 2585.583954][T21416] total_mapped_file 0 [ 2585.587957][T21416] total_dirty 0 [ 2585.591446][T21416] total_writeback 8192 [ 2585.595504][T21416] total_workingset_refault_anon 89968 [ 2585.600910][T21416] total_workingset_refault_file 314 [ 2585.606110][T21416] total_swap 540672 [ 2585.609922][T21416] total_swapcached 12288 [ 2585.614146][T21416] total_pgpgin 1998692 [ 2585.618216][T21416] total_pgpgout 1998688 [ 2585.622360][T21416] total_pgfault 2093666 03:55:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3602, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xa000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x11, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x7}}]}, 0x30}}, 0x0) [ 2585.626584][T21416] total_pgmajfault 39670 [ 2585.630959][T21416] total_inactive_anon 0 [ 2585.635165][T21416] total_active_anon 0 [ 2585.639146][T21416] total_inactive_file 0 [ 2585.643345][T21416] total_active_file 4096 [ 2585.647703][T21416] total_unevictable 0 [ 2585.651681][T21416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21416,uid=0 [ 2585.667087][T21416] Memory cgroup out of memory: Killed process 21416 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2585.687685][T21445] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xb000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x12, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x8}}]}, 0x30}}, 0x0) 03:55:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x1e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xc000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x13, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x9}}]}, 0x30}}, 0x0) [ 2586.006809][T21454] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2586.063279][T21465] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2586.578223][T21448] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2586.591821][T21448] CPU: 1 PID: 21448 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2586.602242][T21448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2586.612350][T21448] Call Trace: [ 2586.615630][T21448] [ 2586.618567][T21448] dump_stack_lvl+0xda/0x130 [ 2586.623174][T21448] dump_stack+0x15/0x20 [ 2586.627341][T21448] dump_header+0x82/0x2d0 [ 2586.631841][T21448] oom_kill_process+0x33a/0x4c0 [ 2586.636753][T21448] out_of_memory+0x9ca/0xbf0 [ 2586.641486][T21448] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2586.647682][T21448] mem_cgroup_out_of_memory+0x139/0x190 [ 2586.653316][T21448] try_charge_memcg+0x75c/0xd30 [ 2586.658301][T21448] obj_cgroup_charge_pages+0xab/0x130 [ 2586.663685][T21448] __memcg_kmem_charge_page+0x9c/0x170 [ 2586.669269][T21448] __alloc_pages+0x1bb/0x340 [ 2586.673866][T21448] alloc_pages_mpol+0xb1/0x1d0 [ 2586.678633][T21448] alloc_pages+0xe0/0x100 [ 2586.683022][T21448] __vmalloc_node_range+0x6d2/0xea0 [ 2586.688313][T21448] kvmalloc_node+0x121/0x160 [ 2586.692919][T21448] ? xt_alloc_table_info+0x3d/0x80 [ 2586.698108][T21448] xt_alloc_table_info+0x3d/0x80 [ 2586.703107][T21448] do_arpt_set_ctl+0x634/0x13b0 [ 2586.707962][T21448] ? __futex_wait+0x227/0x280 [ 2586.712712][T21448] ? __futex_wake_mark+0x70/0x70 [ 2586.717642][T21448] ? tcp_release_cb+0xfe/0x370 [ 2586.722411][T21448] ? _raw_spin_unlock_bh+0x36/0x40 [ 2586.727525][T21448] nf_setsockopt+0x18d/0x1b0 [ 2586.732126][T21448] ip_setsockopt+0xe6/0x100 [ 2586.736707][T21448] tcp_setsockopt+0x90/0xa0 [ 2586.741301][T21448] sock_common_setsockopt+0x61/0x70 [ 2586.746514][T21448] ? sock_common_recvmsg+0xe0/0xe0 [ 2586.751635][T21448] __sys_setsockopt+0x1d4/0x240 [ 2586.756478][T21448] __x64_sys_setsockopt+0x66/0x80 [ 2586.761506][T21448] do_syscall_64+0x44/0x110 [ 2586.766105][T21448] ? syscall_exit_to_user_mode+0x38/0x140 [ 2586.771856][T21448] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2586.777761][T21448] RIP: 0033:0x7ffbf0714ba9 [ 2586.782304][T21448] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2586.802085][T21448] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2586.810558][T21448] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2586.818590][T21448] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2586.826558][T21448] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2586.834540][T21448] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2586.842514][T21448] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2586.850539][T21448] [ 2586.853692][T21448] memory: usage 307200kB, limit 307200kB, failcnt 48109 [ 2586.860758][T21448] memory+swap: usage 311736kB, limit 9007199254740988kB, failcnt 0 [ 2586.868724][T21448] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2586.876004][T21448] Memory cgroup stats for /syz4: [ 2586.876148][T21448] cache 12288 [ 2586.884547][T21448] rss 8192 [ 2586.887606][T21448] shmem 0 [ 2586.890539][T21448] mapped_file 0 [ 2586.893996][T21448] dirty 0 [ 2586.897065][T21448] writeback 0 [ 2586.900365][T21448] workingset_refault_anon 64138 [ 2586.905273][T21448] workingset_refault_file 309 [ 2586.910103][T21448] swap 4632576 [ 2586.913509][T21448] swapcached 8192 [ 2586.917216][T21448] pgpgin 890466 [ 2586.920712][T21448] pgpgout 890461 [ 2586.924299][T21448] pgfault 966940 [ 2586.927880][T21448] pgmajfault 33671 [ 2586.931584][T21448] inactive_anon 0 [ 2586.935211][T21448] active_anon 0 [ 2586.938702][T21448] inactive_file 12288 [ 2586.942729][T21448] active_file 0 [ 2586.946198][T21448] unevictable 0 [ 2586.949714][T21448] hierarchical_memory_limit 314572800 [ 2586.955131][T21448] hierarchical_memsw_limit 9223372036854771712 [ 2586.961301][T21448] total_cache 12288 [ 2586.965094][T21448] total_rss 8192 [ 2586.968669][T21448] total_shmem 0 [ 2586.972177][T21448] total_mapped_file 0 [ 2586.976128][T21448] total_dirty 0 [ 2586.979665][T21448] total_writeback 0 [ 2586.983480][T21448] total_workingset_refault_anon 64138 [ 2586.988862][T21448] total_workingset_refault_file 309 [ 2586.994092][T21448] total_swap 4632576 [ 2586.997987][T21448] total_swapcached 8192 [ 2587.002178][T21448] total_pgpgin 890466 [ 2587.006138][T21448] total_pgpgout 890461 [ 2587.010243][T21448] total_pgfault 966940 [ 2587.014309][T21448] total_pgmajfault 33671 [ 2587.018545][T21448] total_inactive_anon 0 [ 2587.022730][T21448] total_active_anon 0 [ 2587.026768][T21448] total_inactive_file 12288 [ 2587.031257][T21448] total_active_file 0 [ 2587.035211][T21448] total_unevictable 0 [ 2587.039191][T21448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21447,uid=0 [ 2587.054626][T21448] Memory cgroup out of memory: Killed process 21447 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2587.072000][T21459] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2587.085592][T21459] CPU: 0 PID: 21459 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2587.096000][T21459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2587.106072][T21459] Call Trace: [ 2587.109345][T21459] [ 2587.112317][T21459] dump_stack_lvl+0xda/0x130 [ 2587.116984][T21459] dump_stack+0x15/0x20 [ 2587.121141][T21459] dump_header+0x82/0x2d0 [ 2587.125543][T21459] oom_kill_process+0x33a/0x4c0 [ 2587.130388][T21459] out_of_memory+0x9ca/0xbf0 [ 2587.135019][T21459] mem_cgroup_out_of_memory+0x139/0x190 [ 2587.140568][T21459] try_charge_memcg+0x75c/0xd30 [ 2587.145455][T21459] obj_cgroup_charge_pages+0xab/0x130 [ 2587.150826][T21459] __memcg_kmem_charge_page+0x9c/0x170 [ 2587.156340][T21459] __alloc_pages+0x1bb/0x340 [ 2587.160940][T21459] alloc_pages_mpol+0xb1/0x1d0 [ 2587.165710][T21459] alloc_pages+0xe0/0x100 [ 2587.170063][T21459] __vmalloc_node_range+0x6d2/0xea0 [ 2587.175341][T21459] kvmalloc_node+0x121/0x160 [ 2587.179931][T21459] ? xt_alloc_table_info+0x3d/0x80 [ 2587.185116][T21459] xt_alloc_table_info+0x3d/0x80 [ 2587.190135][T21459] do_arpt_set_ctl+0x634/0x13b0 [ 2587.194988][T21459] ? __futex_wait+0x227/0x280 [ 2587.199658][T21459] ? __futex_wake_mark+0x70/0x70 [ 2587.204653][T21459] ? tcp_release_cb+0xfe/0x370 [ 2587.209418][T21459] ? _raw_spin_unlock_bh+0x36/0x40 [ 2587.214519][T21459] nf_setsockopt+0x18d/0x1b0 [ 2587.219111][T21459] ip_setsockopt+0xe6/0x100 [ 2587.223608][T21459] tcp_setsockopt+0x90/0xa0 [ 2587.228104][T21459] sock_common_setsockopt+0x61/0x70 [ 2587.233308][T21459] ? sock_common_recvmsg+0xe0/0xe0 [ 2587.238490][T21459] __sys_setsockopt+0x1d4/0x240 [ 2587.243352][T21459] __x64_sys_setsockopt+0x66/0x80 [ 2587.248366][T21459] do_syscall_64+0x44/0x110 [ 2587.252875][T21459] ? syscall_exit_to_user_mode+0x38/0x140 [ 2587.258584][T21459] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2587.264485][T21459] RIP: 0033:0x7f07d1466ba9 [ 2587.268942][T21459] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2587.288538][T21459] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2587.297027][T21459] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2587.305016][T21459] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2587.312976][T21459] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2587.320936][T21459] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2587.328896][T21459] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2587.336934][T21459] [ 2587.340054][T21459] memory: usage 307200kB, limit 307200kB, failcnt 197776 [ 2587.347085][T21459] memory+swap: usage 307708kB, limit 9007199254740988kB, failcnt 0 [ 2587.355028][T21459] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 2587.362354][T21459] Memory cgroup stats for /syz1: [ 2587.370891][T21459] cache 4096 [ 2587.379156][T21459] rss 28672 [ 2587.382255][T21459] shmem 0 [ 2587.385177][T21459] mapped_file 0 [ 2587.388661][T21459] dirty 0 [ 2587.391592][T21459] writeback 0 [ 2587.394934][T21459] workingset_refault_anon 89999 [ 2587.399805][T21459] workingset_refault_file 314 [ 2587.404467][T21459] swap 520192 [ 2587.407762][T21459] swapcached 4096 [ 2587.411385][T21459] pgpgin 1998746 [ 2587.414924][T21459] pgpgout 1998737 [ 2587.418580][T21459] pgfault 2093795 [ 2587.422276][T21459] pgmajfault 39681 [ 2587.426060][T21459] inactive_anon 20480 [ 2587.430144][T21459] active_anon 12288 [ 2587.433967][T21459] inactive_file 4096 [ 2587.437927][T21459] active_file 0 [ 2587.441385][T21459] unevictable 0 [ 2587.444835][T21459] hierarchical_memory_limit 314572800 [ 2587.450219][T21459] hierarchical_memsw_limit 9223372036854771712 [ 2587.456385][T21459] total_cache 4096 [ 2587.460154][T21459] total_rss 28672 [ 2587.463806][T21459] total_shmem 0 [ 2587.467290][T21459] total_mapped_file 0 [ 2587.471286][T21459] total_dirty 0 [ 2587.474772][T21459] total_writeback 0 03:55:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3603, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0xb}}]}, 0x30}}, 0x0) 03:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xd000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2587.478614][T21459] total_workingset_refault_anon 89999 [ 2587.483975][T21459] total_workingset_refault_file 314 [ 2587.489196][T21459] total_swap 520192 [ 2587.492994][T21459] total_swapcached 4096 [ 2587.497194][T21459] total_pgpgin 1998746 [ 2587.501256][T21459] total_pgpgout 1998737 [ 2587.505397][T21459] total_pgfault 2093795 [ 2587.509607][T21459] total_pgmajfault 39681 [ 2587.513913][T21459] total_inactive_anon 20480 [ 2587.518476][T21459] total_active_anon 12288 [ 2587.519016][T21467] validate_nla: 14 callbacks suppressed [ 2587.519028][T21467] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2587.522789][T21459] total_inactive_file 4096 [ 2587.522798][T21459] total_active_file 0 [ 2587.522805][T21459] total_unevictable 0 [ 2587.522812][T21459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2587.543822][T21471] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2587.544894][T21459] ,cpuset=syz1,mems_allowed=0,oom_memcg=/syz1 [ 2587.552960][T21469] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2587.555801][T21459] ,task_memcg=/syz1,task=syz-executor.1,pid=21458,uid=0 [ 2587.586464][T21459] Memory cgroup out of memory: Killed process 21458 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2587.606391][T21449] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2587.617740][T21449] CPU: 0 PID: 21449 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2587.628181][T21449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2587.638333][T21449] Call Trace: [ 2587.641629][T21449] [ 2587.644577][T21449] dump_stack_lvl+0xda/0x130 [ 2587.649310][T21449] dump_stack+0x15/0x20 [ 2587.653493][T21449] dump_header+0x82/0x2d0 [ 2587.657895][T21449] oom_kill_process+0x33a/0x4c0 [ 2587.662771][T21449] out_of_memory+0x9ca/0xbf0 [ 2587.667387][T21449] mem_cgroup_out_of_memory+0x139/0x190 [ 2587.672986][T21449] try_charge_memcg+0x75c/0xd30 [ 2587.677899][T21449] ? __swap_duplicate+0x29b/0x2b0 [ 2587.683011][T21449] ? radix_tree_lookup+0xf9/0x150 [ 2587.688188][T21449] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2587.694306][T21449] __read_swap_cache_async+0x2f6/0x550 [ 2587.699815][T21449] swap_cluster_readahead+0x27c/0x4c0 [ 2587.705199][T21449] swapin_readahead+0xe9/0x7f0 [ 2587.710087][T21449] ? __filemap_get_folio+0x41a/0x5a0 [ 2587.715436][T21449] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2587.721059][T21449] ? swap_cache_get_folio+0x6e/0x200 [ 2587.726373][T21449] do_swap_page+0x4a0/0x1670 [ 2587.731006][T21449] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2587.736279][T21449] ? __rcu_read_lock+0x35/0x50 [ 2587.741107][T21449] ? pte_offset_map_nolock+0x124/0x1d0 [ 2587.746614][T21449] handle_mm_fault+0xa36/0x2dd0 [ 2587.751456][T21449] exc_page_fault+0x3ff/0x6c0 [ 2587.756120][T21449] asm_exc_page_fault+0x26/0x30 [ 2587.760989][T21449] RIP: 0033:0x7f50c0f52200 [ 2587.765388][T21449] Code: 48 89 2d f3 e4 c9 00 eb 86 48 89 c1 48 89 ea 48 8d 35 24 ff 09 00 31 c0 48 8d 3d 2b ff 09 00 e8 b6 fd ff ff 66 0f 1f 44 00 00 <48> 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 [ 2587.784986][T21449] RSP: 002b:00007ffd61c03bc8 EFLAGS: 00010246 [ 2587.791155][T21449] RAX: 000000000003ffff RBX: 0000000000000001 RCX: 0000000000277590 [ 2587.799115][T21449] RDX: 000000000000028a RSI: 0000000000000000 RDI: 000000000badf00d [ 2587.807077][T21449] RBP: 00000000000003e7 R08: 0000000000000010 R09: 00007ffd61de10b0 [ 2587.815038][T21449] R10: 00007ffd61de1080 R11: 000000000007afe0 R12: 0000000000277814 [ 2587.822992][T21449] R13: 00007f50c10c6f80 R14: 00007f50c0b2b000 R15: 00000000002774d3 [ 2587.830951][T21449] [ 2587.834150][T21449] memory: usage 307200kB, limit 307200kB, failcnt 95332 [ 2587.841126][T21449] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2587.849368][T21449] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2587.856678][T21449] Memory cgroup stats for /syz3: [ 2587.947022][T21449] cache 16384 [ 2587.955265][T21449] rss 0 [ 2587.958119][T21449] shmem 0 [ 2587.961091][T21449] mapped_file 0 [ 2587.964541][T21449] dirty 0 [ 2587.967494][T21449] writeback 8192 [ 2587.971033][T21449] workingset_refault_anon 73943 [ 2587.975900][T21449] workingset_refault_file 320 [ 2587.980580][T21449] swap 1896448 [ 2587.983950][T21449] swapcached 8192 [ 2587.987636][T21449] pgpgin 376833 [ 2587.991083][T21449] pgpgout 376827 [ 2587.994646][T21449] pgfault 559914 [ 2587.998229][T21449] pgmajfault 39173 [ 2588.001935][T21449] inactive_anon 0 [ 2588.005592][T21449] active_anon 0 [ 2588.009062][T21449] inactive_file 4096 [ 2588.012991][T21449] active_file 12288 [ 2588.016796][T21449] unevictable 0 [ 2588.020244][T21449] hierarchical_memory_limit 314572800 [ 2588.025670][T21449] hierarchical_memsw_limit 9223372036854771712 [ 2588.031858][T21449] total_cache 16384 [ 2588.035651][T21449] total_rss 0 [ 2588.038967][T21449] total_shmem 0 [ 2588.042467][T21449] total_mapped_file 0 [ 2588.046454][T21449] total_dirty 0 [ 2588.049969][T21449] total_writeback 8192 [ 2588.054041][T21449] total_workingset_refault_anon 73943 [ 2588.059489][T21449] total_workingset_refault_file 320 [ 2588.064836][T21449] total_swap 1896448 [ 2588.068762][T21449] total_swapcached 8192 [ 2588.072903][T21449] total_pgpgin 376833 [ 2588.076965][T21449] total_pgpgout 376827 [ 2588.081054][T21449] total_pgfault 559914 [ 2588.085168][T21449] total_pgmajfault 39173 [ 2588.089413][T21449] total_inactive_anon 0 [ 2588.093559][T21449] total_active_anon 0 [ 2588.097540][T21449] total_inactive_file 4096 [ 2588.101934][T21449] total_active_file 12288 [ 2588.106279][T21449] total_unevictable 0 [ 2588.110274][T21449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21449,uid=0 [ 2588.125538][T21449] Memory cgroup out of memory: Killed process 21449 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0xf}}]}, 0x30}}, 0x0) 03:55:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xe000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x15, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x22]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xf000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x12}}]}, 0x30}}, 0x0) [ 2588.407113][T21475] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2588.415354][T21480] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2588.432986][T21479] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x16, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2588.455564][T21483] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2588.471578][T21487] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2588.476986][T21473] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2588.493266][T21473] CPU: 0 PID: 21473 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2588.503695][T21473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2588.513779][T21473] Call Trace: [ 2588.517140][T21473] [ 2588.520070][T21473] dump_stack_lvl+0xda/0x130 [ 2588.524689][T21473] dump_stack+0x15/0x20 [ 2588.528842][T21473] dump_header+0x82/0x2d0 [ 2588.533173][T21473] oom_kill_process+0x33a/0x4c0 [ 2588.538123][T21473] out_of_memory+0x9ca/0xbf0 [ 2588.542726][T21473] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2588.548870][T21473] mem_cgroup_out_of_memory+0x139/0x190 [ 2588.554457][T21473] try_charge_memcg+0x75c/0xd30 [ 2588.559304][T21473] obj_cgroup_charge_pages+0xab/0x130 [ 2588.564670][T21473] __memcg_kmem_charge_page+0x9c/0x170 [ 2588.570203][T21473] __alloc_pages+0x1bb/0x340 [ 2588.574828][T21473] alloc_pages_mpol+0xb1/0x1d0 [ 2588.579586][T21473] alloc_pages+0xe0/0x100 [ 2588.583909][T21473] __vmalloc_node_range+0x6d2/0xea0 [ 2588.589126][T21473] kvmalloc_node+0x121/0x160 [ 2588.593794][T21473] ? xt_alloc_table_info+0x3d/0x80 [ 2588.598899][T21473] xt_alloc_table_info+0x3d/0x80 [ 2588.603829][T21473] do_arpt_set_ctl+0x634/0x13b0 [ 2588.608766][T21473] ? __futex_wait+0x227/0x280 [ 2588.613461][T21473] ? __futex_wake_mark+0x70/0x70 [ 2588.618456][T21473] ? tcp_release_cb+0xfe/0x370 [ 2588.623219][T21473] ? _raw_spin_unlock_bh+0x36/0x40 [ 2588.628458][T21473] nf_setsockopt+0x18d/0x1b0 [ 2588.633050][T21473] ip_setsockopt+0xe6/0x100 [ 2588.637565][T21473] tcp_setsockopt+0x90/0xa0 [ 2588.642060][T21473] sock_common_setsockopt+0x61/0x70 [ 2588.647289][T21473] ? sock_common_recvmsg+0xe0/0xe0 [ 2588.652450][T21473] __sys_setsockopt+0x1d4/0x240 [ 2588.657294][T21473] __x64_sys_setsockopt+0x66/0x80 [ 2588.662305][T21473] do_syscall_64+0x44/0x110 [ 2588.666824][T21473] ? syscall_exit_to_user_mode+0x38/0x140 [ 2588.672533][T21473] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2588.678456][T21473] RIP: 0033:0x7ffbf0714ba9 [ 2588.682857][T21473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2588.702628][T21473] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2588.711030][T21473] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2588.718987][T21473] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2588.726951][T21473] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2588.734929][T21473] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2588.742915][T21473] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2588.750884][T21473] [ 2588.754044][T21473] memory: usage 307200kB, limit 307200kB, failcnt 48242 [ 2588.761029][T21473] memory+swap: usage 311720kB, limit 9007199254740988kB, failcnt 0 [ 2588.769100][T21473] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2588.776438][T21473] Memory cgroup stats for /syz4: [ 2588.820968][T21473] cache 12288 [ 2588.829279][T21473] rss 0 [ 2588.832050][T21473] shmem 0 [ 2588.834990][T21473] mapped_file 0 [ 2588.838525][T21473] dirty 0 [ 2588.841479][T21473] writeback 4096 [ 2588.845017][T21473] workingset_refault_anon 64181 [ 2588.849932][T21473] workingset_refault_file 309 [ 2588.854650][T21473] swap 4628480 [ 2588.858047][T21473] swapcached 12288 [ 2588.861757][T21473] pgpgin 890531 [ 2588.865212][T21473] pgpgout 890525 [ 2588.868783][T21473] pgfault 967136 [ 2588.872320][T21473] pgmajfault 33687 [ 2588.876038][T21473] inactive_anon 0 [ 2588.879680][T21473] active_anon 0 [ 2588.883124][T21473] inactive_file 12288 [ 2588.887192][T21473] active_file 0 [ 2588.890752][T21473] unevictable 0 [ 2588.894200][T21473] hierarchical_memory_limit 314572800 [ 2588.899630][T21473] hierarchical_memsw_limit 9223372036854771712 [ 2588.905863][T21473] total_cache 12288 [ 2588.909779][T21473] total_rss 0 [ 2588.913064][T21473] total_shmem 0 [ 2588.916561][T21473] total_mapped_file 0 [ 2588.920541][T21473] total_dirty 0 [ 2588.923996][T21473] total_writeback 4096 [ 2588.928194][T21473] total_workingset_refault_anon 64181 [ 2588.933565][T21473] total_workingset_refault_file 309 [ 2588.938788][T21473] total_swap 4628480 [ 2588.942724][T21473] total_swapcached 12288 [ 2588.947015][T21473] total_pgpgin 890531 [ 2588.950989][T21473] total_pgpgout 890525 [ 2588.955079][T21473] total_pgfault 967136 [ 2588.959177][T21473] total_pgmajfault 33687 [ 2588.963475][T21473] total_inactive_anon 0 [ 2588.967756][T21473] total_active_anon 0 [ 2588.971728][T21473] total_inactive_file 12288 [ 2588.976226][T21473] total_active_file 0 [ 2588.980259][T21473] total_unevictable 0 [ 2588.984294][T21473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21472,uid=0 [ 2588.999594][T21473] Memory cgroup out of memory: Killed process 21472 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x15}}]}, 0x30}}, 0x0) 03:55:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3604, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x29, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x10000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x29]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x11000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x7b, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x16}}]}, 0x30}}, 0x0) [ 2589.326046][T21493] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2589.334364][T21494] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2589.349806][T21498] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, '\x00', 0x1e}}]}, 0x30}}, 0x0) 03:55:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x12000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0xf}}, 0x0) 03:55:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x1a2c0000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2589.389244][T21503] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2589.404418][T21504] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2589.413659][T21507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=21507 comm=syz-executor.0 [ 2590.156894][T21497] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2590.170444][T21497] CPU: 0 PID: 21497 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2590.180916][T21497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2590.190979][T21497] Call Trace: [ 2590.194396][T21497] [ 2590.197329][T21497] dump_stack_lvl+0xda/0x130 [ 2590.202016][T21497] dump_stack+0x15/0x20 [ 2590.206252][T21497] dump_header+0x82/0x2d0 [ 2590.210620][T21497] oom_kill_process+0x33a/0x4c0 [ 2590.215485][T21497] out_of_memory+0x9ca/0xbf0 [ 2590.220090][T21497] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2590.226186][T21497] mem_cgroup_out_of_memory+0x139/0x190 [ 2590.231754][T21497] try_charge_memcg+0x75c/0xd30 [ 2590.236644][T21497] obj_cgroup_charge_pages+0xab/0x130 [ 2590.242078][T21497] __memcg_kmem_charge_page+0x9c/0x170 [ 2590.247543][T21497] __alloc_pages+0x1bb/0x340 [ 2590.252135][T21497] alloc_pages_mpol+0xb1/0x1d0 [ 2590.256910][T21497] alloc_pages+0xe0/0x100 [ 2590.261328][T21497] __vmalloc_node_range+0x6d2/0xea0 [ 2590.266656][T21497] kvmalloc_node+0x121/0x160 [ 2590.271246][T21497] ? xt_alloc_table_info+0x3d/0x80 [ 2590.276361][T21497] xt_alloc_table_info+0x3d/0x80 [ 2590.281305][T21497] do_arpt_set_ctl+0x634/0x13b0 [ 2590.286157][T21497] ? __futex_wait+0x227/0x280 [ 2590.290839][T21497] ? __futex_wake_mark+0x70/0x70 [ 2590.295797][T21497] ? tcp_release_cb+0xfe/0x370 [ 2590.300726][T21497] ? _raw_spin_unlock_bh+0x36/0x40 [ 2590.305869][T21497] nf_setsockopt+0x18d/0x1b0 [ 2590.310458][T21497] ip_setsockopt+0xe6/0x100 [ 2590.315004][T21497] tcp_setsockopt+0x90/0xa0 [ 2590.319504][T21497] sock_common_setsockopt+0x61/0x70 [ 2590.324757][T21497] ? sock_common_recvmsg+0xe0/0xe0 [ 2590.329946][T21497] __sys_setsockopt+0x1d4/0x240 [ 2590.334793][T21497] __x64_sys_setsockopt+0x66/0x80 [ 2590.339809][T21497] do_syscall_64+0x44/0x110 [ 2590.344313][T21497] ? syscall_exit_to_user_mode+0x38/0x140 [ 2590.350030][T21497] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2590.355925][T21497] RIP: 0033:0x7f07d1466ba9 [ 2590.360343][T21497] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2590.380023][T21497] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2590.388542][T21497] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2590.396530][T21497] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2590.404496][T21497] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2590.412497][T21497] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2590.420581][T21497] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2590.428550][T21497] [ 2590.431731][T21497] memory: usage 307200kB, limit 307200kB, failcnt 197885 [ 2590.438849][T21497] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2590.446774][T21497] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2590.454057][T21497] Memory cgroup stats for /syz1: [ 2590.455836][T21497] cache 4096 [ 2590.464181][T21497] rss 8192 [ 2590.467271][T21497] shmem 0 [ 2590.470199][T21497] mapped_file 0 [ 2590.473714][T21497] dirty 0 [ 2590.476658][T21497] writeback 0 [ 2590.479932][T21497] workingset_refault_anon 90052 [ 2590.484776][T21497] workingset_refault_file 314 [ 2590.489569][T21497] swap 544768 [ 2590.492848][T21497] swapcached 8192 [ 2590.496485][T21497] pgpgin 1998845 [ 2590.500093][T21497] pgpgout 1998842 [ 2590.503768][T21497] pgfault 2094084 [ 2590.507479][T21497] pgmajfault 39705 [ 2590.511192][T21497] inactive_anon 8192 [ 2590.516205][T21497] active_anon 0 [ 2590.519669][T21497] inactive_file 0 [ 2590.523309][T21497] active_file 4096 [ 2590.527084][T21497] unevictable 0 [ 2590.530542][T21497] hierarchical_memory_limit 314572800 [ 2590.536027][T21497] hierarchical_memsw_limit 9223372036854771712 [ 2590.542202][T21497] total_cache 4096 [ 2590.545940][T21497] total_rss 8192 [ 2590.549516][T21497] total_shmem 0 [ 2590.552979][T21497] total_mapped_file 0 [ 2590.556975][T21497] total_dirty 0 [ 2590.560456][T21497] total_writeback 0 [ 2590.564257][T21497] total_workingset_refault_anon 90052 [ 2590.569734][T21497] total_workingset_refault_file 314 [ 2590.575007][T21497] total_swap 544768 [ 2590.578949][T21497] total_swapcached 8192 [ 2590.583221][T21497] total_pgpgin 1998845 [ 2590.587334][T21497] total_pgpgout 1998842 [ 2590.591484][T21497] total_pgfault 2094084 [ 2590.595623][T21497] total_pgmajfault 39705 [ 2590.599880][T21497] total_inactive_anon 8192 [ 2590.604287][T21497] total_active_anon 0 [ 2590.608294][T21497] total_inactive_file 0 [ 2590.612442][T21497] total_active_file 4096 [ 2590.616688][T21497] total_unevictable 0 [ 2590.620732][T21497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21496,uid=0 [ 2590.636064][T21497] Memory cgroup out of memory: Killed process 21496 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2590.653542][T21506] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2590.664925][T21506] CPU: 1 PID: 21506 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2590.675440][T21506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2590.685502][T21506] Call Trace: [ 2590.688988][T21506] [ 2590.692016][T21506] dump_stack_lvl+0xda/0x130 [ 2590.696646][T21506] dump_stack+0x15/0x20 [ 2590.700868][T21506] dump_header+0x82/0x2d0 [ 2590.705214][T21506] oom_kill_process+0x33a/0x4c0 [ 2590.710170][T21506] out_of_memory+0x9ca/0xbf0 [ 2590.714834][T21506] mem_cgroup_out_of_memory+0x139/0x190 [ 2590.720377][T21506] try_charge_memcg+0x75c/0xd30 [ 2590.725226][T21506] ? __swap_duplicate+0x29b/0x2b0 [ 2590.730341][T21506] ? radix_tree_lookup+0xf9/0x150 [ 2590.735361][T21506] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2590.741423][T21506] __read_swap_cache_async+0x2f6/0x550 [ 2590.746907][T21506] swap_cluster_readahead+0x27c/0x4c0 [ 2590.752328][T21506] swapin_readahead+0xe9/0x7f0 [ 2590.757241][T21506] ? __filemap_get_folio+0x41a/0x5a0 [ 2590.762577][T21506] ? _raw_spin_unlock+0x26/0x40 [ 2590.767425][T21506] ? swap_cache_get_folio+0x6e/0x200 [ 2590.772717][T21506] do_swap_page+0x4a0/0x1670 [ 2590.777363][T21506] ? __rcu_read_lock+0x35/0x50 [ 2590.782376][T21506] ? pte_offset_map_nolock+0x124/0x1d0 [ 2590.787829][T21506] handle_mm_fault+0xa36/0x2dd0 [ 2590.792727][T21506] exc_page_fault+0x3ff/0x6c0 [ 2590.797601][T21506] asm_exc_page_fault+0x26/0x30 [ 2590.802462][T21506] RIP: 0033:0x7ffbf06ced4b [ 2590.806873][T21506] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2590.826576][T21506] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010202 [ 2590.832663][T21506] RAX: 0000000000000001 RBX: 00007ffbf0833f80 RCX: 0000000000278530 [ 2590.840627][T21506] RDX: 0000000000000102 RSI: 00007ffc3358ca30 RDI: 00007ffbf0833f80 [ 2590.848589][T21506] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2590.856567][T21506] R10: 00007ffc335ae080 R11: 000000000007b21e R12: 0000000000278625 [ 2590.864625][T21506] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 00000000002782e4 [ 2590.872590][T21506] [ 2590.875681][T21506] memory: usage 307200kB, limit 307200kB, failcnt 48614 [ 2590.882744][T21506] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 2590.890652][T21506] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2590.897972][T21506] Memory cgroup stats for /syz4: [ 2590.900520][T21506] cache 12288 [ 2590.908791][T21506] rss 0 [ 2590.911550][T21506] shmem 0 [ 2590.914577][T21506] mapped_file 0 [ 2590.918049][T21506] dirty 0 [ 2590.920973][T21506] writeback 0 [ 2590.924243][T21506] workingset_refault_anon 64220 [ 2590.929119][T21506] workingset_refault_file 309 [ 2590.933790][T21506] swap 4640768 [ 2590.937181][T21506] swapcached 0 [ 2590.940545][T21506] pgpgin 890592 [ 2590.943991][T21506] pgpgout 890589 [ 2590.947546][T21506] pgfault 967289 [ 2590.951082][T21506] pgmajfault 33709 [ 2590.954793][T21506] inactive_anon 0 [ 2590.958514][T21506] active_anon 0 [ 2590.962111][T21506] inactive_file 12288 [ 2590.966083][T21506] active_file 0 [ 2590.969559][T21506] unevictable 0 [ 2590.973064][T21506] hierarchical_memory_limit 314572800 [ 2590.978469][T21506] hierarchical_memsw_limit 9223372036854771712 [ 2590.984611][T21506] total_cache 12288 [ 2590.988422][T21506] total_rss 0 [ 2590.991740][T21506] total_shmem 0 [ 2590.995193][T21506] total_mapped_file 0 [ 2590.999198][T21506] total_dirty 0 [ 2591.002717][T21506] total_writeback 0 [ 2591.006556][T21506] total_workingset_refault_anon 64220 [ 2591.011915][T21506] total_workingset_refault_file 309 [ 2591.017221][T21506] total_swap 4640768 [ 2591.021111][T21506] total_swapcached 0 [ 2591.025025][T21506] total_pgpgin 890592 [ 2591.029025][T21506] total_pgpgout 890589 [ 2591.033068][T21506] total_pgfault 967289 [ 2591.037148][T21506] total_pgmajfault 33709 [ 2591.041522][T21506] total_inactive_anon 0 [ 2591.045762][T21506] total_active_anon 0 [ 2591.049795][T21506] total_inactive_file 12288 [ 2591.054479][T21506] total_active_file 0 [ 2591.058513][T21506] total_unevictable 0 [ 2591.062480][T21506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21506,uid=0 [ 2591.077807][T21506] Memory cgroup out of memory: Killed process 21506 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x20000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x2, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3605, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x3e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x10}}, 0x0) 03:55:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x3, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x25000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x10, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x31410000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x1c}}, 0x0) [ 2591.264602][T21529] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x48000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x25, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2591.374681][T21545] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2591.924205][T21530] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2591.935603][T21530] CPU: 0 PID: 21530 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2591.946216][T21530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2591.956284][T21530] Call Trace: [ 2591.959561][T21530] [ 2591.962495][T21530] dump_stack_lvl+0xda/0x130 [ 2591.967185][T21530] dump_stack+0x15/0x20 [ 2591.971427][T21530] dump_header+0x82/0x2d0 [ 2591.975827][T21530] oom_kill_process+0x33a/0x4c0 [ 2591.980698][T21530] out_of_memory+0x9ca/0xbf0 [ 2591.985296][T21530] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2591.991386][T21530] mem_cgroup_out_of_memory+0x139/0x190 [ 2591.996940][T21530] try_charge_memcg+0x75c/0xd30 [ 2592.001876][T21530] ? __swap_duplicate+0x29b/0x2b0 [ 2592.006973][T21530] ? radix_tree_lookup+0xf9/0x150 [ 2592.012007][T21530] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2592.018114][T21530] __read_swap_cache_async+0x2f6/0x550 [ 2592.023574][T21530] swap_cluster_readahead+0x27c/0x4c0 [ 2592.028954][T21530] swapin_readahead+0xe9/0x7f0 [ 2592.033730][T21530] ? __filemap_get_folio+0x41a/0x5a0 [ 2592.039049][T21530] ? swap_cache_get_folio+0x6e/0x200 [ 2592.044403][T21530] do_swap_page+0x4a0/0x1670 [ 2592.049092][T21530] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2592.054399][T21530] ? __rcu_read_lock+0x35/0x50 [ 2592.059177][T21530] ? pte_offset_map_nolock+0x124/0x1d0 [ 2592.064646][T21530] handle_mm_fault+0xa36/0x2dd0 [ 2592.069590][T21530] exc_page_fault+0x3ff/0x6c0 [ 2592.074287][T21530] asm_exc_page_fault+0x26/0x30 [ 2592.079245][T21530] RIP: 0033:0x7ffbf06cebc4 [ 2592.083670][T21530] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2592.103396][T21530] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2592.109510][T21530] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2592.117483][T21530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2592.125470][T21530] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2592.133447][T21530] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000278d81 [ 2592.141433][T21530] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000278a40 [ 2592.149417][T21530] [ 2592.153167][T21530] memory: usage 307200kB, limit 307200kB, failcnt 48734 [ 2592.160230][T21530] memory+swap: usage 311716kB, limit 9007199254740988kB, failcnt 0 [ 2592.168145][T21530] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2592.175553][T21530] Memory cgroup stats for /syz4: [ 2592.196781][T21530] cache 12288 [ 2592.205000][T21530] rss 8192 [ 2592.208109][T21530] shmem 0 [ 2592.211041][T21530] mapped_file 0 [ 2592.214520][T21530] dirty 0 [ 2592.217519][T21530] writeback 16384 [ 2592.221145][T21530] workingset_refault_anon 64244 [ 2592.226045][T21530] workingset_refault_file 309 [ 2592.230746][T21530] swap 4624384 [ 2592.234110][T21530] swapcached 16384 [ 2592.237897][T21530] pgpgin 890638 [ 2592.241349][T21530] pgpgout 890631 [ 2592.244887][T21530] pgfault 967449 [ 2592.248463][T21530] pgmajfault 33723 [ 2592.252171][T21530] inactive_anon 0 [ 2592.255795][T21530] active_anon 0 [ 2592.259306][T21530] inactive_file 12288 [ 2592.263326][T21530] active_file 0 [ 2592.266802][T21530] unevictable 0 [ 2592.270260][T21530] hierarchical_memory_limit 314572800 [ 2592.275708][T21530] hierarchical_memsw_limit 9223372036854771712 [ 2592.281939][T21530] total_cache 12288 [ 2592.285812][T21530] total_rss 8192 [ 2592.289422][T21530] total_shmem 0 [ 2592.292973][T21530] total_mapped_file 0 [ 2592.296994][T21530] total_dirty 0 [ 2592.300446][T21530] total_writeback 16384 [ 2592.304695][T21530] total_workingset_refault_anon 64244 [ 2592.310116][T21530] total_workingset_refault_file 309 [ 2592.315383][T21530] total_swap 4624384 [ 2592.319301][T21530] total_swapcached 16384 [ 2592.323576][T21530] total_pgpgin 890638 [ 2592.327594][T21530] total_pgpgout 890631 [ 2592.331713][T21530] total_pgfault 967449 [ 2592.335769][T21530] total_pgmajfault 33723 [ 2592.340170][T21530] total_inactive_anon 0 [ 2592.344346][T21530] total_active_anon 0 [ 2592.348366][T21530] total_inactive_file 12288 [ 2592.352862][T21530] total_active_file 0 [ 2592.356931][T21530] total_unevictable 0 [ 2592.360944][T21530] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21530,uid=0 [ 2592.376274][T21530] Memory cgroup out of memory: Killed process 21530 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3606, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x140}}, 0x0) 03:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x4c000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x300, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0xfe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2592.632738][T21554] validate_nla: 7 callbacks suppressed [ 2592.632750][T21554] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2592.650690][T21551] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0xec0}}, 0x0) 03:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x60000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x2, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2592.676941][T21557] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2592.699489][T21562] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x33fe0}}, 0x0) 03:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x3, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2592.745150][T21564] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2592.762110][T21567] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2592.773370][T21568] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2592.830062][T21570] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2593.430742][T21553] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2593.444458][T21553] CPU: 0 PID: 21553 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2593.454920][T21553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2593.464998][T21553] Call Trace: [ 2593.468272][T21553] [ 2593.471249][T21553] dump_stack_lvl+0xda/0x130 [ 2593.475864][T21553] dump_stack+0x15/0x20 [ 2593.480127][T21553] dump_header+0x82/0x2d0 [ 2593.484560][T21553] oom_kill_process+0x33a/0x4c0 [ 2593.489422][T21553] out_of_memory+0x9ca/0xbf0 [ 2593.494106][T21553] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2593.500205][T21553] mem_cgroup_out_of_memory+0x139/0x190 [ 2593.505798][T21553] try_charge_memcg+0x75c/0xd30 [ 2593.510675][T21553] obj_cgroup_charge_pages+0xab/0x130 [ 2593.516058][T21553] __memcg_kmem_charge_page+0x9c/0x170 [ 2593.521533][T21553] __alloc_pages+0x1bb/0x340 [ 2593.526138][T21553] alloc_pages_mpol+0xb1/0x1d0 [ 2593.530952][T21553] alloc_pages+0xe0/0x100 [ 2593.535309][T21553] __vmalloc_node_range+0x6d2/0xea0 [ 2593.540577][T21553] kvmalloc_node+0x121/0x160 [ 2593.545164][T21553] ? xt_alloc_table_info+0x3d/0x80 [ 2593.550290][T21553] xt_alloc_table_info+0x3d/0x80 [ 2593.555225][T21553] do_arpt_set_ctl+0x634/0x13b0 [ 2593.560111][T21553] ? __futex_wait+0x227/0x280 [ 2593.564833][T21553] ? __futex_wake_mark+0x70/0x70 [ 2593.569768][T21553] ? tcp_release_cb+0xfe/0x370 [ 2593.574632][T21553] ? _raw_spin_unlock_bh+0x36/0x40 [ 2593.579776][T21553] nf_setsockopt+0x18d/0x1b0 [ 2593.584463][T21553] ip_setsockopt+0xe6/0x100 [ 2593.588965][T21553] tcp_setsockopt+0x90/0xa0 [ 2593.593462][T21553] sock_common_setsockopt+0x61/0x70 [ 2593.598727][T21553] ? sock_common_recvmsg+0xe0/0xe0 [ 2593.603839][T21553] __sys_setsockopt+0x1d4/0x240 [ 2593.608700][T21553] __x64_sys_setsockopt+0x66/0x80 [ 2593.613772][T21553] do_syscall_64+0x44/0x110 [ 2593.618278][T21553] ? syscall_exit_to_user_mode+0x38/0x140 [ 2593.624049][T21553] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2593.629976][T21553] RIP: 0033:0x7f50c0fa7ba9 [ 2593.634433][T21553] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2593.654035][T21553] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2593.662603][T21553] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2593.670617][T21553] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2593.678596][T21553] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2593.686650][T21553] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2593.694674][T21553] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2593.702644][T21553] [ 2593.705774][T21553] memory: usage 307200kB, limit 307200kB, failcnt 95904 [ 2593.712743][T21553] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2593.720657][T21553] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2593.727965][T21553] Memory cgroup stats for /syz3: [ 2593.728344][T21553] cache 16384 [ 2593.736722][T21553] rss 8192 [ 2593.739739][T21553] shmem 0 [ 2593.742702][T21553] mapped_file 0 [ 2593.746156][T21553] dirty 4096 [ 2593.749364][T21553] writeback 0 [ 2593.752646][T21553] workingset_refault_anon 74106 [ 2593.757520][T21553] workingset_refault_file 320 [ 2593.762252][T21553] swap 1888256 [ 2593.765612][T21553] swapcached 8192 [ 2593.769334][T21553] pgpgin 377089 [ 2593.772783][T21553] pgpgout 377081 [ 2593.776344][T21553] pgfault 560571 [ 2593.779962][T21553] pgmajfault 39246 [ 2593.783719][T21553] inactive_anon 16384 [ 2593.787824][T21553] active_anon 0 [ 2593.791286][T21553] inactive_file 12288 [ 2593.795254][T21553] active_file 4096 [ 2593.799020][T21553] unevictable 0 [ 2593.802600][T21553] hierarchical_memory_limit 314572800 [ 2593.808027][T21553] hierarchical_memsw_limit 9223372036854771712 [ 2593.814177][T21553] total_cache 16384 [ 2593.818013][T21553] total_rss 8192 [ 2593.821672][T21553] total_shmem 0 [ 2593.825232][T21553] total_mapped_file 0 [ 2593.829229][T21553] total_dirty 4096 [ 2593.832951][T21553] total_writeback 0 [ 2593.836835][T21553] total_workingset_refault_anon 74106 [ 2593.842195][T21553] total_workingset_refault_file 320 [ 2593.847398][T21553] total_swap 1888256 [ 2593.851319][T21553] total_swapcached 8192 [ 2593.855460][T21553] total_pgpgin 377089 [ 2593.859550][T21553] total_pgpgout 377081 [ 2593.863668][T21553] total_pgfault 560571 [ 2593.867741][T21553] total_pgmajfault 39246 [ 2593.871972][T21553] total_inactive_anon 16384 [ 2593.876474][T21553] total_active_anon 0 [ 2593.880588][T21553] total_inactive_file 12288 [ 2593.885159][T21553] total_active_file 4096 [ 2593.889465][T21553] total_unevictable 0 [ 2593.893447][T21553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21549,uid=0 [ 2593.908775][T21553] Memory cgroup out of memory: Killed process 21549 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2593.926344][T21559] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2593.939903][T21559] CPU: 1 PID: 21559 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2593.950321][T21559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2593.960465][T21559] Call Trace: [ 2593.963817][T21559] [ 2593.966750][T21559] dump_stack_lvl+0xda/0x130 [ 2593.971434][T21559] dump_stack+0x15/0x20 [ 2593.975650][T21559] dump_header+0x82/0x2d0 [ 2593.980052][T21559] oom_kill_process+0x33a/0x4c0 [ 2593.984976][T21559] out_of_memory+0x9ca/0xbf0 [ 2593.989577][T21559] mem_cgroup_out_of_memory+0x139/0x190 [ 2593.995193][T21559] try_charge_memcg+0x75c/0xd30 [ 2594.000050][T21559] obj_cgroup_charge_pages+0xab/0x130 [ 2594.005503][T21559] __memcg_kmem_charge_page+0x9c/0x170 [ 2594.010960][T21559] __alloc_pages+0x1bb/0x340 [ 2594.015547][T21559] alloc_pages_mpol+0xb1/0x1d0 [ 2594.020306][T21559] alloc_pages+0xe0/0x100 [ 2594.024789][T21559] __vmalloc_node_range+0x6d2/0xea0 [ 2594.030013][T21559] kvmalloc_node+0x121/0x160 [ 2594.034619][T21559] ? xt_alloc_table_info+0x3d/0x80 [ 2594.039824][T21559] xt_alloc_table_info+0x3d/0x80 [ 2594.044756][T21559] do_arpt_set_ctl+0x634/0x13b0 [ 2594.049612][T21559] ? __futex_wait+0x227/0x280 [ 2594.054332][T21559] ? __futex_wake_mark+0x70/0x70 [ 2594.059301][T21559] ? tcp_release_cb+0xfe/0x370 [ 2594.064125][T21559] ? _raw_spin_unlock_bh+0x36/0x40 [ 2594.069349][T21559] nf_setsockopt+0x18d/0x1b0 [ 2594.073940][T21559] ip_setsockopt+0xe6/0x100 [ 2594.078443][T21559] tcp_setsockopt+0x90/0xa0 [ 2594.082939][T21559] sock_common_setsockopt+0x61/0x70 [ 2594.088138][T21559] ? sock_common_recvmsg+0xe0/0xe0 [ 2594.093248][T21559] __sys_setsockopt+0x1d4/0x240 [ 2594.098091][T21559] __x64_sys_setsockopt+0x66/0x80 [ 2594.103116][T21559] do_syscall_64+0x44/0x110 [ 2594.107619][T21559] ? syscall_exit_to_user_mode+0x38/0x140 [ 2594.113333][T21559] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2594.119229][T21559] RIP: 0033:0x7ffbf0714ba9 [ 2594.123636][T21559] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2594.143292][T21559] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2594.151695][T21559] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2594.159751][T21559] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2594.167717][T21559] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2594.175686][T21559] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2594.183665][T21559] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2594.191632][T21559] [ 2594.194762][T21559] memory: usage 307200kB, limit 307200kB, failcnt 49054 [ 2594.201818][T21559] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 2594.209738][T21559] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2594.217031][T21559] Memory cgroup stats for /syz4: [ 2594.217584][T21559] cache 12288 [ 2594.225790][T21559] rss 0 [ 2594.228566][T21559] shmem 0 [ 2594.231580][T21559] mapped_file 0 [ 2594.235032][T21559] dirty 0 [ 2594.237995][T21559] writeback 0 [ 2594.241348][T21559] workingset_refault_anon 64295 [ 2594.246646][T21559] workingset_refault_file 309 [ 2594.251320][T21559] swap 4640768 [ 2594.254680][T21559] swapcached 0 [ 2594.258080][T21559] pgpgin 890711 [ 2594.261528][T21559] pgpgout 890708 [ 2594.265071][T21559] pgfault 967583 [ 2594.268629][T21559] pgmajfault 33747 [ 2594.272342][T21559] inactive_anon 0 [ 2594.275994][T21559] active_anon 0 [ 2594.279630][T21559] inactive_file 12288 [ 2594.283724][T21559] active_file 0 [ 2594.287210][T21559] unevictable 0 [ 2594.290663][T21559] hierarchical_memory_limit 314572800 [ 2594.296163][T21559] hierarchical_memsw_limit 9223372036854771712 [ 2594.302349][T21559] total_cache 12288 [ 2594.306226][T21559] total_rss 0 [ 2594.309540][T21559] total_shmem 0 [ 2594.312989][T21559] total_mapped_file 0 [ 2594.317081][T21559] total_dirty 0 [ 2594.320537][T21559] total_writeback 0 [ 2594.324373][T21559] total_workingset_refault_anon 64295 [ 2594.329790][T21559] total_workingset_refault_file 309 [ 2594.334982][T21559] total_swap 4640768 [ 2594.338913][T21559] total_swapcached 0 [ 2594.342799][T21559] total_pgpgin 890711 [ 2594.346847][T21559] total_pgpgout 890708 [ 2594.350993][T21559] total_pgfault 967583 [ 2594.355155][T21559] total_pgmajfault 33747 [ 2594.359474][T21559] total_inactive_anon 0 [ 2594.363700][T21559] total_active_anon 0 [ 2594.367717][T21559] total_inactive_file 12288 [ 2594.372260][T21559] total_active_file 0 [ 2594.376220][T21559] total_unevictable 0 [ 2594.380207][T21559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21558,uid=0 [ 2594.395695][T21559] Memory cgroup out of memory: Killed process 21558 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3607, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x627d0000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0xfffffdef}}, 0x0) 03:55:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x4, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x2}, 0x0) 03:55:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x5, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x4}, 0x0) 03:55:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x65580000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2594.566445][T21578] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2594.575982][T21579] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2594.602753][T21583] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x68000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x5}, 0x0) [ 2594.650581][T21586] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2594.659992][T21591] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2594.668377][T21590] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2594.710996][T21594] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2595.324578][T21577] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2595.338118][T21577] CPU: 1 PID: 21577 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2595.348556][T21577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2595.358631][T21577] Call Trace: [ 2595.361917][T21577] [ 2595.364879][T21577] dump_stack_lvl+0xda/0x130 [ 2595.369480][T21577] dump_stack+0x15/0x20 [ 2595.373739][T21577] dump_header+0x82/0x2d0 [ 2595.378172][T21577] oom_kill_process+0x33a/0x4c0 [ 2595.383025][T21577] out_of_memory+0x9ca/0xbf0 [ 2595.387640][T21577] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2595.393707][T21577] mem_cgroup_out_of_memory+0x139/0x190 [ 2595.399369][T21577] try_charge_memcg+0x75c/0xd30 [ 2595.404222][T21577] obj_cgroup_charge_pages+0xab/0x130 [ 2595.409593][T21577] __memcg_kmem_charge_page+0x9c/0x170 [ 2595.415287][T21577] __alloc_pages+0x1bb/0x340 [ 2595.423227][T21577] alloc_pages_mpol+0xb1/0x1d0 [ 2595.428008][T21577] alloc_pages+0xe0/0x100 [ 2595.432406][T21577] __vmalloc_node_range+0x6d2/0xea0 [ 2595.437667][T21577] kvmalloc_node+0x121/0x160 [ 2595.442327][T21577] ? xt_alloc_table_info+0x3d/0x80 [ 2595.447461][T21577] xt_alloc_table_info+0x3d/0x80 [ 2595.452395][T21577] do_arpt_set_ctl+0x634/0x13b0 [ 2595.457312][T21577] ? __futex_wait+0x227/0x280 [ 2595.461985][T21577] ? __futex_wake_mark+0x70/0x70 [ 2595.466935][T21577] ? tcp_release_cb+0xfe/0x370 [ 2595.471781][T21577] ? _raw_spin_unlock_bh+0x36/0x40 [ 2595.476924][T21577] nf_setsockopt+0x18d/0x1b0 [ 2595.481515][T21577] ip_setsockopt+0xe6/0x100 [ 2595.486311][T21577] tcp_setsockopt+0x90/0xa0 [ 2595.490885][T21577] sock_common_setsockopt+0x61/0x70 [ 2595.496122][T21577] ? sock_common_recvmsg+0xe0/0xe0 [ 2595.501305][T21577] __sys_setsockopt+0x1d4/0x240 [ 2595.506154][T21577] __x64_sys_setsockopt+0x66/0x80 [ 2595.511175][T21577] do_syscall_64+0x44/0x110 [ 2595.515679][T21577] ? syscall_exit_to_user_mode+0x38/0x140 [ 2595.521420][T21577] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2595.527321][T21577] RIP: 0033:0x7f07d1466ba9 [ 2595.531725][T21577] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2595.551325][T21577] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2595.559752][T21577] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2595.567816][T21577] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2595.575778][T21577] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2595.583770][T21577] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2595.591730][T21577] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2595.599695][T21577] [ 2595.602808][T21577] memory: usage 307184kB, limit 307200kB, failcnt 198071 [ 2595.609843][T21577] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 2595.617840][T21577] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2595.625128][T21577] Memory cgroup stats for /syz1: [ 2595.692443][T21577] cache 4096 [ 2595.700647][T21577] rss 0 [ 2595.703424][T21577] shmem 0 [ 2595.706436][T21577] mapped_file 0 [ 2595.709962][T21577] dirty 0 [ 2595.712926][T21577] writeback 8192 [ 2595.716529][T21577] workingset_refault_anon 90167 [ 2595.721459][T21577] workingset_refault_file 314 [ 2595.726132][T21577] swap 536576 [ 2595.729430][T21577] swapcached 16384 [ 2595.733268][T21577] pgpgin 1999029 [ 2595.736850][T21577] pgpgout 1999024 [ 2595.740479][T21577] pgfault 2094570 [ 2595.744149][T21577] pgmajfault 39771 [ 2595.747890][T21577] inactive_anon 0 [ 2595.751523][T21577] active_anon 0 [ 2595.754976][T21577] inactive_file 0 [ 2595.758632][T21577] active_file 4096 [ 2595.762359][T21577] unevictable 0 [ 2595.765886][T21577] hierarchical_memory_limit 314572800 [ 2595.771262][T21577] hierarchical_memsw_limit 9223372036854771712 [ 2595.777457][T21577] total_cache 4096 [ 2595.781175][T21577] total_rss 0 [ 2595.784456][T21577] total_shmem 0 [ 2595.787989][T21577] total_mapped_file 0 [ 2595.791967][T21577] total_dirty 0 [ 2595.795516][T21577] total_writeback 8192 [ 2595.799603][T21577] total_workingset_refault_anon 90167 [ 2595.805050][T21577] total_workingset_refault_file 314 [ 2595.810257][T21577] total_swap 536576 [ 2595.814102][T21577] total_swapcached 16384 [ 2595.818435][T21577] total_pgpgin 1999029 [ 2595.822488][T21577] total_pgpgout 1999024 [ 2595.827151][T21577] total_pgfault 2094570 [ 2595.831587][T21577] total_pgmajfault 39771 [ 2595.835810][T21577] total_inactive_anon 0 [ 2595.839978][T21577] total_active_anon 0 [ 2595.844041][T21577] total_inactive_file 0 [ 2595.848229][T21577] total_active_file 4096 [ 2595.852462][T21577] total_unevictable 0 [ 2595.856454][T21577] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21575,uid=0 [ 2595.871781][T21577] Memory cgroup out of memory: Killed process 21575 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2595.891956][T21580] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2595.905564][T21580] CPU: 0 PID: 21580 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2595.916026][T21580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2595.926139][T21580] Call Trace: [ 2595.929420][T21580] [ 2595.932387][T21580] dump_stack_lvl+0xda/0x130 [ 2595.937147][T21580] dump_stack+0x15/0x20 [ 2595.941300][T21580] dump_header+0x82/0x2d0 [ 2595.945745][T21580] oom_kill_process+0x33a/0x4c0 [ 2595.950598][T21580] out_of_memory+0x9ca/0xbf0 [ 2595.955212][T21580] mem_cgroup_out_of_memory+0x139/0x190 [ 2595.960918][T21580] try_charge_memcg+0x75c/0xd30 [ 2595.965784][T21580] obj_cgroup_charge_pages+0xab/0x130 [ 2595.971214][T21580] __memcg_kmem_charge_page+0x9c/0x170 [ 2595.976701][T21580] __alloc_pages+0x1bb/0x340 [ 2595.981312][T21580] alloc_pages_mpol+0xb1/0x1d0 [ 2595.986121][T21580] alloc_pages+0xe0/0x100 [ 2595.990444][T21580] __vmalloc_node_range+0x6d2/0xea0 [ 2595.995853][T21580] kvmalloc_node+0x121/0x160 [ 2596.000589][T21580] ? xt_alloc_table_info+0x3d/0x80 [ 2596.005695][T21580] xt_alloc_table_info+0x3d/0x80 [ 2596.010650][T21580] do_arpt_set_ctl+0x634/0x13b0 [ 2596.015531][T21580] ? __futex_wait+0x227/0x280 [ 2596.020204][T21580] ? __futex_wake_mark+0x70/0x70 [ 2596.025209][T21580] ? tcp_release_cb+0xfe/0x370 [ 2596.030040][T21580] ? _raw_spin_unlock_bh+0x36/0x40 [ 2596.035175][T21580] nf_setsockopt+0x18d/0x1b0 [ 2596.039768][T21580] ip_setsockopt+0xe6/0x100 [ 2596.044306][T21580] tcp_setsockopt+0x90/0xa0 [ 2596.048805][T21580] sock_common_setsockopt+0x61/0x70 [ 2596.054053][T21580] ? sock_common_recvmsg+0xe0/0xe0 [ 2596.059278][T21580] __sys_setsockopt+0x1d4/0x240 [ 2596.064120][T21580] __x64_sys_setsockopt+0x66/0x80 [ 2596.069168][T21580] do_syscall_64+0x44/0x110 [ 2596.073731][T21580] ? syscall_exit_to_user_mode+0x38/0x140 [ 2596.079641][T21580] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2596.085527][T21580] RIP: 0033:0x7f50c0fa7ba9 [ 2596.089933][T21580] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2596.110099][T21580] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2596.118523][T21580] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2596.126498][T21580] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2596.134467][T21580] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2596.142556][T21580] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2596.150573][T21580] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2596.158582][T21580] [ 2596.161696][T21580] memory: usage 307200kB, limit 307200kB, failcnt 96097 [ 2596.168693][T21580] memory+swap: usage 309048kB, limit 9007199254740988kB, failcnt 0 [ 2596.176745][T21580] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2596.184118][T21580] Memory cgroup stats for /syz3: [ 2596.185534][T21580] cache 16384 [ 2596.193819][T21580] rss 8192 [ 2596.196959][T21580] shmem 0 [ 2596.199897][T21580] mapped_file 0 [ 2596.203348][T21580] dirty 4096 [ 2596.206586][T21580] writeback 0 [ 2596.209871][T21580] workingset_refault_anon 74147 [ 2596.214714][T21580] workingset_refault_file 320 [ 2596.219420][T21580] swap 1892352 [ 2596.222792][T21580] swapcached 12288 [ 2596.226608][T21580] pgpgin 377153 [ 2596.230103][T21580] pgpgout 377146 [ 2596.233744][T21580] pgfault 560843 [ 2596.237308][T21580] pgmajfault 39259 [ 2596.241020][T21580] inactive_anon 12288 [ 2596.244995][T21580] active_anon 0 [ 2596.248475][T21580] inactive_file 12288 [ 2596.252445][T21580] active_file 4096 [ 2596.256153][T21580] unevictable 0 [ 2596.259635][T21580] hierarchical_memory_limit 314572800 [ 2596.264995][T21580] hierarchical_memsw_limit 9223372036854771712 [ 2596.271177][T21580] total_cache 16384 [ 2596.274984][T21580] total_rss 8192 [ 2596.278589][T21580] total_shmem 0 [ 2596.282044][T21580] total_mapped_file 0 [ 2596.286012][T21580] total_dirty 4096 [ 2596.289857][T21580] total_writeback 0 [ 2596.293656][T21580] total_workingset_refault_anon 74147 [ 2596.299101][T21580] total_workingset_refault_file 320 [ 2596.304298][T21580] total_swap 1892352 [ 2596.308285][T21580] total_swapcached 12288 [ 2596.312520][T21580] total_pgpgin 377153 [ 2596.316538][T21580] total_pgpgout 377146 [ 2596.320601][T21580] total_pgfault 560843 [ 2596.324747][T21580] total_pgmajfault 39259 [ 2596.329009][T21580] total_inactive_anon 12288 [ 2596.333510][T21580] total_active_anon 0 [ 2596.337511][T21580] total_inactive_file 12288 [ 2596.342057][T21580] total_active_file 4096 [ 2596.346278][T21580] total_unevictable 0 [ 2596.350344][T21580] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21572,uid=0 [ 2596.365659][T21580] Memory cgroup out of memory: Killed process 21572 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2596.383397][ T4582] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2596.394522][ T4582] CPU: 1 PID: 4582 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2596.405228][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2596.415282][ T4582] Call Trace: [ 2596.418558][ T4582] [ 2596.421502][ T4582] dump_stack_lvl+0xda/0x130 [ 2596.426091][ T4582] dump_stack+0x15/0x20 [ 2596.430242][ T4582] dump_header+0x82/0x2d0 [ 2596.434627][ T4582] oom_kill_process+0x33a/0x4c0 [ 2596.439553][ T4582] out_of_memory+0x9ca/0xbf0 [ 2596.444139][ T4582] mem_cgroup_out_of_memory+0x139/0x190 [ 2596.449682][ T4582] try_charge_memcg+0x75c/0xd30 [ 2596.454641][ T4582] ? __swap_duplicate+0x29b/0x2b0 [ 2596.459658][ T4582] ? radix_tree_lookup+0xf9/0x150 [ 2596.464739][ T4582] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2596.470843][ T4582] __read_swap_cache_async+0x2f6/0x550 [ 2596.476306][ T4582] swap_cluster_readahead+0x27c/0x4c0 [ 2596.481752][ T4582] swapin_readahead+0xe9/0x7f0 [ 2596.486646][ T4582] ? __filemap_get_folio+0x41a/0x5a0 [ 2596.491936][ T4582] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2596.497649][ T4582] ? swap_cache_get_folio+0x6e/0x200 [ 2596.502925][ T4582] do_swap_page+0x4a0/0x1670 [ 2596.507507][ T4582] ? __rcu_read_lock+0x35/0x50 [ 2596.512372][ T4582] ? pte_offset_map_nolock+0x124/0x1d0 [ 2596.517934][ T4582] handle_mm_fault+0xa36/0x2dd0 [ 2596.522810][ T4582] ? mt_find+0x1d9/0x310 [ 2596.527045][ T4582] exc_page_fault+0x2f7/0x6c0 [ 2596.531734][ T4582] asm_exc_page_fault+0x26/0x30 [ 2596.536583][ T4582] RIP: 0010:__get_user_8+0x11/0x20 [ 2596.541683][ T4582] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2596.561379][ T4582] RSP: 0018:ffffc900006cbdf8 EFLAGS: 00050202 [ 2596.567433][ T4582] RAX: 000055555710bda8 RBX: ffffc900006cbe00 RCX: ffffffff81443e13 [ 2596.575395][ T4582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88813ad91a10 [ 2596.583388][ T4582] RBP: ffffc900006cbec0 R08: 000188813ad91a17 R09: 0000000000000000 [ 2596.591347][ T4582] R10: 0001ffffffffffff R11: 0000000000000002 R12: ffff88813ad91040 [ 2596.599370][ T4582] R13: ffff88813ad91a10 R14: ffffc900006cbf58 R15: ffffc900006cbfd8 [ 2596.607360][ T4582] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2596.613259][ T4582] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2596.619091][ T4582] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 2596.625078][ T4582] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2596.631041][ T4582] ? common_nsleep+0x68/0x80 [ 2596.635758][ T4582] exit_to_user_mode_loop+0xcc/0xe0 [ 2596.640982][ T4582] exit_to_user_mode_prepare+0x6c/0xb0 [ 2596.646462][ T4582] syscall_exit_to_user_mode+0x26/0x140 [ 2596.651997][ T4582] do_syscall_64+0x50/0x110 [ 2596.656499][ T4582] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2596.662387][ T4582] RIP: 0033:0x7ffbf073ff73 [ 2596.666884][ T4582] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 8e 4f 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 2596.686778][ T4582] RSP: 002b:00007ffc3358cc38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 2596.695248][ T4582] RAX: 0000000000000000 RBX: 0000000000003678 RCX: 00007ffbf073ff73 [ 2596.703209][ T4582] RDX: 00007ffc3358cc50 RSI: 0000000000000000 RDI: 0000000000000000 [ 2596.711177][ T4582] RBP: 00007ffc3358ccdc R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2596.719224][ T4582] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2596.727185][ T4582] R13: 000000000027973a R14: 0000000000279720 R15: 0000000000000001 [ 2596.735201][ T4582] [ 2596.738337][ T4582] memory: usage 307200kB, limit 307200kB, failcnt 49297 [ 2596.745348][ T4582] memory+swap: usage 311728kB, limit 9007199254740988kB, failcnt 0 [ 2596.753249][ T4582] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2596.760556][ T4582] Memory cgroup stats for /syz4: [ 2596.761915][ T4582] cache 12288 [ 2596.770160][ T4582] rss 0 [ 2596.772981][ T4582] shmem 0 [ 2596.775989][ T4582] mapped_file 0 [ 2596.779507][ T4582] dirty 0 [ 2596.782486][ T4582] writeback 0 [ 2596.785761][ T4582] workingset_refault_anon 64348 [ 2596.790635][ T4582] workingset_refault_file 309 [ 2596.795379][ T4582] swap 4636672 [ 2596.798846][ T4582] swapcached 4096 [ 2596.802518][ T4582] pgpgin 890786 [ 2596.806037][ T4582] pgpgout 890782 [ 2596.809576][ T4582] pgfault 967721 [ 2596.813108][ T4582] pgmajfault 33776 [ 2596.816826][ T4582] inactive_anon 4096 [ 2596.820757][ T4582] active_anon 0 [ 2596.824207][ T4582] inactive_file 0 [ 2596.827971][ T4582] active_file 12288 [ 2596.831768][ T4582] unevictable 0 [ 2596.835223][ T4582] hierarchical_memory_limit 314572800 [ 2596.840641][ T4582] hierarchical_memsw_limit 9223372036854771712 [ 2596.846807][ T4582] total_cache 12288 [ 2596.850649][ T4582] total_rss 0 [ 2596.853922][ T4582] total_shmem 0 [ 2596.857390][ T4582] total_mapped_file 0 [ 2596.861368][ T4582] total_dirty 0 [ 2596.864821][ T4582] total_writeback 0 [ 2596.868636][ T4582] total_workingset_refault_anon 64348 [ 2596.874045][ T4582] total_workingset_refault_file 309 [ 2596.879334][ T4582] total_swap 4636672 [ 2596.883308][ T4582] total_swapcached 4096 [ 2596.887482][ T4582] total_pgpgin 890786 [ 2596.891507][ T4582] total_pgpgout 890782 [ 2596.895549][ T4582] total_pgfault 967721 [ 2596.899645][ T4582] total_pgmajfault 33776 [ 2596.903935][ T4582] total_inactive_anon 4096 [ 2596.908388][ T4582] total_active_anon 0 [ 2596.912367][ T4582] total_inactive_file 0 [ 2596.916561][ T4582] total_active_file 12288 [ 2596.920882][ T4582] total_unevictable 0 [ 2596.924859][ T4582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21581,uid=0 [ 2596.940218][ T4582] Memory cgroup out of memory: Killed process 21581 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x6c000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x6}, 0x0) 03:55:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3608, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x74000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x7}, 0x0) [ 2597.097356][T21599] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x7a000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x8}, 0x0) 03:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x81000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x9}, 0x0) 03:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x88470000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2597.205725][T21616] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0xb}, 0x0) [ 2597.961686][T21604] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2597.975206][T21604] CPU: 1 PID: 21604 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2597.985625][T21604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2597.995842][T21604] Call Trace: [ 2597.999168][T21604] [ 2598.002173][T21604] dump_stack_lvl+0xda/0x130 [ 2598.006782][T21604] dump_stack+0x15/0x20 [ 2598.010992][T21604] dump_header+0x82/0x2d0 [ 2598.015476][T21604] oom_kill_process+0x33a/0x4c0 [ 2598.020373][T21604] out_of_memory+0x9ca/0xbf0 [ 2598.024989][T21604] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2598.031266][T21604] mem_cgroup_out_of_memory+0x139/0x190 [ 2598.036863][T21604] try_charge_memcg+0x75c/0xd30 [ 2598.041763][T21604] obj_cgroup_charge_pages+0xab/0x130 [ 2598.047152][T21604] __memcg_kmem_charge_page+0x9c/0x170 [ 2598.052680][T21604] __alloc_pages+0x1bb/0x340 [ 2598.057335][T21604] alloc_pages_mpol+0xb1/0x1d0 [ 2598.062113][T21604] alloc_pages+0xe0/0x100 [ 2598.066498][T21604] __vmalloc_node_range+0x6d2/0xea0 [ 2598.071720][T21604] kvmalloc_node+0x121/0x160 [ 2598.076304][T21604] ? xt_alloc_table_info+0x3d/0x80 [ 2598.081421][T21604] xt_alloc_table_info+0x3d/0x80 [ 2598.086403][T21604] do_arpt_set_ctl+0x634/0x13b0 [ 2598.091278][T21604] ? __futex_wait+0x227/0x280 [ 2598.096026][T21604] ? __futex_wake_mark+0x70/0x70 [ 2598.100953][T21604] ? tcp_release_cb+0xfe/0x370 [ 2598.105708][T21604] ? _raw_spin_unlock_bh+0x36/0x40 [ 2598.110820][T21604] nf_setsockopt+0x18d/0x1b0 [ 2598.115426][T21604] ip_setsockopt+0xe6/0x100 [ 2598.120624][T21604] tcp_setsockopt+0x90/0xa0 [ 2598.125121][T21604] sock_common_setsockopt+0x61/0x70 [ 2598.130342][T21604] ? sock_common_recvmsg+0xe0/0xe0 [ 2598.135462][T21604] __sys_setsockopt+0x1d4/0x240 [ 2598.140307][T21604] __x64_sys_setsockopt+0x66/0x80 [ 2598.145426][T21604] do_syscall_64+0x44/0x110 [ 2598.149925][T21604] ? syscall_exit_to_user_mode+0x38/0x140 [ 2598.155745][T21604] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2598.161648][T21604] RIP: 0033:0x7f07d1466ba9 [ 2598.166086][T21604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2598.185687][T21604] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2598.194111][T21604] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2598.202136][T21604] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2598.210101][T21604] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2598.218185][T21604] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2598.226183][T21604] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2598.234143][T21604] [ 2598.237284][T21604] memory: usage 307200kB, limit 307200kB, failcnt 198200 [ 2598.244325][T21604] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2598.252432][T21604] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 03:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x88480000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2598.259859][T21604] Memory cgroup stats for /syz1: [ 2598.260042][T21604] cache 4096 [ 2598.268264][T21604] rss 0 [ 2598.271028][T21604] shmem 0 [ 2598.273988][T21604] mapped_file 0 [ 2598.277512][T21604] dirty 0 [ 2598.280528][T21604] writeback 0 [ 2598.283807][T21604] workingset_refault_anon 90194 [ 2598.288904][T21604] workingset_refault_file 314 [ 2598.293606][T21604] swap 552960 [ 2598.296917][T21604] swapcached 0 [ 2598.300365][T21604] pgpgin 1999079 [ 2598.303930][T21604] pgpgout 1999078 [ 2598.307631][T21604] pgfault 2094736 [ 2598.311474][T21604] pgmajfault 39784 [ 2598.315212][T21604] inactive_anon 0 [ 2598.319017][T21604] active_anon 0 [ 2598.322511][T21604] inactive_file 4096 [ 2598.326440][T21604] active_file 0 [ 2598.329964][T21604] unevictable 0 [ 2598.333413][T21604] hierarchical_memory_limit 314572800 [ 2598.338909][T21604] hierarchical_memsw_limit 9223372036854771712 [ 2598.341861][T21628] validate_nla: 11 callbacks suppressed [ 2598.341873][T21628] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2598.345081][T21604] total_cache 4096 [ 2598.362464][T21604] total_rss 0 [ 2598.365787][T21604] total_shmem 0 [ 2598.369271][T21604] total_mapped_file 0 [ 2598.373243][T21604] total_dirty 0 [ 2598.376710][T21604] total_writeback 0 [ 2598.380507][T21604] total_workingset_refault_anon 90194 [ 2598.385940][T21604] total_workingset_refault_file 314 [ 2598.391137][T21604] total_swap 552960 [ 2598.394932][T21604] total_swapcached 0 [ 2598.398827][T21604] total_pgpgin 1999079 [ 2598.402885][T21604] total_pgpgout 1999078 [ 2598.407071][T21604] total_pgfault 2094736 [ 2598.411210][T21604] total_pgmajfault 39784 [ 2598.415426][T21604] total_inactive_anon 0 [ 2598.419589][T21604] total_active_anon 0 [ 2598.423563][T21604] total_inactive_file 4096 [ 2598.428009][T21604] total_active_file 0 [ 2598.431981][T21604] total_unevictable 0 [ 2598.435947][T21604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21603,uid=0 [ 2598.451241][T21604] Memory cgroup out of memory: Killed process 21603 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2598.534480][T21609] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2598.548056][T21609] CPU: 0 PID: 21609 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2598.558477][T21609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2598.568528][T21609] Call Trace: [ 2598.571807][T21609] [ 2598.574742][T21609] dump_stack_lvl+0xda/0x130 [ 2598.579498][T21609] dump_stack+0x15/0x20 [ 2598.583667][T21609] dump_header+0x82/0x2d0 [ 2598.588086][T21609] oom_kill_process+0x33a/0x4c0 [ 2598.592957][T21609] out_of_memory+0x9ca/0xbf0 [ 2598.597722][T21609] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2598.603885][T21609] mem_cgroup_out_of_memory+0x139/0x190 [ 2598.609530][T21609] try_charge_memcg+0x75c/0xd30 [ 2598.614440][T21609] obj_cgroup_charge_pages+0xab/0x130 [ 2598.619824][T21609] __memcg_kmem_charge_page+0x9c/0x170 [ 2598.625307][T21609] __alloc_pages+0x1bb/0x340 [ 2598.629940][T21609] alloc_pages_mpol+0xb1/0x1d0 [ 2598.634742][T21609] alloc_pages+0xe0/0x100 [ 2598.639094][T21609] __vmalloc_node_range+0x6d2/0xea0 [ 2598.644313][T21609] kvmalloc_node+0x121/0x160 [ 2598.648915][T21609] ? xt_alloc_table_info+0x3d/0x80 [ 2598.654038][T21609] xt_alloc_table_info+0x3d/0x80 [ 2598.658987][T21609] do_arpt_set_ctl+0x634/0x13b0 [ 2598.663855][T21609] ? __futex_wait+0x227/0x280 [ 2598.668537][T21609] ? __futex_wake_mark+0x70/0x70 [ 2598.673498][T21609] ? tcp_release_cb+0xfe/0x370 [ 2598.678300][T21609] ? _raw_spin_unlock_bh+0x36/0x40 [ 2598.683405][T21609] nf_setsockopt+0x18d/0x1b0 [ 2598.688044][T21609] ip_setsockopt+0xe6/0x100 [ 2598.692536][T21609] tcp_setsockopt+0x90/0xa0 [ 2598.697029][T21609] sock_common_setsockopt+0x61/0x70 [ 2598.702360][T21609] ? sock_common_recvmsg+0xe0/0xe0 [ 2598.707575][T21609] __sys_setsockopt+0x1d4/0x240 [ 2598.712430][T21609] __x64_sys_setsockopt+0x66/0x80 [ 2598.717436][T21609] do_syscall_64+0x44/0x110 [ 2598.721957][T21609] ? syscall_exit_to_user_mode+0x38/0x140 [ 2598.727666][T21609] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2598.733575][T21609] RIP: 0033:0x7ffbf0714ba9 [ 2598.737972][T21609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2598.757607][T21609] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2598.766023][T21609] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2598.774046][T21609] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2598.782012][T21609] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2598.789971][T21609] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2598.798010][T21609] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2598.805974][T21609] [ 2598.809041][T21609] memory: usage 307200kB, limit 307200kB, failcnt 49532 [ 2598.816322][T21609] memory+swap: usage 311720kB, limit 9007199254740988kB, failcnt 0 [ 2598.824364][T21609] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2598.831705][T21609] Memory cgroup stats for /syz4: [ 2598.831848][T21609] cache 12288 [ 2598.840058][T21609] rss 0 [ 2598.842801][T21609] shmem 0 [ 2598.845716][T21609] mapped_file 0 [ 2598.849189][T21609] dirty 0 [ 2598.852365][T21609] writeback 8192 [ 2598.855901][T21609] workingset_refault_anon 64380 [ 2598.860770][T21609] workingset_refault_file 309 [ 2598.865452][T21609] swap 4632576 [ 2598.868848][T21609] swapcached 8192 [ 2598.872471][T21609] pgpgin 890840 [ 2598.875908][T21609] pgpgout 890835 [ 2598.879537][T21609] pgfault 967955 [ 2598.883074][T21609] pgmajfault 33791 [ 2598.886798][T21609] inactive_anon 8192 [ 2598.890754][T21609] active_anon 0 [ 2598.894198][T21609] inactive_file 0 [ 2598.897837][T21609] active_file 12288 [ 2598.901657][T21609] unevictable 0 [ 2598.905148][T21609] hierarchical_memory_limit 314572800 [ 2598.910524][T21609] hierarchical_memsw_limit 9223372036854771712 [ 2598.916960][T21609] total_cache 12288 [ 2598.920825][T21609] total_rss 0 [ 2598.924161][T21609] total_shmem 0 [ 2598.927655][T21609] total_mapped_file 0 [ 2598.931640][T21609] total_dirty 0 [ 2598.935084][T21609] total_writeback 8192 [ 2598.939183][T21609] total_workingset_refault_anon 64380 [ 2598.944549][T21609] total_workingset_refault_file 309 [ 2598.949856][T21609] total_swap 4632576 [ 2598.953748][T21609] total_swapcached 8192 [ 2598.957918][T21609] total_pgpgin 890840 [ 2598.961891][T21609] total_pgpgout 890835 [ 2598.965933][T21609] total_pgfault 967955 [ 2598.970005][T21609] total_pgmajfault 33791 [ 2598.974239][T21609] total_inactive_anon 8192 [ 2598.978706][T21609] total_active_anon 0 03:55:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2598.982743][T21609] total_inactive_file 0 [ 2598.986981][T21609] total_active_file 12288 [ 2598.991302][T21609] total_unevictable 0 [ 2598.995368][T21609] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21606,uid=0 [ 2599.010607][T21609] Memory cgroup out of memory: Killed process 21606 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3609, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x8, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0xf}, 0x0) 03:55:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x88a8ffff, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xeaffffff, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2599.231812][T21633] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2599.254529][T21637] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2599.262772][T21638] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x12}, 0x0) 03:55:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x9, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xf0ffffff, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2599.296647][T21642] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2599.327531][T21646] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x15}, 0x0) 03:55:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xa, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2599.348285][T21647] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2599.359092][T21649] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2599.387909][T21651] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2599.420744][T21653] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2600.129617][T21639] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2600.140953][T21639] CPU: 0 PID: 21639 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2600.151386][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2600.161476][T21639] Call Trace: [ 2600.164755][T21639] [ 2600.167675][T21639] dump_stack_lvl+0xda/0x130 [ 2600.172319][T21639] dump_stack+0x15/0x20 [ 2600.176514][T21639] dump_header+0x82/0x2d0 [ 2600.180852][T21639] oom_kill_process+0x33a/0x4c0 [ 2600.185700][T21639] out_of_memory+0x9ca/0xbf0 [ 2600.190329][T21639] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2600.196396][T21639] mem_cgroup_out_of_memory+0x139/0x190 [ 2600.202008][T21639] try_charge_memcg+0x75c/0xd30 [ 2600.206909][T21639] ? __swap_duplicate+0x29b/0x2b0 [ 2600.212062][T21639] ? radix_tree_lookup+0xf9/0x150 [ 2600.217098][T21639] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2600.223193][T21639] __read_swap_cache_async+0x2f6/0x550 [ 2600.228688][T21639] swap_cluster_readahead+0x27c/0x4c0 [ 2600.234063][T21639] swapin_readahead+0xe9/0x7f0 [ 2600.238914][T21639] ? __filemap_get_folio+0x41a/0x5a0 [ 2600.244201][T21639] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2600.249890][T21639] ? swap_cache_get_folio+0x6e/0x200 [ 2600.255235][T21639] do_swap_page+0x4a0/0x1670 [ 2600.259831][T21639] ? __rcu_read_lock+0x35/0x50 [ 2600.264591][T21639] ? pte_offset_map_nolock+0x124/0x1d0 [ 2600.270066][T21639] handle_mm_fault+0xa36/0x2dd0 [ 2600.275000][T21639] ? mt_find+0x1d9/0x310 03:55:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x16}, 0x0) [ 2600.279315][T21639] exc_page_fault+0x2f7/0x6c0 [ 2600.284082][T21639] asm_exc_page_fault+0x26/0x30 [ 2600.289025][T21639] RIP: 0010:__get_user_8+0x11/0x20 [ 2600.294250][T21639] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2600.313953][T21639] RSP: 0018:ffffc90000abfdf8 EFLAGS: 00050202 [ 2600.320133][T21639] RAX: 000055555710bda8 RBX: ffffc90000abfe00 RCX: ffffffff81443e13 [ 2600.324836][T21655] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2600.328094][T21639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103a9eb50 [ 2600.344140][T21639] RBP: ffffc90000abfec0 R08: 0001888103a9eb57 R09: 0000000000000000 [ 2600.352194][T21639] R10: 0001ffffffffffff R11: 000000000000b67f R12: ffff888103a9e180 [ 2600.360261][T21639] R13: ffff888103a9eb50 R14: ffffc90000abff58 R15: ffffc90000abffd8 [ 2600.368255][T21639] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2600.374234][T21639] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2600.379959][T21639] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 2600.385967][T21639] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2600.391911][T21639] ? common_nsleep+0x68/0x80 [ 2600.396487][T21639] exit_to_user_mode_loop+0xcc/0xe0 [ 2600.401678][T21639] exit_to_user_mode_prepare+0x6c/0xb0 [ 2600.407181][T21639] syscall_exit_to_user_mode+0x26/0x140 [ 2600.412727][T21639] do_syscall_64+0x50/0x110 [ 2600.417219][T21639] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2600.423101][T21639] RIP: 0033:0x7ffbf073ffb5 [ 2600.427573][T21639] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2600.447395][T21639] RSP: 002b:00007ffc3358c9e0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2600.455803][T21639] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 00007ffbf073ffb5 [ 2600.463761][T21639] RDX: 00007ffc3358ca20 RSI: 0000000000000000 RDI: 0000000000000000 [ 2600.471716][T21639] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2600.479669][T21639] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027acb9 [ 2600.487729][T21639] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000027a978 [ 2600.495690][T21639] [ 2600.498878][T21639] memory: usage 307200kB, limit 307200kB, failcnt 49672 [ 2600.505846][T21639] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 2600.513941][T21639] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2600.521242][T21639] Memory cgroup stats for /syz4: [ 2600.521662][T21639] cache 12288 [ 2600.529909][T21639] rss 0 [ 2600.532671][T21639] shmem 0 [ 2600.535619][T21639] mapped_file 0 [ 2600.539109][T21639] dirty 0 [ 2600.542043][T21639] writeback 0 [ 2600.545301][T21639] workingset_refault_anon 64405 [ 2600.550302][T21639] workingset_refault_file 309 [ 2600.554952][T21639] swap 4640768 [ 2600.558406][T21639] swapcached 0 [ 2600.561763][T21639] pgpgin 890887 [ 2600.565230][T21639] pgpgout 890884 [ 2600.568835][T21639] pgfault 968144 [ 2600.572406][T21639] pgmajfault 33799 [ 2600.576099][T21639] inactive_anon 0 [ 2600.579775][T21639] active_anon 0 [ 2600.583269][T21639] inactive_file 8192 [ 2600.587221][T21639] active_file 4096 [ 2600.591007][T21639] unevictable 0 [ 2600.594439][T21639] hierarchical_memory_limit 314572800 [ 2600.599827][T21639] hierarchical_memsw_limit 9223372036854771712 [ 2600.606104][T21639] total_cache 12288 [ 2600.609983][T21639] total_rss 0 [ 2600.613314][T21639] total_shmem 0 [ 2600.616773][T21639] total_mapped_file 0 [ 2600.620748][T21639] total_dirty 0 [ 2600.624210][T21639] total_writeback 0 [ 2600.628047][T21639] total_workingset_refault_anon 64405 [ 2600.633525][T21639] total_workingset_refault_file 309 [ 2600.638780][T21639] total_swap 4640768 [ 2600.642743][T21639] total_swapcached 0 [ 2600.646638][T21639] total_pgpgin 890887 [ 2600.650668][T21639] total_pgpgout 890884 [ 2600.654705][T21639] total_pgfault 968144 [ 2600.658781][T21639] total_pgmajfault 33799 [ 2600.663002][T21639] total_inactive_anon 0 [ 2600.667231][T21639] total_active_anon 0 [ 2600.671203][T21639] total_inactive_file 8192 [ 2600.675632][T21639] total_active_file 4096 [ 2600.679964][T21639] total_unevictable 0 [ 2600.683927][T21639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21639,uid=0 [ 2600.699330][T21639] Memory cgroup out of memory: Killed process 21639 (syz-executor.4) total-vm:46300kB, anon-rss:324kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xb, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x360a, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xfeffffff, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1e}, 0x0) 03:55:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x300}, 0x0) [ 2600.873426][T21660] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2600.886131][T21662] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xc, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xffffa888, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2600.923554][T21667] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x2}, 0x0) 03:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xffffff7f, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xffffffea, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2600.970054][T21673] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xd, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2601.058837][T21681] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2601.737597][T21659] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2601.748947][T21659] CPU: 1 PID: 21659 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2601.759386][T21659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2601.769445][T21659] Call Trace: [ 2601.772725][T21659] [ 2601.775732][T21659] dump_stack_lvl+0xda/0x130 [ 2601.780340][T21659] dump_stack+0x15/0x20 [ 2601.784532][T21659] dump_header+0x82/0x2d0 [ 2601.789000][T21659] oom_kill_process+0x33a/0x4c0 [ 2601.793985][T21659] out_of_memory+0x9ca/0xbf0 [ 2601.798581][T21659] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2601.804665][T21659] mem_cgroup_out_of_memory+0x139/0x190 [ 2601.810285][T21659] try_charge_memcg+0x75c/0xd30 [ 2601.815157][T21659] ? __swap_duplicate+0x29b/0x2b0 [ 2601.820200][T21659] ? radix_tree_lookup+0xf9/0x150 [ 2601.825226][T21659] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2601.831307][T21659] __read_swap_cache_async+0x2f6/0x550 [ 2601.836772][T21659] swap_cluster_readahead+0x27c/0x4c0 [ 2601.842159][T21659] swapin_readahead+0xe9/0x7f0 [ 2601.846965][T21659] ? __filemap_get_folio+0x41a/0x5a0 [ 2601.852688][T21659] ? swap_cache_get_folio+0x6e/0x200 [ 2601.858022][T21659] do_swap_page+0x4a0/0x1670 [ 2601.862596][T21659] ? asm_exc_page_fault+0x26/0x30 [ 2601.867617][T21659] ? __rcu_read_lock+0x35/0x50 [ 2601.872412][T21659] ? pte_offset_map_nolock+0x124/0x1d0 [ 2601.877917][T21659] handle_mm_fault+0xa36/0x2dd0 [ 2601.882849][T21659] exc_page_fault+0x3ff/0x6c0 [ 2601.887528][T21659] asm_exc_page_fault+0x26/0x30 [ 2601.892364][T21659] RIP: 0033:0x7f07d1420d52 [ 2601.896761][T21659] Code: ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 80 3d be f3 13 00 00 <48> 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 00 00 eb bd 48 89 f1 [ 2601.916491][T21659] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2601.922560][T21659] RAX: 0000000000000001 RBX: 00007f07d1585f80 RCX: 000000000027b028 [ 2601.930547][T21659] RDX: 00000000000002c8 RSI: 00007fffaf03b8f0 RDI: 00007f07d1585f80 [ 2601.938506][T21659] RBP: 00007f07d1587980 R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2601.946535][T21659] R10: 00007fffaf111080 R11: 000000000007ba0a R12: 000000000027b2ef [ 2601.954597][T21659] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027afae [ 2601.962662][T21659] [ 2601.965803][T21659] memory: usage 307200kB, limit 307200kB, failcnt 198679 [ 2601.973000][T21659] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2601.980958][T21659] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2601.988364][T21659] Memory cgroup stats for /syz1: [ 2601.988507][T21659] cache 4096 [ 2601.996804][T21659] rss 8192 [ 2601.999819][T21659] shmem 0 [ 2602.002850][T21659] mapped_file 0 [ 2602.006483][T21659] dirty 0 [ 2602.009546][T21659] writeback 4096 [ 2602.013125][T21659] workingset_refault_anon 90259 [ 2602.017995][T21659] workingset_refault_file 314 [ 2602.022686][T21659] swap 544768 [ 2602.025948][T21659] swapcached 8192 [ 2602.029705][T21659] pgpgin 1999190 [ 2602.033350][T21659] pgpgout 1999187 [ 2602.037098][T21659] pgfault 2095084 [ 2602.040817][T21659] pgmajfault 39808 [ 2602.044557][T21659] inactive_anon 0 [ 2602.048287][T21659] active_anon 0 [ 2602.051730][T21659] inactive_file 0 [ 2602.055379][T21659] active_file 4096 [ 2602.059127][T21659] unevictable 0 [ 2602.062575][T21659] hierarchical_memory_limit 314572800 [ 2602.067950][T21659] hierarchical_memsw_limit 9223372036854771712 [ 2602.074152][T21659] total_cache 4096 [ 2602.077865][T21659] total_rss 8192 [ 2602.081405][T21659] total_shmem 0 [ 2602.084856][T21659] total_mapped_file 0 [ 2602.088863][T21659] total_dirty 0 [ 2602.092310][T21659] total_writeback 4096 [ 2602.096374][T21659] total_workingset_refault_anon 90259 [ 2602.101750][T21659] total_workingset_refault_file 314 [ 2602.107015][T21659] total_swap 544768 [ 2602.110800][T21659] total_swapcached 8192 [ 2602.114971][T21659] total_pgpgin 1999190 [ 2602.119042][T21659] total_pgpgout 1999187 [ 2602.123185][T21659] total_pgfault 2095084 [ 2602.127363][T21659] total_pgmajfault 39808 [ 2602.131589][T21659] total_inactive_anon 0 [ 2602.135718][T21659] total_active_anon 0 [ 2602.139696][T21659] total_inactive_file 0 [ 2602.143840][T21659] total_active_file 4096 [ 2602.148080][T21659] total_unevictable 0 [ 2602.152144][T21659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21659,uid=0 [ 2602.167456][T21659] Memory cgroup out of memory: Killed process 21659 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2602.185315][T21668] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2602.196709][T21668] CPU: 1 PID: 21668 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2602.207168][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2602.217293][T21668] Call Trace: [ 2602.220569][T21668] [ 2602.223496][T21668] dump_stack_lvl+0xda/0x130 [ 2602.228297][T21668] dump_stack+0x15/0x20 [ 2602.232546][T21668] dump_header+0x82/0x2d0 [ 2602.236955][T21668] oom_kill_process+0x33a/0x4c0 [ 2602.241831][T21668] out_of_memory+0x9ca/0xbf0 [ 2602.246433][T21668] mem_cgroup_out_of_memory+0x139/0x190 [ 2602.252015][T21668] try_charge_memcg+0x75c/0xd30 [ 2602.256923][T21668] ? __swap_duplicate+0x29b/0x2b0 [ 2602.262056][T21668] ? radix_tree_lookup+0xf9/0x150 [ 2602.267062][T21668] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2602.273114][T21668] __read_swap_cache_async+0x2f6/0x550 [ 2602.278562][T21668] swap_cluster_readahead+0x27c/0x4c0 [ 2602.283954][T21668] swapin_readahead+0xe9/0x7f0 [ 2602.288728][T21668] ? __filemap_get_folio+0x41a/0x5a0 [ 2602.294004][T21668] ? __perf_event_task_sched_in+0x769/0x790 [ 2602.299880][T21668] ? swap_cache_get_folio+0x6e/0x200 [ 2602.305146][T21668] do_swap_page+0x4a0/0x1670 [ 2602.309721][T21668] ? __rcu_read_lock+0x35/0x50 [ 2602.314470][T21668] ? pte_offset_map_nolock+0x124/0x1d0 [ 2602.319961][T21668] handle_mm_fault+0xa36/0x2dd0 [ 2602.324804][T21668] ? mt_find+0x1d9/0x310 [ 2602.329032][T21668] exc_page_fault+0x2f7/0x6c0 [ 2602.333694][T21668] asm_exc_page_fault+0x26/0x30 [ 2602.338535][T21668] RIP: 0010:__get_user_8+0x11/0x20 [ 2602.343720][T21668] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2602.363473][T21668] RSP: 0018:ffffc90000d37e38 EFLAGS: 00050202 [ 2602.369624][T21668] RAX: 000055555710bda8 RBX: ffffc90000d37e40 RCX: ffffffff81443e13 [ 2602.377762][T21668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881003cdb10 [ 2602.385727][T21668] RBP: ffffc90000d37ef8 R08: 00018881003cdb17 R09: 0000000000000000 [ 2602.393765][T21668] R10: 0001ffffffffffff R11: 00018881003cd7d0 R12: ffff8881003cd140 [ 2602.401714][T21668] R13: ffff8881003cdb10 R14: ffffc90000d37f58 R15: ffffc90000d37fd8 [ 2602.409667][T21668] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2602.415661][T21668] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2602.421454][T21668] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2602.427329][T21668] exit_to_user_mode_loop+0xcc/0xe0 [ 2602.432508][T21668] exit_to_user_mode_prepare+0x6c/0xb0 [ 2602.438003][T21668] irqentry_exit_to_user_mode+0x9/0x20 [ 2602.443520][T21668] irqentry_exit+0x12/0x40 [ 2602.447917][T21668] asm_exc_page_fault+0x26/0x30 [ 2602.452824][T21668] RIP: 0033:0x7ffbf06ced4b [ 2602.457220][T21668] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2602.476868][T21668] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010202 [ 2602.482954][T21668] RAX: 0000000000000001 RBX: 00007ffbf0833f80 RCX: 000000000027b028 [ 2602.490918][T21668] RDX: 000000000000030e RSI: 00007ffc3358ca30 RDI: 00007ffbf0833f80 [ 2602.498962][T21668] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2602.506998][T21668] R10: 00007ffc335ae080 R11: 000000000007ba18 R12: 000000000027b335 [ 2602.514950][T21668] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000027aff4 [ 2602.522937][T21668] [ 2602.526126][T21668] memory: usage 307200kB, limit 307200kB, failcnt 49988 [ 2602.533176][T21668] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2602.541156][T21668] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2602.548545][T21668] Memory cgroup stats for /syz4: [ 2602.548717][T21668] cache 12288 [ 2602.557106][T21668] rss 8192 [ 2602.560145][T21668] shmem 0 [ 2602.563057][T21668] mapped_file 0 [ 2602.566574][T21668] dirty 0 [ 2602.569623][T21668] writeback 0 [ 2602.572950][T21668] workingset_refault_anon 64445 [ 2602.577830][T21668] workingset_refault_file 309 [ 2602.582559][T21668] swap 4632576 [ 2602.585960][T21668] swapcached 0 [ 2602.589416][T21668] pgpgin 890949 [ 2602.592903][T21668] pgpgout 890944 [ 2602.596484][T21668] pgfault 968356 [ 2602.600017][T21668] pgmajfault 33812 [ 2602.603711][T21668] inactive_anon 8192 [ 2602.607628][T21668] active_anon 0 [ 2602.611129][T21668] inactive_file 12288 [ 2602.615128][T21668] active_file 0 [ 2602.618626][T21668] unevictable 0 [ 2602.622227][T21668] hierarchical_memory_limit 314572800 [ 2602.627650][T21668] hierarchical_memsw_limit 9223372036854771712 [ 2602.633838][T21668] total_cache 12288 [ 2602.637648][T21668] total_rss 8192 [ 2602.641177][T21668] total_shmem 0 [ 2602.644622][T21668] total_mapped_file 0 [ 2602.648600][T21668] total_dirty 0 [ 2602.652071][T21668] total_writeback 0 [ 2602.655900][T21668] total_workingset_refault_anon 64445 [ 2602.661342][T21668] total_workingset_refault_file 309 [ 2602.666539][T21668] total_swap 4632576 [ 2602.670576][T21668] total_swapcached 0 [ 2602.674497][T21668] total_pgpgin 890949 [ 2602.678514][T21668] total_pgpgout 890944 [ 2602.682597][T21668] total_pgfault 968356 [ 2602.686690][T21668] total_pgmajfault 33812 [ 2602.690974][T21668] total_inactive_anon 8192 [ 2602.695427][T21668] total_active_anon 0 [ 2602.699431][T21668] total_inactive_file 12288 [ 2602.703969][T21668] total_active_file 0 [ 2602.708029][T21668] total_unevictable 0 [ 2602.712077][T21668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21668,uid=0 [ 2602.727503][T21668] Memory cgroup out of memory: Killed process 21668 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2602.757849][T21665] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2602.771408][T21665] CPU: 0 PID: 21665 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2602.782044][T21665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2602.792097][T21665] Call Trace: [ 2602.795369][T21665] [ 2602.798375][T21665] dump_stack_lvl+0xda/0x130 [ 2602.802993][T21665] dump_stack+0x15/0x20 [ 2602.807160][T21665] dump_header+0x82/0x2d0 [ 2602.811588][T21665] oom_kill_process+0x33a/0x4c0 [ 2602.816478][T21665] out_of_memory+0x9ca/0xbf0 [ 2602.821071][T21665] mem_cgroup_out_of_memory+0x139/0x190 [ 2602.826667][T21665] try_charge_memcg+0x75c/0xd30 [ 2602.831544][T21665] obj_cgroup_charge_pages+0xab/0x130 [ 2602.836938][T21665] __memcg_kmem_charge_page+0x9c/0x170 [ 2602.842457][T21665] __alloc_pages+0x1bb/0x340 [ 2602.847083][T21665] alloc_pages_mpol+0xb1/0x1d0 [ 2602.851841][T21665] alloc_pages+0xe0/0x100 [ 2602.856162][T21665] __vmalloc_node_range+0x6d2/0xea0 [ 2602.861364][T21665] kvmalloc_node+0x121/0x160 [ 2602.865947][T21665] ? xt_alloc_table_info+0x3d/0x80 [ 2602.871053][T21665] xt_alloc_table_info+0x3d/0x80 [ 2602.876158][T21665] do_arpt_set_ctl+0x634/0x13b0 [ 2602.881004][T21665] ? __futex_wait+0x227/0x280 [ 2602.885712][T21665] ? __futex_wake_mark+0x70/0x70 [ 2602.890685][T21665] ? tcp_release_cb+0xfe/0x370 [ 2602.895449][T21665] ? _raw_spin_unlock_bh+0x36/0x40 [ 2602.900589][T21665] nf_setsockopt+0x18d/0x1b0 [ 2602.905177][T21665] ip_setsockopt+0xe6/0x100 [ 2602.909750][T21665] tcp_setsockopt+0x90/0xa0 [ 2602.914263][T21665] sock_common_setsockopt+0x61/0x70 [ 2602.919577][T21665] ? sock_common_recvmsg+0xe0/0xe0 [ 2602.924767][T21665] __sys_setsockopt+0x1d4/0x240 [ 2602.929657][T21665] __x64_sys_setsockopt+0x66/0x80 [ 2602.934673][T21665] do_syscall_64+0x44/0x110 [ 2602.939243][T21665] ? syscall_exit_to_user_mode+0x38/0x140 [ 2602.944954][T21665] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2602.950886][T21665] RIP: 0033:0x7f50c0fa7ba9 [ 2602.955289][T21665] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2602.974962][T21665] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2602.983366][T21665] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2602.991371][T21665] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2602.999331][T21665] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2603.007364][T21665] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2603.015592][T21665] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2603.023560][T21665] [ 2603.026728][T21665] memory: usage 307196kB, limit 307200kB, failcnt 96346 [ 2603.033756][T21665] memory+swap: usage 309040kB, limit 9007199254740988kB, failcnt 0 [ 2603.041692][T21665] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 2603.049089][T21665] Memory cgroup stats for /syz3: [ 2603.050862][T21665] cache 16384 [ 2603.059126][T21665] rss 8192 [ 2603.062173][T21665] shmem 0 [ 2603.065161][T21665] mapped_file 0 [ 2603.068673][T21665] dirty 8192 [ 2603.071920][T21665] writeback 0 [ 2603.075241][T21665] workingset_refault_anon 74317 [ 2603.080157][T21665] workingset_refault_file 320 [ 2603.084873][T21665] swap 1884160 [ 2603.088258][T21665] swapcached 12288 [ 2603.092044][T21665] pgpgin 377392 [ 2603.095493][T21665] pgpgout 377383 [ 2603.099124][T21665] pgfault 561394 [ 2603.102679][T21665] pgmajfault 39338 [ 2603.106506][T21665] inactive_anon 12288 [ 2603.110476][T21665] active_anon 8192 [ 2603.114186][T21665] inactive_file 0 [ 2603.117839][T21665] active_file 16384 [ 2603.121638][T21665] unevictable 0 [ 2603.125082][T21665] hierarchical_memory_limit 314572800 [ 2603.130472][T21665] hierarchical_memsw_limit 9223372036854771712 [ 2603.136690][T21665] total_cache 16384 [ 2603.140480][T21665] total_rss 8192 [ 2603.144017][T21665] total_shmem 0 [ 2603.147487][T21665] total_mapped_file 0 [ 2603.151460][T21665] total_dirty 8192 [ 2603.155246][T21665] total_writeback 0 [ 2603.159094][T21665] total_workingset_refault_anon 74317 [ 2603.164465][T21665] total_workingset_refault_file 320 [ 2603.169692][T21665] total_swap 1884160 [ 2603.173571][T21665] total_swapcached 12288 [ 2603.177835][T21665] total_pgpgin 377392 [ 2603.181811][T21665] total_pgpgout 377383 [ 2603.185923][T21665] total_pgfault 561394 [ 2603.190020][T21665] total_pgmajfault 39338 [ 2603.194248][T21665] total_inactive_anon 12288 [ 2603.198767][T21665] total_active_anon 8192 [ 2603.203053][T21665] total_inactive_file 0 [ 2603.207252][T21665] total_active_file 16384 [ 2603.211592][T21665] total_unevictable 0 [ 2603.215563][T21665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21664,uid=0 03:55:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x360b, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x3}, 0x0) [ 2603.230863][T21665] Memory cgroup out of memory: Killed process 21664 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xfffffff0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xe, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x4}, 0x0) 03:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x5}, 0x0) [ 2603.456668][T21689] validate_nla: 6 callbacks suppressed [ 2603.456680][T21689] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2603.477204][T21693] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2603.487695][T21694] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x6}, 0x0) 03:55:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x10, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0xfffffffe, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2603.506858][T21698] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x7}, 0x0) [ 2603.563723][T21703] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2603.574749][T21702] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2603.595967][T21705] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2603.645767][T21707] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2604.300667][T21695] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2604.312052][T21695] CPU: 0 PID: 21695 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2604.322581][T21695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2604.332764][T21695] Call Trace: [ 2604.336038][T21695] [ 2604.339052][T21695] dump_stack_lvl+0xda/0x130 [ 2604.343658][T21695] dump_stack+0x15/0x20 [ 2604.347819][T21695] dump_header+0x82/0x2d0 [ 2604.352165][T21695] oom_kill_process+0x33a/0x4c0 [ 2604.357021][T21695] out_of_memory+0x9ca/0xbf0 [ 2604.361686][T21695] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2604.367768][T21695] mem_cgroup_out_of_memory+0x139/0x190 [ 2604.373350][T21695] try_charge_memcg+0x75c/0xd30 [ 2604.378220][T21695] ? __swap_duplicate+0x29b/0x2b0 [ 2604.383243][T21695] ? radix_tree_lookup+0xf9/0x150 [ 2604.388300][T21695] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2604.394420][T21695] __read_swap_cache_async+0x2f6/0x550 [ 2604.399933][T21695] swap_cluster_readahead+0x27c/0x4c0 [ 2604.405347][T21695] swapin_readahead+0xe9/0x7f0 [ 2604.410115][T21695] ? __filemap_get_folio+0x41a/0x5a0 [ 2604.415479][T21695] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2604.421125][T21695] ? swap_cache_get_folio+0x6e/0x200 [ 2604.426409][T21695] do_swap_page+0x4a0/0x1670 [ 2604.431166][T21695] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2604.436458][T21695] ? __rcu_read_lock+0x35/0x50 [ 2604.441237][T21695] ? pte_offset_map_nolock+0x124/0x1d0 [ 2604.446815][T21695] handle_mm_fault+0xa36/0x2dd0 [ 2604.451713][T21695] exc_page_fault+0x3ff/0x6c0 [ 2604.456422][T21695] asm_exc_page_fault+0x26/0x30 [ 2604.461267][T21695] RIP: 0033:0x7f50c0f61bc4 [ 2604.465702][T21695] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2604.485410][T21695] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2604.491506][T21695] RAX: 0000000000000000 RBX: 00007f50c10c6f80 RCX: 0000000000000000 03:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3e00, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x11, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2604.499581][T21695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2604.507558][T21695] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2604.515522][T21695] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027bd27 [ 2604.523485][T21695] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000027b9e6 [ 2604.531446][T21695] [ 2604.534565][T21695] memory: usage 307200kB, limit 307200kB, failcnt 96442 [ 2604.541536][T21695] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2604.549469][T21695] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2604.556855][T21695] Memory cgroup stats for /syz3: [ 2604.559378][T21695] cache 16384 [ 2604.567716][T21695] rss 8192 [ 2604.570783][T21695] shmem 0 [ 2604.573730][T21695] mapped_file 0 [ 2604.577226][T21695] dirty 0 [ 2604.580152][T21695] writeback 16384 [ 2604.583783][T21695] workingset_refault_anon 74338 [ 2604.588654][T21695] workingset_refault_file 320 [ 2604.593348][T21695] swap 1888256 [ 2604.596730][T21695] swapcached 16384 [ 2604.600452][T21695] pgpgin 377436 [ 2604.603916][T21695] pgpgout 377428 [ 2604.607474][T21695] pgfault 561590 [ 2604.611030][T21695] pgmajfault 39349 [ 2604.614751][T21695] inactive_anon 0 [ 2604.618408][T21695] active_anon 0 [ 2604.621938][T21695] inactive_file 8192 [ 2604.625889][T21695] active_file 8192 [ 2604.629650][T21695] unevictable 0 [ 2604.633141][T21695] hierarchical_memory_limit 314572800 [ 2604.638528][T21695] hierarchical_memsw_limit 9223372036854771712 [ 2604.644679][T21695] total_cache 16384 [ 2604.647506][T21709] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2604.648485][T21695] total_rss 8192 [ 2604.661302][T21695] total_shmem 0 [ 2604.664756][T21695] total_mapped_file 0 [ 2604.668743][T21695] total_dirty 0 [ 2604.672193][T21695] total_writeback 16384 [ 2604.676414][T21695] total_workingset_refault_anon 74338 [ 2604.681852][T21695] total_workingset_refault_file 320 [ 2604.687075][T21695] total_swap 1888256 [ 2604.691037][T21695] total_swapcached 16384 [ 2604.695280][T21695] total_pgpgin 377436 [ 2604.699428][T21695] total_pgpgout 377428 [ 2604.703500][T21695] total_pgfault 561590 [ 2604.707593][T21695] total_pgmajfault 39349 [ 2604.711836][T21695] total_inactive_anon 0 [ 2604.716028][T21695] total_active_anon 0 [ 2604.720047][T21695] total_inactive_file 8192 [ 2604.724449][T21695] total_active_file 8192 [ 2604.728707][T21695] total_unevictable 0 [ 2604.732776][T21695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21695,uid=0 [ 2604.748447][T21695] Memory cgroup out of memory: Killed process 21695 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x9}, 0x0) 03:55:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x10}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x12, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x25, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2605.107914][T21715] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2605.117362][T21720] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2605.135604][T21723] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xb}, 0x0) [ 2605.152429][T21725] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2605.197733][T21729] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2605.217818][T21731] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x48, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xf}, 0x0) [ 2605.594557][T21736] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2605.840901][T21717] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2605.852322][T21717] CPU: 1 PID: 21717 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2605.863006][T21717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2605.873075][T21717] Call Trace: [ 2605.876422][T21717] [ 2605.879344][T21717] dump_stack_lvl+0xda/0x130 [ 2605.884075][T21717] dump_stack+0x15/0x20 [ 2605.888245][T21717] dump_header+0x82/0x2d0 [ 2605.892672][T21717] oom_kill_process+0x33a/0x4c0 [ 2605.897605][T21717] out_of_memory+0x9ca/0xbf0 [ 2605.902227][T21717] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2605.908380][T21717] mem_cgroup_out_of_memory+0x139/0x190 [ 2605.913937][T21717] try_charge_memcg+0x75c/0xd30 [ 2605.918844][T21717] ? __swap_duplicate+0x29b/0x2b0 [ 2605.923906][T21717] ? radix_tree_lookup+0xf9/0x150 [ 2605.929010][T21717] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2605.935084][T21717] __read_swap_cache_async+0x2f6/0x550 [ 2605.940642][T21717] swap_cluster_readahead+0x27c/0x4c0 [ 2605.946023][T21717] swapin_readahead+0xe9/0x7f0 [ 2605.950827][T21717] ? __filemap_get_folio+0x41a/0x5a0 [ 2605.956113][T21717] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2605.961790][T21717] ? swap_cache_get_folio+0x6e/0x200 [ 2605.967174][T21717] do_swap_page+0x4a0/0x1670 [ 2605.971768][T21717] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2605.977087][T21717] ? __rcu_read_lock+0x35/0x50 [ 2605.981842][T21717] ? pte_offset_map_nolock+0x124/0x1d0 [ 2605.987284][T21717] handle_mm_fault+0xa36/0x2dd0 [ 2605.992208][T21717] exc_page_fault+0x3ff/0x6c0 [ 2605.996880][T21717] asm_exc_page_fault+0x26/0x30 [ 2606.001745][T21717] RIP: 0033:0x7f07d1420bc4 [ 2606.006158][T21717] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2606.025749][T21717] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2606.031905][T21717] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2606.039857][T21717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2606.047974][T21717] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2606.055925][T21717] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027c38a [ 2606.063892][T21717] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027c049 [ 2606.071847][T21717] [ 2606.074913][T21717] memory: usage 307200kB, limit 307200kB, failcnt 199006 [ 2606.082141][T21717] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2606.090162][T21717] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2606.097512][T21717] Memory cgroup stats for /syz1: [ 2606.097704][T21717] cache 4096 [ 2606.106092][T21717] rss 8192 [ 2606.109136][T21717] shmem 0 [ 2606.112113][T21717] mapped_file 0 [ 2606.115610][T21717] dirty 0 [ 2606.118625][T21717] writeback 8192 [ 2606.122183][T21717] workingset_refault_anon 90332 [ 2606.127097][T21717] workingset_refault_file 314 [ 2606.131807][T21717] swap 536576 [ 2606.135122][T21717] swapcached 16384 [ 2606.138871][T21717] pgpgin 1999309 [ 2606.142488][T21717] pgpgout 1999304 [ 2606.146164][T21717] pgfault 2095440 [ 2606.149859][T21717] pgmajfault 39850 [ 2606.153630][T21717] inactive_anon 0 [ 2606.157329][T21717] active_anon 0 [ 2606.160774][T21717] inactive_file 0 [ 2606.164381][T21717] active_file 4096 [ 2606.168253][T21717] unevictable 0 [ 2606.171731][T21717] hierarchical_memory_limit 314572800 [ 2606.177133][T21717] hierarchical_memsw_limit 9223372036854771712 [ 2606.183274][T21717] total_cache 4096 [ 2606.187019][T21717] total_rss 8192 [ 2606.190624][T21717] total_shmem 0 [ 2606.194110][T21717] total_mapped_file 0 [ 2606.198133][T21717] total_dirty 0 [ 2606.201695][T21717] total_writeback 8192 [ 2606.205763][T21717] total_workingset_refault_anon 90332 [ 2606.211187][T21717] total_workingset_refault_file 314 [ 2606.216397][T21717] total_swap 536576 [ 2606.220240][T21717] total_swapcached 16384 [ 2606.224507][T21717] total_pgpgin 1999309 [ 2606.228584][T21717] total_pgpgout 1999304 [ 2606.232726][T21717] total_pgfault 2095440 [ 2606.236916][T21717] total_pgmajfault 39850 [ 2606.241244][T21717] total_inactive_anon 0 [ 2606.245432][T21717] total_active_anon 0 [ 2606.249417][T21717] total_inactive_file 0 [ 2606.253557][T21717] total_active_file 4096 [ 2606.257804][T21717] total_unevictable 0 [ 2606.261857][T21717] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21717,uid=0 [ 2606.277258][T21717] Memory cgroup out of memory: Killed process 21717 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2606.294677][T21726] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2606.306085][T21726] CPU: 1 PID: 21726 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2606.316577][T21726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2606.326689][T21726] Call Trace: [ 2606.329961][T21726] [ 2606.332903][T21726] dump_stack_lvl+0xda/0x130 [ 2606.337504][T21726] dump_stack+0x15/0x20 [ 2606.341659][T21726] dump_header+0x82/0x2d0 [ 2606.346024][T21726] oom_kill_process+0x33a/0x4c0 [ 2606.350969][T21726] out_of_memory+0x9ca/0xbf0 [ 2606.355557][T21726] mem_cgroup_out_of_memory+0x139/0x190 [ 2606.361090][T21726] try_charge_memcg+0x75c/0xd30 [ 2606.365930][T21726] ? __swap_duplicate+0x29b/0x2b0 [ 2606.370975][T21726] ? radix_tree_lookup+0xf9/0x150 [ 2606.376049][T21726] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2606.382108][T21726] __read_swap_cache_async+0x2f6/0x550 [ 2606.387565][T21726] swap_cluster_readahead+0x452/0x4c0 [ 2606.393003][T21726] swapin_readahead+0xe9/0x7f0 [ 2606.397801][T21726] ? __filemap_get_folio+0x41a/0x5a0 [ 2606.403070][T21726] ? swap_cache_get_folio+0x6e/0x200 [ 2606.408366][T21726] do_swap_page+0x4a0/0x1670 [ 2606.412956][T21726] ? asm_exc_page_fault+0x26/0x30 [ 2606.418074][T21726] ? __rcu_read_lock+0x35/0x50 [ 2606.422834][T21726] ? pte_offset_map_nolock+0x124/0x1d0 [ 2606.428285][T21726] handle_mm_fault+0xa36/0x2dd0 [ 2606.433143][T21726] exc_page_fault+0x3ff/0x6c0 [ 2606.437852][T21726] asm_exc_page_fault+0x26/0x30 [ 2606.442699][T21726] RIP: 0033:0x7f50c0f61d4b [ 2606.447127][T21726] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2606.466780][T21726] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2606.472968][T21726] RAX: 0000000000000001 RBX: 00007f50c10c6f80 RCX: 000000000027c3b0 [ 2606.480926][T21726] RDX: 0000000000000006 RSI: 00007ffd61c03bf0 RDI: 00007f50c10c6f80 [ 2606.488890][T21726] RBP: 00007f50c10c8980 R08: 0000000000000010 R09: 00007ffd61de10b0 [ 2606.496847][T21726] R10: 00007ffd61de1080 R11: 000000000007bd10 R12: 000000000027c3b5 [ 2606.504832][T21726] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000027c074 [ 2606.512797][T21726] [ 2606.515964][T21726] memory: usage 307200kB, limit 307200kB, failcnt 96901 [ 2606.522948][T21726] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2606.530855][T21726] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2606.538131][T21726] Memory cgroup stats for /syz3: [ 2606.538443][T21726] cache 16384 [ 2606.546747][T21726] rss 8192 [ 2606.549755][T21726] shmem 0 [ 2606.552690][T21726] mapped_file 0 [ 2606.556157][T21726] dirty 0 [ 2606.559100][T21726] writeback 0 [ 2606.562383][T21726] workingset_refault_anon 74390 [ 2606.567271][T21726] workingset_refault_file 320 [ 2606.571994][T21726] swap 1896448 [ 2606.575357][T21726] swapcached 8192 [ 2606.579014][T21726] pgpgin 377511 [ 2606.582458][T21726] pgpgout 377505 [ 2606.585991][T21726] pgfault 561778 [ 2606.589580][T21726] pgmajfault 39367 [ 2606.593351][T21726] inactive_anon 8192 [ 2606.597243][T21726] active_anon 0 [ 2606.600691][T21726] inactive_file 12288 [ 2606.604660][T21726] active_file 4096 [ 2606.608377][T21726] unevictable 0 [ 2606.611818][T21726] hierarchical_memory_limit 314572800 [ 2606.617261][T21726] hierarchical_memsw_limit 9223372036854771712 [ 2606.623450][T21726] total_cache 16384 [ 2606.627350][T21726] total_rss 8192 [ 2606.630884][T21726] total_shmem 0 [ 2606.634331][T21726] total_mapped_file 0 [ 2606.638323][T21726] total_dirty 0 [ 2606.641766][T21726] total_writeback 0 [ 2606.645598][T21726] total_workingset_refault_anon 74390 [ 2606.650986][T21726] total_workingset_refault_file 320 [ 2606.656178][T21726] total_swap 1896448 [ 2606.660101][T21726] total_swapcached 8192 [ 2606.664239][T21726] total_pgpgin 377511 [ 2606.668296][T21726] total_pgpgout 377505 [ 2606.672350][T21726] total_pgfault 561778 [ 2606.676420][T21726] total_pgmajfault 39367 [ 2606.680680][T21726] total_inactive_anon 8192 [ 2606.685087][T21726] total_active_anon 0 [ 2606.689078][T21726] total_inactive_file 12288 [ 2606.693631][T21726] total_active_file 4096 [ 2606.697913][T21726] total_unevictable 0 [ 2606.701885][T21726] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21726,uid=0 [ 2606.717253][T21726] Memory cgroup out of memory: Killed process 21726 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x300}, 0x0) 03:55:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x4c, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x500}, 0x0) 03:55:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x60, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2606.909947][T21747] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x600}, 0x0) 03:55:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x68, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2606.990096][T21757] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2607.050783][T21763] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x700}, 0x0) 03:55:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6c, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x900}, 0x0) 03:55:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xb00}, 0x0) 03:55:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0xb}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xf00}, 0x0) [ 2608.102027][T21780] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2608.859224][T21781] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2608.870585][T21781] CPU: 1 PID: 21781 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2608.881011][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2608.891068][T21781] Call Trace: [ 2608.894343][T21781] [ 2608.897326][T21781] dump_stack_lvl+0xda/0x130 [ 2608.901930][T21781] dump_stack+0x15/0x20 [ 2608.906152][T21781] dump_header+0x82/0x2d0 [ 2608.910541][T21781] oom_kill_process+0x33a/0x4c0 [ 2608.915494][T21781] out_of_memory+0x9ca/0xbf0 [ 2608.920166][T21781] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2608.926242][T21781] mem_cgroup_out_of_memory+0x139/0x190 [ 2608.931830][T21781] try_charge_memcg+0x75c/0xd30 [ 2608.936740][T21781] ? __swap_duplicate+0x29b/0x2b0 [ 2608.941812][T21781] ? radix_tree_lookup+0xf9/0x150 [ 2608.946911][T21781] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2608.953070][T21781] __read_swap_cache_async+0x2f6/0x550 [ 2608.958540][T21781] swap_cluster_readahead+0x27c/0x4c0 [ 2608.963996][T21781] swapin_readahead+0xe9/0x7f0 [ 2608.968757][T21781] ? __filemap_get_folio+0x41a/0x5a0 [ 2608.974072][T21781] ? swap_cache_get_folio+0x6e/0x200 [ 2608.979474][T21781] do_swap_page+0x4a0/0x1670 [ 2608.984126][T21781] ? asm_exc_page_fault+0x26/0x30 [ 2608.989152][T21781] ? __rcu_read_lock+0x35/0x50 [ 2608.993984][T21781] ? pte_offset_map_nolock+0x124/0x1d0 [ 2608.999468][T21781] handle_mm_fault+0xa36/0x2dd0 [ 2609.004318][T21781] exc_page_fault+0x3ff/0x6c0 [ 2609.008998][T21781] asm_exc_page_fault+0x26/0x30 [ 2609.013969][T21781] RIP: 0033:0x7f07d1420bc4 [ 2609.018466][T21781] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2609.038135][T21781] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2609.044204][T21781] RAX: 0000000000000000 RBX: 00007f07d1586050 RCX: 0000000000000000 [ 2609.052176][T21781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2609.060152][T21781] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2609.068217][T21781] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027cf2c [ 2609.076197][T21781] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027cbeb [ 2609.084159][T21781] [ 2609.087292][T21781] memory: usage 307200kB, limit 307200kB, failcnt 199205 [ 2609.094300][T21781] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2609.102387][T21781] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 03:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0xc}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x74, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x2000}, 0x0) 03:55:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xf735, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2609.109819][T21781] Memory cgroup stats for /syz1: [ 2609.110185][T21781] cache 4096 [ 2609.118351][T21781] rss 8192 [ 2609.119804][T21793] validate_nla: 17 callbacks suppressed [ 2609.119817][T21793] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2609.121390][T21781] shmem 0 [ 2609.138069][T21781] mapped_file 0 [ 2609.140715][T21794] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2609.141525][T21781] dirty 0 [ 2609.141532][T21781] writeback 8192 03:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0xd}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2609.141538][T21781] workingset_refault_anon 90399 [ 2609.141546][T21781] workingset_refault_file 314 [ 2609.151582][T21796] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2609.154008][T21781] swap 544768 [ 2609.154016][T21781] swapcached 8192 [ 2609.154022][T21781] pgpgin 1999422 [ 2609.154027][T21781] pgpgout 1999419 [ 2609.154034][T21781] pgfault 2095747 [ 2609.193103][T21781] pgmajfault 39885 [ 2609.196860][T21781] inactive_anon 0 [ 2609.200507][T21781] active_anon 0 [ 2609.203986][T21781] inactive_file 0 [ 2609.207652][T21781] active_file 4096 [ 2609.211392][T21781] unevictable 0 [ 2609.214859][T21781] hierarchical_memory_limit 314572800 [ 2609.220321][T21781] hierarchical_memsw_limit 9223372036854771712 [ 2609.226533][T21781] total_cache 4096 [ 2609.230246][T21781] total_rss 8192 [ 2609.233178][T21803] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2609.233821][T21781] total_shmem 0 [ 2609.245622][T21781] total_mapped_file 0 [ 2609.249617][T21781] total_dirty 0 [ 2609.253090][T21781] total_writeback 8192 [ 2609.257286][T21781] total_workingset_refault_anon 90399 [ 2609.262664][T21781] total_workingset_refault_file 314 [ 2609.267884][T21781] total_swap 544768 [ 2609.271688][T21781] total_swapcached 8192 [ 2609.275844][T21781] total_pgpgin 1999422 [ 2609.280022][T21781] total_pgpgout 1999419 [ 2609.284166][T21781] total_pgfault 2095747 [ 2609.288377][T21781] total_pgmajfault 39885 [ 2609.292612][T21781] total_inactive_anon 0 [ 2609.296789][T21781] total_active_anon 0 [ 2609.300767][T21781] total_inactive_file 0 [ 2609.304960][T21781] total_active_file 4096 [ 2609.309238][T21781] total_unevictable 0 [ 2609.313246][T21781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21781,uid=0 [ 2609.328663][T21781] Memory cgroup out of memory: Killed process 21781 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x45da}, 0x0) 03:55:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7a, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0xe}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x300, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2609.549104][T21806] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2609.558579][T21807] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x10}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2609.591626][T21812] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2609.606245][T21813] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2609.614402][T21815] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x500, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xda45}, 0x0) [ 2609.640386][T21817] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2609.671485][T21819] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2609.680939][T21821] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xf835, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x11}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x34000}, 0x0) [ 2610.131636][T21826] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2610.141642][T21827] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2610.359310][T21809] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2610.370682][T21809] CPU: 0 PID: 21809 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2610.381176][T21809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2610.391303][T21809] Call Trace: [ 2610.394584][T21809] [ 2610.397537][T21809] dump_stack_lvl+0xda/0x130 [ 2610.402187][T21809] dump_stack+0x15/0x20 [ 2610.406369][T21809] dump_header+0x82/0x2d0 [ 2610.410701][T21809] oom_kill_process+0x33a/0x4c0 [ 2610.415562][T21809] out_of_memory+0x9ca/0xbf0 [ 2610.420151][T21809] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2610.426254][T21809] mem_cgroup_out_of_memory+0x139/0x190 [ 2610.431877][T21809] try_charge_memcg+0x75c/0xd30 [ 2610.436775][T21809] ? __swap_duplicate+0x29b/0x2b0 [ 2610.441807][T21809] ? radix_tree_lookup+0xf9/0x150 [ 2610.446861][T21809] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2610.453025][T21809] __read_swap_cache_async+0x2f6/0x550 [ 2610.458518][T21809] swap_cluster_readahead+0x452/0x4c0 [ 2610.463915][T21809] swapin_readahead+0xe9/0x7f0 [ 2610.468735][T21809] ? __filemap_get_folio+0x41a/0x5a0 [ 2610.474093][T21809] ? swap_cache_get_folio+0x6e/0x200 [ 2610.479468][T21809] do_swap_page+0x4a0/0x1670 [ 2610.484068][T21809] ? asm_exc_page_fault+0x26/0x30 [ 2610.489101][T21809] ? __rcu_read_lock+0x35/0x50 [ 2610.493923][T21809] ? pte_offset_map_nolock+0x124/0x1d0 [ 2610.499383][T21809] handle_mm_fault+0xa36/0x2dd0 [ 2610.504242][T21809] exc_page_fault+0x3ff/0x6c0 [ 2610.508945][T21809] asm_exc_page_fault+0x26/0x30 [ 2610.513791][T21809] RIP: 0033:0x7f07d1420bc4 [ 2610.518205][T21809] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2610.537876][T21809] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2610.544006][T21809] RAX: 0000000000000000 RBX: 00007f07d1587090 RCX: 0000000000000000 [ 2610.551970][T21809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2610.559946][T21809] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2610.567912][T21809] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027d4f2 [ 2610.575925][T21809] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027d1b1 [ 2610.584013][T21809] [ 2610.587137][T21809] memory: usage 307200kB, limit 307200kB, failcnt 199430 [ 2610.594159][T21809] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 2610.602153][T21809] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 2610.609443][T21809] Memory cgroup stats for /syz1: [ 2610.620161][T21809] cache 4096 [ 2610.628342][T21809] rss 8192 [ 2610.631362][T21809] shmem 0 [ 2610.634288][T21809] mapped_file 0 [ 2610.637823][T21809] dirty 0 [ 2610.640746][T21809] writeback 0 [ 2610.644024][T21809] workingset_refault_anon 90430 [ 2610.649018][T21809] workingset_refault_file 314 [ 2610.653678][T21809] swap 540672 [ 2610.657062][T21809] swapcached 4096 [ 2610.660687][T21809] pgpgin 1999476 [ 2610.664222][T21809] pgpgout 1999472 [ 2610.667903][T21809] pgfault 2095949 [ 2610.671515][T21809] pgmajfault 39897 [ 2610.675267][T21809] inactive_anon 4096 [ 2610.679243][T21809] active_anon 8192 [ 2610.683131][T21809] inactive_file 4096 [ 2610.687116][T21809] active_file 0 [ 2610.690565][T21809] unevictable 0 [ 2610.694005][T21809] hierarchical_memory_limit 314572800 [ 2610.699387][T21809] hierarchical_memsw_limit 9223372036854771712 [ 2610.705530][T21809] total_cache 4096 [ 2610.709292][T21809] total_rss 8192 [ 2610.712827][T21809] total_shmem 0 [ 2610.716315][T21809] total_mapped_file 0 [ 2610.720287][T21809] total_dirty 0 [ 2610.723733][T21809] total_writeback 0 [ 2610.727592][T21809] total_workingset_refault_anon 90430 [ 2610.733012][T21809] total_workingset_refault_file 314 [ 2610.738283][T21809] total_swap 540672 [ 2610.742075][T21809] total_swapcached 4096 [ 2610.746204][T21809] total_pgpgin 1999476 [ 2610.750317][T21809] total_pgpgout 1999472 [ 2610.754456][T21809] total_pgfault 2095949 [ 2610.758604][T21809] total_pgmajfault 39897 [ 2610.762881][T21809] total_inactive_anon 4096 [ 2610.767300][T21809] total_active_anon 8192 [ 2610.771525][T21809] total_inactive_file 4096 [ 2610.775919][T21809] total_active_file 0 [ 2610.779932][T21809] total_unevictable 0 [ 2610.783906][T21809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21809,uid=0 [ 2610.799147][T21809] Memory cgroup out of memory: Killed process 21809 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2610.821155][T21823] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2610.834742][T21823] CPU: 0 PID: 21823 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2610.845179][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2610.855226][T21823] Call Trace: [ 2610.858493][T21823] [ 2610.861409][T21823] dump_stack_lvl+0xda/0x130 [ 2610.866073][T21823] dump_stack+0x15/0x20 [ 2610.870292][T21823] dump_header+0x82/0x2d0 [ 2610.874627][T21823] oom_kill_process+0x33a/0x4c0 [ 2610.879601][T21823] out_of_memory+0x9ca/0xbf0 [ 2610.884187][T21823] mem_cgroup_out_of_memory+0x139/0x190 [ 2610.889782][T21823] try_charge_memcg+0x75c/0xd30 [ 2610.894680][T21823] obj_cgroup_charge_pages+0xab/0x130 [ 2610.900050][T21823] __memcg_kmem_charge_page+0x9c/0x170 [ 2610.905585][T21823] __alloc_pages+0x1bb/0x340 [ 2610.910244][T21823] alloc_pages_mpol+0xb1/0x1d0 [ 2610.915012][T21823] alloc_pages+0xe0/0x100 [ 2610.919368][T21823] __vmalloc_node_range+0x6d2/0xea0 [ 2610.924680][T21823] kvmalloc_node+0x121/0x160 [ 2610.929278][T21823] ? xt_alloc_table_info+0x3d/0x80 [ 2610.934405][T21823] xt_alloc_table_info+0x3d/0x80 [ 2610.939376][T21823] do_arpt_set_ctl+0x634/0x13b0 [ 2610.944227][T21823] ? __futex_wait+0x227/0x280 [ 2610.948981][T21823] ? __futex_wake_mark+0x70/0x70 [ 2610.954024][T21823] ? tcp_release_cb+0xfe/0x370 [ 2610.958842][T21823] ? _raw_spin_unlock_bh+0x36/0x40 [ 2610.963947][T21823] nf_setsockopt+0x18d/0x1b0 [ 2610.968625][T21823] ip_setsockopt+0xe6/0x100 [ 2610.973121][T21823] tcp_setsockopt+0x90/0xa0 [ 2610.977663][T21823] sock_common_setsockopt+0x61/0x70 [ 2610.982857][T21823] ? sock_common_recvmsg+0xe0/0xe0 [ 2610.987974][T21823] __sys_setsockopt+0x1d4/0x240 [ 2610.992882][T21823] __x64_sys_setsockopt+0x66/0x80 [ 2610.997899][T21823] do_syscall_64+0x44/0x110 [ 2611.002407][T21823] ? syscall_exit_to_user_mode+0x38/0x140 [ 2611.008119][T21823] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2611.014120][T21823] RIP: 0033:0x7ffbf0714ba9 [ 2611.018522][T21823] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2611.038159][T21823] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2611.046568][T21823] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2611.054528][T21823] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2611.062490][T21823] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2611.070495][T21823] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2611.078452][T21823] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2611.086417][T21823] [ 2611.089541][T21823] memory: usage 307200kB, limit 307200kB, failcnt 50250 [ 2611.096666][T21823] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2611.104611][T21823] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2611.111931][T21823] Memory cgroup stats for /syz4: [ 2611.113545][T21823] cache 12288 [ 2611.121771][T21823] rss 8192 [ 2611.124781][T21823] shmem 0 [ 2611.127742][T21823] mapped_file 0 [ 2611.131259][T21823] dirty 0 [ 2611.134177][T21823] writeback 0 [ 2611.137467][T21823] workingset_refault_anon 64700 [ 2611.142304][T21823] workingset_refault_file 309 [ 2611.147000][T21823] swap 4632576 [ 2611.150360][T21823] swapcached 8192 [ 2611.153975][T21823] pgpgin 891336 [ 2611.157442][T21823] pgpgout 891331 [ 2611.160979][T21823] pgfault 969364 [ 2611.164518][T21823] pgmajfault 33933 [ 2611.168267][T21823] inactive_anon 8192 [ 2611.172148][T21823] active_anon 0 [ 2611.175598][T21823] inactive_file 12288 [ 2611.179599][T21823] active_file 0 [ 2611.183056][T21823] unevictable 0 [ 2611.186615][T21823] hierarchical_memory_limit 314572800 [ 2611.191975][T21823] hierarchical_memsw_limit 9223372036854771712 [ 2611.198196][T21823] total_cache 12288 [ 2611.202005][T21823] total_rss 8192 [ 2611.205559][T21823] total_shmem 0 [ 2611.209113][T21823] total_mapped_file 0 [ 2611.213113][T21823] total_dirty 0 [ 2611.216600][T21823] total_writeback 0 [ 2611.220434][T21823] total_workingset_refault_anon 64700 [ 2611.225817][T21823] total_workingset_refault_file 309 [ 2611.231044][T21823] total_swap 4632576 [ 2611.234933][T21823] total_swapcached 8192 [ 2611.239101][T21823] total_pgpgin 891336 [ 2611.243079][T21823] total_pgpgout 891331 [ 2611.247166][T21823] total_pgfault 969364 [ 2611.251315][T21823] total_pgmajfault 33933 [ 2611.255640][T21823] total_inactive_anon 8192 [ 2611.260236][T21823] total_active_anon 0 [ 2611.264245][T21823] total_inactive_file 12288 03:55:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x600, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x12}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x400300}, 0x0) 03:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x1000000}, 0x0) 03:55:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x700, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x25}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2611.265223][T21833] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2611.268768][T21823] total_active_file 0 [ 2611.268777][T21823] total_unevictable 0 [ 2611.286019][T21823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21822,uid=0 [ 2611.301439][T21823] Memory cgroup out of memory: Killed process 21822 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x2000000}, 0x0) [ 2611.369351][T21844] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xf935, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x48}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x3000000}, 0x0) [ 2612.048908][T21832] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2612.060269][T21832] CPU: 0 PID: 21832 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2612.070753][T21832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2612.080869][T21832] Call Trace: [ 2612.084146][T21832] [ 2612.087144][T21832] dump_stack_lvl+0xda/0x130 [ 2612.091742][T21832] dump_stack+0x15/0x20 [ 2612.095953][T21832] dump_header+0x82/0x2d0 [ 2612.100293][T21832] oom_kill_process+0x33a/0x4c0 [ 2612.105200][T21832] out_of_memory+0x9ca/0xbf0 [ 2612.109809][T21832] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2612.115890][T21832] mem_cgroup_out_of_memory+0x139/0x190 [ 2612.121529][T21832] try_charge_memcg+0x75c/0xd30 [ 2612.126397][T21832] ? __swap_duplicate+0x29b/0x2b0 [ 2612.131505][T21832] ? radix_tree_lookup+0xf9/0x150 [ 2612.136546][T21832] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2612.142618][T21832] __read_swap_cache_async+0x2f6/0x550 [ 2612.148079][T21832] swap_cluster_readahead+0x27c/0x4c0 [ 2612.153482][T21832] swapin_readahead+0xe9/0x7f0 [ 2612.158278][T21832] ? __filemap_get_folio+0x41a/0x5a0 [ 2612.163566][T21832] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2612.169214][T21832] ? swap_cache_get_folio+0x6e/0x200 [ 2612.174515][T21832] do_swap_page+0x4a0/0x1670 [ 2612.179208][T21832] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2612.184500][T21832] ? __rcu_read_lock+0x35/0x50 [ 2612.189250][T21832] ? pte_offset_map_nolock+0x124/0x1d0 [ 2612.194739][T21832] handle_mm_fault+0xa36/0x2dd0 [ 2612.199599][T21832] exc_page_fault+0x3ff/0x6c0 [ 2612.204301][T21832] asm_exc_page_fault+0x26/0x30 [ 2612.209221][T21832] RIP: 0033:0x7f50c0f61bc4 [ 2612.213621][T21832] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2612.233318][T21832] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2612.239367][T21832] RAX: 0000000000000000 RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2612.247326][T21832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2612.255336][T21832] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2612.263306][T21832] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027dbbe [ 2612.271262][T21832] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000027d87d [ 2612.279231][T21832] [ 2612.282417][T21832] memory: usage 307200kB, limit 307200kB, failcnt 97174 [ 2612.289358][T21832] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2612.297277][T21832] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2612.304541][T21832] Memory cgroup stats for /syz3: [ 2612.306078][T21832] cache 16384 [ 2612.314335][T21832] rss 0 [ 2612.317203][T21832] shmem 0 [ 2612.320214][T21832] mapped_file 0 [ 2612.323700][T21832] dirty 0 [ 2612.326720][T21832] writeback 0 [ 2612.330009][T21832] workingset_refault_anon 74542 [ 2612.334862][T21832] workingset_refault_file 320 [ 2612.339561][T21832] swap 1888256 [ 2612.342916][T21832] swapcached 16384 [ 2612.346680][T21832] pgpgin 377756 [ 2612.350127][T21832] pgpgout 377748 [ 2612.353662][T21832] pgfault 562486 [ 2612.357234][T21832] pgmajfault 39443 [ 2612.361028][T21832] inactive_anon 16384 [ 2612.365002][T21832] active_anon 0 [ 2612.368508][T21832] inactive_file 12288 [ 2612.372517][T21832] active_file 4096 [ 2612.376220][T21832] unevictable 0 [ 2612.379685][T21832] hierarchical_memory_limit 314572800 [ 2612.385108][T21832] hierarchical_memsw_limit 9223372036854771712 [ 2612.391265][T21832] total_cache 16384 [ 2612.395060][T21832] total_rss 0 03:55:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x900, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2612.398351][T21832] total_shmem 0 [ 2612.401834][T21832] total_mapped_file 0 [ 2612.405801][T21832] total_dirty 0 [ 2612.409290][T21832] total_writeback 0 [ 2612.413090][T21832] total_workingset_refault_anon 74542 [ 2612.418556][T21832] total_workingset_refault_file 320 [ 2612.423777][T21832] total_swap 1888256 [ 2612.427768][T21832] total_swapcached 16384 [ 2612.432068][T21832] total_pgpgin 377756 [ 2612.436039][T21832] total_pgpgout 377748 [ 2612.440126][T21832] total_pgfault 562486 [ 2612.444178][T21832] total_pgmajfault 39443 [ 2612.448426][T21832] total_inactive_anon 16384 [ 2612.452979][T21832] total_active_anon 0 [ 2612.456979][T21832] total_inactive_file 12288 [ 2612.461465][T21832] total_active_file 4096 [ 2612.465739][T21832] total_unevictable 0 [ 2612.469795][T21832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21832,uid=0 [ 2612.485183][T21832] Memory cgroup out of memory: Killed process 21832 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2612.510870][T21855] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x4c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x4000000}, 0x0) 03:55:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xa00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfa35, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x5000000}, 0x0) 03:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x60}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x68}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xb00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2612.750977][T21865] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x6000000}, 0x0) 03:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x6c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2612.801631][T21871] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2613.545657][T21861] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2613.557097][T21861] CPU: 1 PID: 21861 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2613.567533][T21861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2613.577631][T21861] Call Trace: [ 2613.580906][T21861] [ 2613.583886][T21861] dump_stack_lvl+0xda/0x130 [ 2613.588489][T21861] dump_stack+0x15/0x20 [ 2613.592744][T21861] dump_header+0x82/0x2d0 [ 2613.597075][T21861] oom_kill_process+0x33a/0x4c0 [ 2613.601929][T21861] out_of_memory+0x9ca/0xbf0 [ 2613.606516][T21861] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2613.612585][T21861] mem_cgroup_out_of_memory+0x139/0x190 [ 2613.618190][T21861] try_charge_memcg+0x75c/0xd30 [ 2613.623123][T21861] ? __swap_duplicate+0x29b/0x2b0 [ 2613.628154][T21861] ? radix_tree_lookup+0xf9/0x150 [ 2613.633182][T21861] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2613.639342][T21861] __read_swap_cache_async+0x2f6/0x550 [ 2613.644839][T21861] swap_cluster_readahead+0x27c/0x4c0 [ 2613.650221][T21861] swapin_readahead+0xe9/0x7f0 [ 2613.655055][T21861] ? __filemap_get_folio+0x41a/0x5a0 [ 2613.660417][T21861] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2613.666107][T21861] ? swap_cache_get_folio+0x6e/0x200 [ 2613.671432][T21861] do_swap_page+0x4a0/0x1670 [ 2613.676069][T21861] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2613.681385][T21861] ? __rcu_read_lock+0x35/0x50 [ 2613.686201][T21861] ? pte_offset_map_nolock+0x124/0x1d0 [ 2613.691665][T21861] handle_mm_fault+0xa36/0x2dd0 [ 2613.696535][T21861] exc_page_fault+0x3ff/0x6c0 [ 2613.701248][T21861] asm_exc_page_fault+0x26/0x30 [ 2613.706097][T21861] RIP: 0033:0x7ffbf06cebc4 [ 2613.710492][T21861] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2613.730088][T21861] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2613.736131][T21861] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2613.744085][T21861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2613.752126][T21861] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2613.760175][T21861] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027e143 [ 2613.768125][T21861] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000027de02 [ 2613.776206][T21861] [ 2613.779468][T21861] memory: usage 307200kB, limit 307200kB, failcnt 50414 [ 2613.786421][T21861] memory+swap: usage 311716kB, limit 9007199254740988kB, failcnt 0 [ 2613.794302][T21861] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2613.801721][T21861] Memory cgroup stats for /syz4: [ 2613.801891][T21861] cache 12288 [ 2613.810259][T21861] rss 8192 [ 2613.813388][T21861] shmem 0 [ 2613.816326][T21861] mapped_file 0 [ 2613.819778][T21861] dirty 0 [ 2613.822764][T21861] writeback 8192 [ 2613.826409][T21861] workingset_refault_anon 64766 [ 2613.831240][T21861] workingset_refault_file 309 [ 2613.835890][T21861] swap 4624384 [ 2613.839282][T21861] swapcached 16384 [ 2613.843031][T21861] pgpgin 891446 [ 2613.846553][T21861] pgpgout 891439 [ 2613.850118][T21861] pgfault 969741 [ 2613.853713][T21861] pgmajfault 33968 [ 2613.857441][T21861] inactive_anon 0 [ 2613.861074][T21861] active_anon 0 [ 2613.864506][T21861] inactive_file 12288 [ 2613.868502][T21861] active_file 0 [ 2613.871947][T21861] unevictable 0 [ 2613.875403][T21861] hierarchical_memory_limit 314572800 [ 2613.880766][T21861] hierarchical_memsw_limit 9223372036854771712 [ 2613.886929][T21861] total_cache 12288 [ 2613.890733][T21861] total_rss 8192 [ 2613.894257][T21861] total_shmem 0 [ 2613.897719][T21861] total_mapped_file 0 [ 2613.901776][T21861] total_dirty 0 [ 2613.905206][T21861] total_writeback 8192 [ 2613.909274][T21861] total_workingset_refault_anon 64766 [ 2613.914632][T21861] total_workingset_refault_file 309 [ 2613.919821][T21861] total_swap 4624384 [ 2613.923749][T21861] total_swapcached 16384 [ 2613.928082][T21861] total_pgpgin 891446 [ 2613.932089][T21861] total_pgpgout 891439 [ 2613.936129][T21861] total_pgfault 969741 [ 2613.940194][T21861] total_pgmajfault 33968 [ 2613.944420][T21861] total_inactive_anon 0 [ 2613.948645][T21861] total_active_anon 0 [ 2613.952647][T21861] total_inactive_file 12288 [ 2613.957154][T21861] total_active_file 0 [ 2613.961146][T21861] total_unevictable 0 [ 2613.965105][T21861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21861,uid=0 [ 2613.980393][T21861] Memory cgroup out of memory: Killed process 21861 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2613.997772][T21872] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2614.009096][T21872] CPU: 0 PID: 21872 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2614.019507][T21872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2614.029635][T21872] Call Trace: [ 2614.033004][T21872] [ 2614.035929][T21872] dump_stack_lvl+0xda/0x130 [ 2614.040535][T21872] dump_stack+0x15/0x20 [ 2614.044701][T21872] dump_header+0x82/0x2d0 [ 2614.049035][T21872] oom_kill_process+0x33a/0x4c0 [ 2614.053935][T21872] out_of_memory+0x9ca/0xbf0 [ 2614.058531][T21872] mem_cgroup_out_of_memory+0x139/0x190 [ 2614.064125][T21872] try_charge_memcg+0x75c/0xd30 [ 2614.069039][T21872] ? __swap_duplicate+0x29b/0x2b0 [ 2614.074121][T21872] ? radix_tree_lookup+0xf9/0x150 [ 2614.079212][T21872] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2614.085393][T21872] __read_swap_cache_async+0x2f6/0x550 [ 2614.090929][T21872] swap_cluster_readahead+0x27c/0x4c0 [ 2614.096295][T21872] swapin_readahead+0xe9/0x7f0 [ 2614.101087][T21872] ? __filemap_get_folio+0x41a/0x5a0 [ 2614.106387][T21872] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2614.112034][T21872] ? swap_cache_get_folio+0x6e/0x200 [ 2614.117403][T21872] do_swap_page+0x4a0/0x1670 [ 2614.121983][T21872] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2614.127339][T21872] ? __rcu_read_lock+0x35/0x50 [ 2614.132090][T21872] ? pte_offset_map_nolock+0x124/0x1d0 [ 2614.137570][T21872] handle_mm_fault+0xa36/0x2dd0 [ 2614.142416][T21872] exc_page_fault+0x3ff/0x6c0 [ 2614.147082][T21872] asm_exc_page_fault+0x26/0x30 [ 2614.151990][T21872] RIP: 0033:0x7f50c0f6387c [ 2614.156393][T21872] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 35 f8 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 2614.176066][T21872] RSP: 002b:00007ffd61c03b70 EFLAGS: 00010286 [ 2614.182178][T21872] RAX: 0000000000000000 RBX: 00007f50c10c7018 RCX: 0000000000000000 [ 2614.190135][T21872] RDX: ffffffff83b076b4 RSI: 00007f50c092b008 RDI: 00007f50c10c7018 [ 2614.198114][T21872] RBP: 0000000083b07000 R08: 0000001b2d420000 R09: 0000000000000000 [ 2614.206075][T21872] R10: 0000000000000001 R11: 000000000007c28e R12: 0000000000000000 [ 2614.214033][T21872] R13: 0000000000000001 R14: 00007f50c10bb000 R15: ffffffff83b076b4 [ 2614.221994][T21872] ? __x64_sys_setsockopt+0x14/0x80 [ 2614.227184][T21872] ? __x64_sys_setsockopt+0x14/0x80 [ 2614.232395][T21872] [ 2614.235573][T21872] memory: usage 307084kB, limit 307200kB, failcnt 97601 [ 2614.242562][T21872] memory+swap: usage 308936kB, limit 9007199254740988kB, failcnt 0 [ 2614.250483][T21872] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 2614.257850][T21872] Memory cgroup stats for /syz3: [ 2614.259441][T21872] cache 16384 [ 2614.267684][T21872] rss 8192 [ 2614.270695][T21872] shmem 0 [ 2614.273708][T21872] mapped_file 0 [ 2614.277218][T21872] dirty 0 [ 2614.280140][T21872] writeback 0 [ 2614.283410][T21872] workingset_refault_anon 74574 [ 2614.288299][T21872] workingset_refault_file 320 [ 2614.292965][T21872] swap 1896448 [ 2614.296497][T21872] swapcached 0 [ 2614.299858][T21872] pgpgin 377811 [ 2614.303365][T21872] pgpgout 377805 [ 2614.306921][T21872] pgfault 562634 [ 2614.310455][T21872] pgmajfault 39455 [ 2614.314162][T21872] inactive_anon 0 [ 2614.317792][T21872] active_anon 8192 [ 2614.321565][T21872] inactive_file 12288 [ 2614.325530][T21872] active_file 4096 [ 2614.329283][T21872] unevictable 0 [ 2614.332733][T21872] hierarchical_memory_limit 314572800 [ 2614.338210][T21872] hierarchical_memsw_limit 9223372036854771712 [ 2614.344377][T21872] total_cache 16384 [ 2614.348189][T21872] total_rss 8192 [ 2614.351808][T21872] total_shmem 0 [ 2614.355254][T21872] total_mapped_file 0 [ 2614.359264][T21872] total_dirty 0 [ 2614.362807][T21872] total_writeback 0 [ 2614.366626][T21872] total_workingset_refault_anon 74574 [ 2614.372017][T21872] total_workingset_refault_file 320 [ 2614.377222][T21872] total_swap 1896448 [ 2614.381103][T21872] total_swapcached 0 [ 2614.385028][T21872] total_pgpgin 377811 [ 2614.389093][T21872] total_pgpgout 377805 [ 2614.393153][T21872] total_pgfault 562634 [ 2614.397243][T21872] total_pgmajfault 39455 [ 2614.401527][T21872] total_inactive_anon 0 [ 2614.405663][T21872] total_active_anon 8192 [ 2614.409922][T21872] total_inactive_file 12288 [ 2614.414513][T21872] total_active_file 4096 [ 2614.418793][T21872] total_unevictable 0 [ 2614.422766][T21872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21872,uid=0 [ 2614.438094][T21872] Memory cgroup out of memory: Killed process 21872 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2614.456044][T21858] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2614.469609][T21858] CPU: 1 PID: 21858 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2614.480031][T21858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2614.490128][T21858] Call Trace: [ 2614.493426][T21858] [ 2614.496343][T21858] dump_stack_lvl+0xda/0x130 [ 2614.500935][T21858] dump_stack+0x15/0x20 [ 2614.505085][T21858] dump_header+0x82/0x2d0 [ 2614.509485][T21858] oom_kill_process+0x33a/0x4c0 [ 2614.514363][T21858] out_of_memory+0x9ca/0xbf0 [ 2614.518949][T21858] mem_cgroup_out_of_memory+0x139/0x190 [ 2614.524535][T21858] try_charge_memcg+0x75c/0xd30 [ 2614.529414][T21858] obj_cgroup_charge_pages+0xab/0x130 [ 2614.534842][T21858] __memcg_kmem_charge_page+0x9c/0x170 [ 2614.540346][T21858] __alloc_pages+0x1bb/0x340 [ 2614.544956][T21858] alloc_pages_mpol+0xb1/0x1d0 [ 2614.549774][T21858] alloc_pages+0xe0/0x100 [ 2614.554174][T21858] __vmalloc_node_range+0x6d2/0xea0 [ 2614.559443][T21858] kvmalloc_node+0x121/0x160 [ 2614.564023][T21858] ? xt_alloc_table_info+0x3d/0x80 [ 2614.569180][T21858] xt_alloc_table_info+0x3d/0x80 [ 2614.574124][T21858] do_arpt_set_ctl+0x634/0x13b0 [ 2614.579004][T21858] ? __futex_wait+0x227/0x280 [ 2614.583676][T21858] ? __futex_wake_mark+0x70/0x70 [ 2614.588604][T21858] ? tcp_release_cb+0xfe/0x370 [ 2614.593390][T21858] ? _raw_spin_unlock_bh+0x36/0x40 [ 2614.598501][T21858] nf_setsockopt+0x18d/0x1b0 [ 2614.603200][T21858] ip_setsockopt+0xe6/0x100 [ 2614.607700][T21858] tcp_setsockopt+0x90/0xa0 [ 2614.612287][T21858] sock_common_setsockopt+0x61/0x70 [ 2614.617540][T21858] ? sock_common_recvmsg+0xe0/0xe0 [ 2614.622754][T21858] __sys_setsockopt+0x1d4/0x240 [ 2614.627624][T21858] __x64_sys_setsockopt+0x66/0x80 [ 2614.632706][T21858] do_syscall_64+0x44/0x110 [ 2614.637274][T21858] ? syscall_exit_to_user_mode+0x38/0x140 [ 2614.643005][T21858] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2614.648927][T21858] RIP: 0033:0x7f07d1466ba9 [ 2614.653329][T21858] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2614.673004][T21858] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2614.681435][T21858] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2614.689397][T21858] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2614.697355][T21858] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2614.705319][T21858] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2614.713307][T21858] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2614.721268][T21858] [ 2614.724423][T21858] memory: usage 307200kB, limit 307200kB, failcnt 199540 [ 2614.731607][T21858] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2614.739565][T21858] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2614.746848][T21858] Memory cgroup stats for /syz1: [ 2614.752367][T21858] cache 4096 [ 2614.760528][T21858] rss 8192 [ 2614.763544][T21858] shmem 0 [ 2614.766514][T21858] mapped_file 0 [ 2614.769960][T21858] dirty 0 [ 2614.772884][T21858] writeback 0 [ 2614.776157][T21858] workingset_refault_anon 90482 [ 2614.781027][T21858] workingset_refault_file 314 [ 2614.785713][T21858] swap 544768 [ 2614.789064][T21858] swapcached 0 [ 2614.792494][T21858] pgpgin 1999574 [ 2614.796029][T21858] pgpgout 1999571 [ 2614.799742][T21858] pgfault 2096267 [ 2614.803359][T21858] pgmajfault 39930 [ 2614.807076][T21858] inactive_anon 8192 [ 2614.810961][T21858] active_anon 0 [ 2614.814401][T21858] inactive_file 0 [ 2614.818033][T21858] active_file 4096 [ 2614.821740][T21858] unevictable 0 [ 2614.825187][T21858] hierarchical_memory_limit 314572800 [ 2614.830630][T21858] hierarchical_memsw_limit 9223372036854771712 [ 2614.836857][T21858] total_cache 4096 [ 2614.840654][T21858] total_rss 8192 [ 2614.844206][T21858] total_shmem 0 [ 2614.847664][T21858] total_mapped_file 0 [ 2614.851749][T21858] total_dirty 0 [ 2614.855197][T21858] total_writeback 0 [ 2614.859087][T21858] total_workingset_refault_anon 90482 [ 2614.864450][T21858] total_workingset_refault_file 314 [ 2614.869650][T21858] total_swap 544768 [ 2614.873457][T21858] total_swapcached 0 [ 2614.877372][T21858] total_pgpgin 1999574 [ 2614.881496][T21858] total_pgpgout 1999571 [ 2614.885694][T21858] total_pgfault 2096267 [ 2614.889909][T21858] total_pgmajfault 39930 [ 2614.894156][T21858] total_inactive_anon 8192 [ 2614.898597][T21858] total_active_anon 0 03:55:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2614.902627][T21858] total_inactive_file 0 [ 2614.906802][T21858] total_active_file 4096 [ 2614.911076][T21858] total_unevictable 0 [ 2614.915104][T21858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21857,uid=0 [ 2614.930416][T21858] Memory cgroup out of memory: Killed process 21857 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x7000000}, 0x0) 03:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x74}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfb35, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xc00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x9000000}, 0x0) [ 2615.123227][T21887] validate_nla: 13 callbacks suppressed [ 2615.123242][T21887] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2615.140737][T21891] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2615.150334][T21888] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x7a}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xd00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2615.179120][T21895] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xb000000}, 0x0) 03:55:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xe00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xf000000}, 0x0) [ 2615.228859][T21898] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2615.239551][T21899] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2615.255841][T21901] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2615.268528][T21904] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2615.296490][T21907] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2615.991341][T21889] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2616.004954][T21889] CPU: 1 PID: 21889 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2616.015381][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2616.025558][T21889] Call Trace: [ 2616.028840][T21889] [ 2616.031887][T21889] dump_stack_lvl+0xda/0x130 [ 2616.036565][T21889] dump_stack+0x15/0x20 [ 2616.040842][T21889] dump_header+0x82/0x2d0 [ 2616.045186][T21889] oom_kill_process+0x33a/0x4c0 [ 2616.050156][T21889] out_of_memory+0x9ca/0xbf0 [ 2616.054799][T21889] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2616.060924][T21889] mem_cgroup_out_of_memory+0x139/0x190 [ 2616.066465][T21889] try_charge_memcg+0x75c/0xd30 [ 2616.071332][T21889] obj_cgroup_charge_pages+0xab/0x130 [ 2616.076803][T21889] __memcg_kmem_charge_page+0x9c/0x170 [ 2616.082255][T21889] __alloc_pages+0x1bb/0x340 [ 2616.086878][T21889] alloc_pages_mpol+0xb1/0x1d0 [ 2616.091715][T21889] alloc_pages+0xe0/0x100 [ 2616.096063][T21889] __vmalloc_node_range+0x6d2/0xea0 [ 2616.101329][T21889] kvmalloc_node+0x121/0x160 [ 2616.105910][T21889] ? xt_alloc_table_info+0x3d/0x80 [ 2616.111123][T21889] xt_alloc_table_info+0x3d/0x80 [ 2616.116117][T21889] do_arpt_set_ctl+0x634/0x13b0 [ 2616.121008][T21889] ? __futex_wait+0x227/0x280 [ 2616.125684][T21889] ? __futex_wake_mark+0x70/0x70 [ 2616.130665][T21889] ? tcp_release_cb+0xfe/0x370 [ 2616.135414][T21889] ? _raw_spin_unlock_bh+0x36/0x40 [ 2616.140507][T21889] nf_setsockopt+0x18d/0x1b0 [ 2616.145087][T21889] ip_setsockopt+0xe6/0x100 [ 2616.149580][T21889] tcp_setsockopt+0x90/0xa0 [ 2616.154265][T21889] sock_common_setsockopt+0x61/0x70 [ 2616.159545][T21889] ? sock_common_recvmsg+0xe0/0xe0 [ 2616.164712][T21889] __sys_setsockopt+0x1d4/0x240 [ 2616.169727][T21889] __x64_sys_setsockopt+0x66/0x80 [ 2616.174775][T21889] do_syscall_64+0x44/0x110 [ 2616.179343][T21889] ? syscall_exit_to_user_mode+0x38/0x140 [ 2616.185067][T21889] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2616.190961][T21889] RIP: 0033:0x7ffbf0714ba9 [ 2616.195409][T21889] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2616.215090][T21889] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2616.223494][T21889] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2616.231535][T21889] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 03:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x1100, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2616.239555][T21889] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2616.247515][T21889] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2616.255467][T21889] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2616.263421][T21889] [ 2616.266595][T21889] memory: usage 307200kB, limit 307200kB, failcnt 50631 [ 2616.273516][T21889] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2616.281640][T21889] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2616.288959][T21889] Memory cgroup stats for /syz4: [ 2616.289107][T21889] cache 12288 [ 2616.297408][T21889] rss 0 [ 2616.299798][T21910] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2616.300215][T21889] shmem 0 [ 2616.312447][T21889] mapped_file 0 [ 2616.316336][T21889] dirty 0 [ 2616.319360][T21889] writeback 0 [ 2616.322673][T21889] workingset_refault_anon 64794 [ 2616.327595][T21889] workingset_refault_file 309 [ 2616.329971][T21911] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2616.332270][T21889] swap 4632576 [ 2616.332278][T21889] swapcached 8192 [ 2616.332285][T21889] pgpgin 891496 [ 2616.350833][T21889] pgpgout 891491 [ 2616.354371][T21889] pgfault 969887 [ 2616.357970][T21889] pgmajfault 33978 [ 2616.361716][T21889] inactive_anon 8192 [ 2616.365670][T21889] active_anon 0 [ 2616.369143][T21889] inactive_file 12288 [ 2616.373186][T21889] active_file 0 [ 2616.376664][T21889] unevictable 0 [ 2616.380109][T21889] hierarchical_memory_limit 314572800 [ 2616.385506][T21889] hierarchical_memsw_limit 9223372036854771712 [ 2616.391680][T21889] total_cache 12288 [ 2616.395485][T21889] total_rss 0 [ 2616.398777][T21889] total_shmem 0 [ 2616.402288][T21889] total_mapped_file 0 [ 2616.406272][T21889] total_dirty 0 [ 2616.409745][T21889] total_writeback 0 [ 2616.413529][T21889] total_workingset_refault_anon 64794 [ 2616.418931][T21889] total_workingset_refault_file 309 [ 2616.424115][T21889] total_swap 4632576 [ 2616.428036][T21889] total_swapcached 8192 [ 2616.432182][T21889] total_pgpgin 891496 [ 2616.436161][T21889] total_pgpgout 891491 [ 2616.440248][T21889] total_pgfault 969887 [ 2616.444311][T21889] total_pgmajfault 33978 [ 2616.448569][T21889] total_inactive_anon 8192 [ 2616.452966][T21889] total_active_anon 0 [ 2616.456946][T21889] total_inactive_file 12288 [ 2616.461433][T21889] total_active_file 0 [ 2616.465461][T21889] total_unevictable 0 [ 2616.469586][T21889] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21884,uid=0 [ 2616.484927][T21889] Memory cgroup out of memory: Killed process 21884 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2616.538228][T21894] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2616.551758][T21894] CPU: 0 PID: 21894 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2616.562177][T21894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2616.572263][T21894] Call Trace: [ 2616.575544][T21894] [ 2616.578471][T21894] dump_stack_lvl+0xda/0x130 [ 2616.583083][T21894] dump_stack+0x15/0x20 [ 2616.587348][T21894] dump_header+0x82/0x2d0 [ 2616.591720][T21894] oom_kill_process+0x33a/0x4c0 [ 2616.596573][T21894] out_of_memory+0x9ca/0xbf0 [ 2616.601289][T21894] mem_cgroup_out_of_memory+0x139/0x190 [ 2616.606851][T21894] try_charge_memcg+0x75c/0xd30 [ 2616.611976][T21894] obj_cgroup_charge_pages+0xab/0x130 [ 2616.617370][T21894] __memcg_kmem_charge_page+0x9c/0x170 [ 2616.622928][T21894] __alloc_pages+0x1bb/0x340 [ 2616.627538][T21894] alloc_pages_mpol+0xb1/0x1d0 [ 2616.632298][T21894] alloc_pages+0xe0/0x100 [ 2616.636692][T21894] __vmalloc_node_range+0x6d2/0xea0 [ 2616.641984][T21894] kvmalloc_node+0x121/0x160 [ 2616.646612][T21894] ? xt_alloc_table_info+0x3d/0x80 [ 2616.651739][T21894] xt_alloc_table_info+0x3d/0x80 [ 2616.656682][T21894] do_arpt_set_ctl+0x634/0x13b0 [ 2616.661552][T21894] ? __futex_wait+0x227/0x280 [ 2616.666294][T21894] ? __futex_wake_mark+0x70/0x70 [ 2616.671303][T21894] ? tcp_release_cb+0xfe/0x370 [ 2616.676160][T21894] ? _raw_spin_unlock_bh+0x36/0x40 [ 2616.681333][T21894] nf_setsockopt+0x18d/0x1b0 [ 2616.685933][T21894] ip_setsockopt+0xe6/0x100 [ 2616.690428][T21894] tcp_setsockopt+0x90/0xa0 [ 2616.694918][T21894] sock_common_setsockopt+0x61/0x70 [ 2616.700102][T21894] ? sock_common_recvmsg+0xe0/0xe0 [ 2616.705331][T21894] __sys_setsockopt+0x1d4/0x240 [ 2616.710165][T21894] __x64_sys_setsockopt+0x66/0x80 [ 2616.715178][T21894] do_syscall_64+0x44/0x110 [ 2616.719669][T21894] ? syscall_exit_to_user_mode+0x38/0x140 [ 2616.725378][T21894] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2616.731324][T21894] RIP: 0033:0x7f07d1466ba9 [ 2616.735717][T21894] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2616.755305][T21894] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2616.763698][T21894] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2616.771700][T21894] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2616.779672][T21894] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2616.787649][T21894] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2616.795729][T21894] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2616.803684][T21894] [ 2616.806880][T21894] memory: usage 307200kB, limit 307200kB, failcnt 199698 [ 2616.814246][T21894] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2616.822192][T21894] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2616.829527][T21894] Memory cgroup stats for /syz1: [ 2616.829836][T21894] cache 4096 [ 2616.838106][T21894] rss 8192 [ 2616.841122][T21894] shmem 0 [ 2616.844043][T21894] mapped_file 0 [ 2616.847522][T21894] dirty 0 [ 2616.850461][T21894] writeback 0 [ 2616.853749][T21894] workingset_refault_anon 90522 [ 2616.858622][T21894] workingset_refault_file 314 [ 2616.863329][T21894] swap 544768 [ 2616.866649][T21894] swapcached 4096 [ 2616.870273][T21894] pgpgin 1999637 [ 2616.873796][T21894] pgpgout 1999634 [ 2616.877480][T21894] pgfault 2096435 [ 2616.881108][T21894] pgmajfault 39952 [ 2616.884908][T21894] inactive_anon 8192 [ 2616.888826][T21894] active_anon 0 [ 2616.892297][T21894] inactive_file 4096 [ 2616.896165][T21894] active_file 0 [ 2616.899625][T21894] unevictable 0 [ 2616.903084][T21894] hierarchical_memory_limit 314572800 [ 2616.908464][T21894] hierarchical_memsw_limit 9223372036854771712 [ 2616.914670][T21894] total_cache 4096 [ 2616.918409][T21894] total_rss 8192 [ 2616.922032][T21894] total_shmem 0 [ 2616.925464][T21894] total_mapped_file 0 [ 2616.929453][T21894] total_dirty 0 [ 2616.932902][T21894] total_writeback 0 [ 2616.936699][T21894] total_workingset_refault_anon 90522 [ 2616.942057][T21894] total_workingset_refault_file 314 [ 2616.947288][T21894] total_swap 544768 [ 2616.951081][T21894] total_swapcached 4096 [ 2616.955223][T21894] total_pgpgin 1999637 [ 2616.959736][T21894] total_pgpgout 1999634 [ 2616.963885][T21894] total_pgfault 2096435 [ 2616.968045][T21894] total_pgmajfault 39952 [ 2616.972345][T21894] total_inactive_anon 8192 [ 2616.976759][T21894] total_active_anon 0 [ 2616.980786][T21894] total_inactive_file 4096 [ 2616.985313][T21894] total_active_file 0 [ 2616.989380][T21894] total_unevictable 0 [ 2616.993348][T21894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21892,uid=0 [ 2617.008972][T21894] Memory cgroup out of memory: Killed process 21892 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x20000000}, 0x0) 03:55:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfc35, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x1200, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xda450000}, 0x0) 03:55:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2617.201841][T21921] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2617.211112][T21919] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2617.226431][T21913] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2617.241081][T21925] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x2000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xeaffffff}, 0x0) 03:55:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2617.298863][T21932] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2618.070758][T21918] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2618.082197][T21918] CPU: 1 PID: 21918 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2618.092610][T21918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2618.102736][T21918] Call Trace: [ 2618.106014][T21918] [ 2618.108944][T21918] dump_stack_lvl+0xda/0x130 [ 2618.113556][T21918] dump_stack+0x15/0x20 [ 2618.117736][T21918] dump_header+0x82/0x2d0 [ 2618.122066][T21918] oom_kill_process+0x33a/0x4c0 [ 2618.126905][T21918] out_of_memory+0x9ca/0xbf0 [ 2618.131492][T21918] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2618.137548][T21918] mem_cgroup_out_of_memory+0x139/0x190 [ 2618.143117][T21918] try_charge_memcg+0x75c/0xd30 [ 2618.148032][T21918] ? __swap_duplicate+0x29b/0x2b0 [ 2618.153069][T21918] ? radix_tree_lookup+0xf9/0x150 [ 2618.158153][T21918] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2618.164264][T21918] __read_swap_cache_async+0x2f6/0x550 [ 2618.169804][T21918] swap_cluster_readahead+0x27c/0x4c0 [ 2618.175237][T21918] swapin_readahead+0xe9/0x7f0 [ 2618.180018][T21918] ? __filemap_get_folio+0x41a/0x5a0 [ 2618.185283][T21918] ? __perf_event_task_sched_in+0x769/0x790 [ 2618.191211][T21918] ? swap_cache_get_folio+0x6e/0x200 [ 2618.196606][T21918] do_swap_page+0x4a0/0x1670 [ 2618.201179][T21918] ? __rcu_read_lock+0x35/0x50 [ 2618.205924][T21918] ? pte_offset_map_nolock+0x124/0x1d0 [ 2618.211448][T21918] handle_mm_fault+0xa36/0x2dd0 [ 2618.216281][T21918] ? mt_find+0x1d9/0x310 [ 2618.220570][T21918] exc_page_fault+0x2f7/0x6c0 [ 2618.225313][T21918] asm_exc_page_fault+0x26/0x30 [ 2618.230204][T21918] RIP: 0010:__get_user_8+0x11/0x20 [ 2618.235314][T21918] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2618.254996][T21918] RSP: 0018:ffffc90000d37e38 EFLAGS: 00050202 [ 2618.261045][T21918] RAX: 0000555557356da8 RBX: ffffc90000d37e40 RCX: ffffffff81443e13 [ 2618.269053][T21918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881cbf92a50 [ 2618.277006][T21918] RBP: ffffc90000d37ef8 R08: 00018881cbf92a57 R09: 0000000000000000 [ 2618.284983][T21918] R10: 0001ffffffffffff R11: 00018881cbf92710 R12: ffff8881cbf92080 [ 2618.292949][T21918] R13: ffff8881cbf92a50 R14: ffffc90000d37f58 R15: ffffc90000d37fd8 [ 2618.300959][T21918] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2618.306847][T21918] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2618.312691][T21918] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2618.318567][T21918] exit_to_user_mode_loop+0xcc/0xe0 [ 2618.323820][T21918] exit_to_user_mode_prepare+0x6c/0xb0 [ 2618.329454][T21918] irqentry_exit_to_user_mode+0x9/0x20 [ 2618.335072][T21918] irqentry_exit+0x12/0x40 [ 2618.339469][T21918] asm_exc_page_fault+0x26/0x30 [ 2618.344369][T21918] RIP: 0033:0x7f50c0f638e7 [ 2618.348766][T21918] Code: 25 ff 0f 00 00 09 c5 80 3d de cd c8 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 2618.368425][T21918] RSP: 002b:00007ffd61c03b70 EFLAGS: 00010202 [ 2618.374478][T21918] RAX: 00000000819449e9 RBX: 00007f50c10c7018 RCX: 0000000000000008 [ 2618.382442][T21918] RDX: ffffffff81944a42 RSI: 0000000080000000 RDI: 000000000001fbbc [ 2618.390479][T21918] RBP: 00000000819449e9 R08: 0000001b2d420000 R09: 00000000000009e9 [ 2618.398457][T21918] R10: 00000000819449ed R11: 000000000007c5b0 R12: 0000000000000008 [ 2618.406419][T21918] R13: 0000000000000001 R14: 00007f50c10bb000 R15: ffffffff81944a42 [ 2618.414398][T21918] ? avc_has_perm+0x32/0x150 [ 2618.418985][T21918] ? avc_has_perm+0x32/0x150 [ 2618.423555][T21918] [ 2618.426670][T21918] memory: usage 307200kB, limit 307200kB, failcnt 97775 [ 2618.433650][T21918] memory+swap: usage 309048kB, limit 9007199254740988kB, failcnt 0 [ 2618.441585][T21918] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2618.448905][T21918] Memory cgroup stats for /syz3: [ 2618.449146][T21918] cache 16384 [ 2618.457462][T21918] rss 8192 [ 2618.460474][T21918] shmem 0 [ 2618.463388][T21918] mapped_file 0 [ 2618.466871][T21918] dirty 0 [ 2618.469800][T21918] writeback 12288 [ 2618.473486][T21918] workingset_refault_anon 74656 [ 2618.478354][T21918] workingset_refault_file 320 [ 2618.483123][T21918] swap 1892352 [ 2618.486532][T21918] swapcached 12288 [ 2618.490264][T21918] pgpgin 377939 [ 2618.493712][T21918] pgpgout 377932 [ 2618.497253][T21918] pgfault 562957 [ 2618.500797][T21918] pgmajfault 39503 [ 2618.504496][T21918] inactive_anon 0 [ 2618.508122][T21918] active_anon 0 [ 2618.511569][T21918] inactive_file 12288 [ 2618.515544][T21918] active_file 4096 [ 2618.519291][T21918] unevictable 0 [ 2618.522734][T21918] hierarchical_memory_limit 314572800 [ 2618.528164][T21918] hierarchical_memsw_limit 9223372036854771712 [ 2618.534303][T21918] total_cache 16384 [ 2618.538113][T21918] total_rss 8192 [ 2618.541644][T21918] total_shmem 0 [ 2618.545077][T21918] total_mapped_file 0 [ 2618.549137][T21918] total_dirty 0 [ 2618.552587][T21918] total_writeback 12288 [ 2618.556752][T21918] total_workingset_refault_anon 74656 [ 2618.562108][T21918] total_workingset_refault_file 320 [ 2618.567297][T21918] total_swap 1892352 [ 2618.571259][T21918] total_swapcached 12288 [ 2618.575576][T21918] total_pgpgin 377939 [ 2618.579571][T21918] total_pgpgout 377932 [ 2618.583651][T21918] total_pgfault 562957 [ 2618.587717][T21918] total_pgmajfault 39503 [ 2618.591966][T21918] total_inactive_anon 0 [ 2618.596138][T21918] total_active_anon 0 [ 2618.600168][T21918] total_inactive_file 12288 [ 2618.604655][T21918] total_active_file 4096 [ 2618.608942][T21918] total_unevictable 0 [ 2618.612906][T21918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21918,uid=0 [ 2618.628239][T21918] Memory cgroup out of memory: Killed process 21918 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2618.645799][T21922] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2618.657151][T21922] CPU: 0 PID: 21922 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2618.667617][T21922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2618.677715][T21922] Call Trace: [ 2618.680992][T21922] [ 2618.683916][T21922] dump_stack_lvl+0xda/0x130 [ 2618.688515][T21922] dump_stack+0x15/0x20 [ 2618.692674][T21922] dump_header+0x82/0x2d0 [ 2618.697069][T21922] oom_kill_process+0x33a/0x4c0 [ 2618.701929][T21922] out_of_memory+0x9ca/0xbf0 [ 2618.706597][T21922] mem_cgroup_out_of_memory+0x139/0x190 [ 2618.712233][T21922] try_charge_memcg+0x75c/0xd30 [ 2618.717216][T21922] ? __swap_duplicate+0x29b/0x2b0 [ 2618.722246][T21922] ? radix_tree_lookup+0xf9/0x150 [ 2618.727270][T21922] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2618.733467][T21922] __read_swap_cache_async+0x2f6/0x550 [ 2618.738920][T21922] swap_cluster_readahead+0x27c/0x4c0 [ 2618.744303][T21922] swapin_readahead+0xe9/0x7f0 [ 2618.749053][T21922] ? __filemap_get_folio+0x41a/0x5a0 [ 2618.754398][T21922] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2618.760032][T21922] ? swap_cache_get_folio+0x6e/0x200 [ 2618.765393][T21922] do_swap_page+0x4a0/0x1670 [ 2618.769990][T21922] ? __rcu_read_lock+0x35/0x50 [ 2618.774824][T21922] ? pte_offset_map_nolock+0x124/0x1d0 [ 2618.780274][T21922] handle_mm_fault+0xa36/0x2dd0 [ 2618.785113][T21922] ? mt_find+0x1d9/0x310 [ 2618.789342][T21922] exc_page_fault+0x2f7/0x6c0 [ 2618.794007][T21922] asm_exc_page_fault+0x26/0x30 [ 2618.798901][T21922] RIP: 0010:__get_user_8+0x11/0x20 [ 2618.804054][T21922] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2618.823701][T21922] RSP: 0018:ffffc90000e57df8 EFLAGS: 00050202 [ 2618.829822][T21922] RAX: 000055555595bda8 RBX: ffffc90000e57e00 RCX: ffffffff81443e13 [ 2618.837836][T21922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888136871a10 [ 2618.845790][T21922] RBP: ffffc90000e57ec0 R08: 0001888136871a17 R09: 0000000000000000 [ 2618.853793][T21922] R10: 0001ffffffffffff R11: 000000000000249a R12: ffff888136871040 [ 2618.861816][T21922] R13: ffff888136871a10 R14: ffffc90000e57f58 R15: ffffc90000e57fd8 [ 2618.869773][T21922] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2618.875745][T21922] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2618.881493][T21922] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 2618.887554][T21922] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2618.893494][T21922] ? common_nsleep+0x68/0x80 [ 2618.898075][T21922] exit_to_user_mode_loop+0xcc/0xe0 [ 2618.903300][T21922] exit_to_user_mode_prepare+0x6c/0xb0 [ 2618.908803][T21922] syscall_exit_to_user_mode+0x26/0x140 [ 2618.914333][T21922] do_syscall_64+0x50/0x110 [ 2618.918831][T21922] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2618.924739][T21922] RIP: 0033:0x7f07d1491fb5 [ 2618.929145][T21922] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2618.948805][T21922] RSP: 002b:00007fffaf03b8a0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2618.957213][T21922] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 00007f07d1491fb5 [ 2618.965175][T21922] RDX: 00007fffaf03b8e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2618.973211][T21922] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2618.981167][T21922] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000027f2db [ 2618.989123][T21922] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027ef9a [ 2618.997140][T21922] [ 2619.000179][T21922] memory: usage 307200kB, limit 307200kB, failcnt 199871 [ 2619.007329][T21922] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2619.015260][T21922] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2619.022607][T21922] Memory cgroup stats for /syz1: [ 2619.035702][T21922] cache 4096 [ 2619.043861][T21922] rss 0 [ 2619.046641][T21922] shmem 0 [ 2619.049562][T21922] mapped_file 0 [ 2619.053009][T21922] dirty 0 [ 2619.056002][T21922] writeback 0 [ 2619.059291][T21922] workingset_refault_anon 90559 [ 2619.064121][T21922] workingset_refault_file 314 [ 2619.068877][T21922] swap 552960 [ 2619.072151][T21922] swapcached 0 [ 2619.075507][T21922] pgpgin 1999697 [ 2619.079052][T21922] pgpgout 1999696 [ 2619.082704][T21922] pgfault 2096672 [ 2619.086385][T21922] pgmajfault 39967 [ 2619.090178][T21922] inactive_anon 0 [ 2619.093802][T21922] active_anon 0 [ 2619.097268][T21922] inactive_file 0 [ 2619.100912][T21922] active_file 4096 [ 2619.104759][T21922] unevictable 0 [ 2619.108318][T21922] hierarchical_memory_limit 314572800 [ 2619.113710][T21922] hierarchical_memsw_limit 9223372036854771712 [ 2619.119925][T21922] total_cache 4096 [ 2619.123707][T21922] total_rss 0 [ 2619.127150][T21922] total_shmem 0 [ 2619.130605][T21922] total_mapped_file 0 [ 2619.134633][T21922] total_dirty 0 [ 2619.138104][T21922] total_writeback 0 [ 2619.142028][T21922] total_workingset_refault_anon 90559 [ 2619.147408][T21922] total_workingset_refault_file 314 [ 2619.152590][T21922] total_swap 552960 [ 2619.156424][T21922] total_swapcached 0 [ 2619.160315][T21922] total_pgpgin 1999697 [ 2619.164360][T21922] total_pgpgout 1999696 [ 2619.168528][T21922] total_pgfault 2096672 [ 2619.172659][T21922] total_pgmajfault 39967 [ 2619.176911][T21922] total_inactive_anon 0 [ 2619.181068][T21922] total_active_anon 0 03:55:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x22]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2619.185075][T21922] total_inactive_file 0 [ 2619.189249][T21922] total_active_file 4096 [ 2619.193464][T21922] total_unevictable 0 [ 2619.197499][T21922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21922,uid=0 [ 2619.212722][T21922] Memory cgroup out of memory: Killed process 21922 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:55:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xf0ffffff}, 0x0) 03:55:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x2500, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfd35, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xfeffffff}, 0x0) 03:55:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x313b, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2619.430594][T21945] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xffffff7f}, 0x0) 03:55:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xffffffea}, 0x0) [ 2619.521248][T21958] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2619.999281][T21938] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2620.012974][T21938] CPU: 1 PID: 21938 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2620.023399][T21938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2620.033454][T21938] Call Trace: [ 2620.036732][T21938] [ 2620.039656][T21938] dump_stack_lvl+0xda/0x130 [ 2620.044260][T21938] dump_stack+0x15/0x20 [ 2620.048489][T21938] dump_header+0x82/0x2d0 [ 2620.052829][T21938] oom_kill_process+0x33a/0x4c0 [ 2620.057860][T21938] out_of_memory+0x9ca/0xbf0 [ 2620.062520][T21938] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2620.068615][T21938] mem_cgroup_out_of_memory+0x139/0x190 [ 2620.074179][T21938] try_charge_memcg+0x75c/0xd30 [ 2620.079046][T21938] ? obj_cgroup_charge_pages+0x31/0x130 [ 2620.084606][T21938] obj_cgroup_charge_pages+0xab/0x130 [ 2620.090129][T21938] __memcg_kmem_charge_page+0x9c/0x170 [ 2620.095725][T21938] __alloc_pages+0x1bb/0x340 [ 2620.100321][T21938] alloc_pages_mpol+0xb1/0x1d0 [ 2620.105135][T21938] alloc_pages+0xe0/0x100 [ 2620.109467][T21938] __vmalloc_node_range+0x6d2/0xea0 [ 2620.114741][T21938] kvmalloc_node+0x121/0x160 [ 2620.119381][T21938] ? xt_alloc_table_info+0x3d/0x80 [ 2620.124563][T21938] xt_alloc_table_info+0x3d/0x80 [ 2620.129501][T21938] do_arpt_set_ctl+0x634/0x13b0 [ 2620.134363][T21938] ? __futex_wait+0x227/0x280 [ 2620.139091][T21938] ? __futex_wake_mark+0x70/0x70 [ 2620.144106][T21938] ? tcp_release_cb+0xfe/0x370 [ 2620.148882][T21938] ? _raw_spin_unlock_bh+0x36/0x40 [ 2620.154007][T21938] nf_setsockopt+0x18d/0x1b0 [ 2620.158688][T21938] ip_setsockopt+0xe6/0x100 [ 2620.163265][T21938] tcp_setsockopt+0x90/0xa0 [ 2620.167772][T21938] sock_common_setsockopt+0x61/0x70 [ 2620.173023][T21938] ? sock_common_recvmsg+0xe0/0xe0 [ 2620.178158][T21938] __sys_setsockopt+0x1d4/0x240 [ 2620.183027][T21938] __x64_sys_setsockopt+0x66/0x80 [ 2620.188089][T21938] do_syscall_64+0x44/0x110 [ 2620.192725][T21938] ? syscall_exit_to_user_mode+0x38/0x140 [ 2620.198517][T21938] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2620.204427][T21938] RIP: 0033:0x7f50c0fa7ba9 [ 2620.208854][T21938] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2620.228471][T21938] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2620.236901][T21938] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2620.244980][T21938] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2620.252999][T21938] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2620.261000][T21938] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2620.269053][T21938] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2620.277027][T21938] [ 2620.280203][T21938] memory: usage 307200kB, limit 307200kB, failcnt 98114 [ 2620.287221][T21938] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2620.295164][T21938] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2620.302638][T21938] Memory cgroup stats for /syz3: [ 2620.346628][T21938] cache 16384 [ 2620.354841][T21938] rss 8192 [ 2620.357961][T21938] shmem 0 [ 2620.360889][T21938] mapped_file 0 [ 2620.364459][T21938] dirty 0 [ 2620.367407][T21938] writeback 8192 [ 2620.370981][T21938] workingset_refault_anon 74678 [ 2620.375860][T21938] workingset_refault_file 320 [ 2620.380570][T21938] swap 1896448 [ 2620.383928][T21938] swapcached 8192 [ 2620.387615][T21938] pgpgin 377984 [ 2620.391101][T21938] pgpgout 377978 [ 2620.394662][T21938] pgfault 563136 [ 2620.398228][T21938] pgmajfault 39512 [ 2620.401964][T21938] inactive_anon 0 [ 2620.405582][T21938] active_anon 0 [ 2620.409108][T21938] inactive_file 4096 [ 2620.412994][T21938] active_file 12288 [ 2620.416874][T21938] unevictable 0 [ 2620.420401][T21938] hierarchical_memory_limit 314572800 [ 2620.425763][T21938] hierarchical_memsw_limit 9223372036854771712 [ 2620.431949][T21938] total_cache 16384 [ 2620.435739][T21938] total_rss 8192 [ 2620.439301][T21938] total_shmem 0 [ 2620.442751][T21938] total_mapped_file 0 [ 2620.446729][T21938] total_dirty 0 [ 2620.450173][T21938] total_writeback 8192 [ 2620.454239][T21938] total_workingset_refault_anon 74678 [ 2620.459624][T21938] total_workingset_refault_file 320 [ 2620.464909][T21938] total_swap 1896448 [ 2620.468821][T21938] total_swapcached 8192 [ 2620.473083][T21938] total_pgpgin 377984 [ 2620.477079][T21938] total_pgpgout 377978 [ 2620.481167][T21938] total_pgfault 563136 [ 2620.485257][T21938] total_pgmajfault 39512 [ 2620.489514][T21938] total_inactive_anon 0 [ 2620.493686][T21938] total_active_anon 0 [ 2620.497698][T21938] total_inactive_file 4096 [ 2620.502237][T21938] total_active_file 12288 [ 2620.506603][T21938] total_unevictable 0 [ 2620.510627][T21938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21937,uid=0 [ 2620.526076][T21938] Memory cgroup out of memory: Killed process 21937 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:55:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xfffffff0}, 0x0) 03:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x3b31, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:55:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfdff, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:55:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xfffffffe}, 0x0) [ 2620.726574][T21968] validate_nla: 11 callbacks suppressed [ 2620.726590][T21968] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2620.743876][T21972] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2620.757123][T21975] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x4363, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x40030000000000}, 0x0) [ 2620.791377][T21977] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2620.820177][T21980] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0xb}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:55:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x457e, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2620.840475][T21982] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2620.857011][T21984] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x100000000000000}, 0x0) 03:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0xc}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2620.886167][T21986] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2620.906195][T21988] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2620.927066][T21990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:55:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x4800, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2620.949870][T21992] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2621.046747][T21994] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2621.539926][T21967] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2621.551346][T21967] CPU: 1 PID: 21967 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2621.561759][T21967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2621.571900][T21967] Call Trace: [ 2621.575244][T21967] [ 2621.578199][T21967] dump_stack_lvl+0xda/0x130 [ 2621.582806][T21967] dump_stack+0x15/0x20 [ 2621.586996][T21967] dump_header+0x82/0x2d0 [ 2621.591352][T21967] oom_kill_process+0x33a/0x4c0 [ 2621.596335][T21967] out_of_memory+0x9ca/0xbf0 [ 2621.600960][T21967] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2621.607042][T21967] mem_cgroup_out_of_memory+0x139/0x190 [ 2621.612623][T21967] try_charge_memcg+0x75c/0xd30 [ 2621.617475][T21967] ? __swap_duplicate+0x29b/0x2b0 [ 2621.622503][T21967] ? radix_tree_lookup+0xf9/0x150 [ 2621.627550][T21967] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2621.633674][T21967] __read_swap_cache_async+0x2f6/0x550 [ 2621.639166][T21967] swap_cluster_readahead+0x27c/0x4c0 [ 2621.644569][T21967] swapin_readahead+0xe9/0x7f0 [ 2621.649342][T21967] ? __filemap_get_folio+0x41a/0x5a0 [ 2621.654685][T21967] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2621.660480][T21967] ? swap_cache_get_folio+0x6e/0x200 [ 2621.665788][T21967] do_swap_page+0x4a0/0x1670 [ 2621.670387][T21967] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2621.675806][T21967] ? __rcu_read_lock+0x35/0x50 [ 2621.680667][T21967] ? pte_offset_map_nolock+0x124/0x1d0 [ 2621.686381][T21967] handle_mm_fault+0xa36/0x2dd0 [ 2621.691373][T21967] exc_page_fault+0x3ff/0x6c0 [ 2621.696057][T21967] asm_exc_page_fault+0x26/0x30 [ 2621.700918][T21967] RIP: 0033:0x7f07d1420bc4 [ 2621.705331][T21967] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2621.725008][T21967] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2621.731124][T21967] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2621.739188][T21967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2621.747160][T21967] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2621.755131][T21967] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000280070 [ 2621.763100][T21967] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000027fd2f [ 2621.771077][T21967] [ 2621.774223][T21967] memory: usage 307200kB, limit 307200kB, failcnt 200010 [ 2621.781358][T21967] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2621.789260][T21967] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2621.796662][T21967] Memory cgroup stats for /syz1: [ 2621.796850][T21967] cache 4096 [ 2621.805079][T21967] rss 8192 [ 2621.808130][T21967] shmem 0 [ 2621.811064][T21967] mapped_file 0 [ 2621.814500][T21967] dirty 0 [ 2621.817475][T21967] writeback 8192 [ 2621.821037][T21967] workingset_refault_anon 90602 [ 2621.825950][T21967] workingset_refault_file 314 [ 2621.830687][T21967] swap 544768 [ 2621.834000][T21967] swapcached 8192 [ 2621.837747][T21967] pgpgin 1999786 [ 2621.841338][T21967] pgpgout 1999783 [ 2621.845051][T21967] pgfault 2096919 [ 2621.848693][T21967] pgmajfault 39987 [ 2621.852460][T21967] inactive_anon 0 [ 2621.856134][T21967] active_anon 0 [ 2621.859704][T21967] inactive_file 0 [ 2621.863319][T21967] active_file 4096 [ 2621.867082][T21967] unevictable 0 [ 2621.870607][T21967] hierarchical_memory_limit 314572800 [ 2621.875997][T21967] hierarchical_memsw_limit 9223372036854771712 [ 2621.882180][T21967] total_cache 4096 [ 2621.885936][T21967] total_rss 8192 [ 2621.889523][T21967] total_shmem 0 [ 2621.893054][T21967] total_mapped_file 0 [ 2621.897056][T21967] total_dirty 0 [ 2621.900507][T21967] total_writeback 8192 [ 2621.904570][T21967] total_workingset_refault_anon 90602 [ 2621.909944][T21967] total_workingset_refault_file 314 [ 2621.915127][T21967] total_swap 544768 [ 2621.919007][T21967] total_swapcached 8192 [ 2621.923140][T21967] total_pgpgin 1999786 [ 2621.927197][T21967] total_pgpgout 1999783 [ 2621.931333][T21967] total_pgfault 2096919 [ 2621.935522][T21967] total_pgmajfault 39987 [ 2621.939761][T21967] total_inactive_anon 0 [ 2621.943966][T21967] total_active_anon 0 [ 2621.947984][T21967] total_inactive_file 0 [ 2621.952123][T21967] total_active_file 4096 [ 2621.956406][T21967] total_unevictable 0 [ 2621.960370][T21967] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21967,uid=0 [ 2621.975603][T21967] Memory cgroup out of memory: Killed process 21967 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2621.993101][T21974] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2622.006628][T21974] CPU: 0 PID: 21974 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2622.017047][T21974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2622.027096][T21974] Call Trace: [ 2622.030447][T21974] [ 2622.033403][T21974] dump_stack_lvl+0xda/0x130 [ 2622.038001][T21974] dump_stack+0x15/0x20 [ 2622.042236][T21974] dump_header+0x82/0x2d0 [ 2622.046574][T21974] oom_kill_process+0x33a/0x4c0 [ 2622.051490][T21974] out_of_memory+0x9ca/0xbf0 [ 2622.056091][T21974] mem_cgroup_out_of_memory+0x139/0x190 [ 2622.061638][T21974] try_charge_memcg+0x75c/0xd30 [ 2622.066561][T21974] obj_cgroup_charge_pages+0xab/0x130 [ 2622.071936][T21974] __memcg_kmem_charge_page+0x9c/0x170 [ 2622.077458][T21974] __alloc_pages+0x1bb/0x340 [ 2622.082041][T21974] alloc_pages_mpol+0xb1/0x1d0 [ 2622.086816][T21974] alloc_pages+0xe0/0x100 [ 2622.091186][T21974] __vmalloc_node_range+0x6d2/0xea0 [ 2622.096457][T21974] kvmalloc_node+0x121/0x160 [ 2622.101055][T21974] ? xt_alloc_table_info+0x3d/0x80 [ 2622.106175][T21974] xt_alloc_table_info+0x3d/0x80 [ 2622.111175][T21974] do_arpt_set_ctl+0x634/0x13b0 [ 2622.116020][T21974] ? __futex_wait+0x227/0x280 [ 2622.120689][T21974] ? __futex_wake_mark+0x70/0x70 [ 2622.125656][T21974] ? tcp_release_cb+0xfe/0x370 [ 2622.130412][T21974] ? _raw_spin_unlock_bh+0x36/0x40 [ 2622.135562][T21974] nf_setsockopt+0x18d/0x1b0 [ 2622.140147][T21974] ip_setsockopt+0xe6/0x100 [ 2622.144698][T21974] tcp_setsockopt+0x90/0xa0 [ 2622.149283][T21974] sock_common_setsockopt+0x61/0x70 [ 2622.154584][T21974] ? sock_common_recvmsg+0xe0/0xe0 [ 2622.159689][T21974] __sys_setsockopt+0x1d4/0x240 [ 2622.164528][T21974] __x64_sys_setsockopt+0x66/0x80 [ 2622.169551][T21974] do_syscall_64+0x44/0x110 [ 2622.174107][T21974] ? syscall_exit_to_user_mode+0x38/0x140 [ 2622.179822][T21974] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2622.185765][T21974] RIP: 0033:0x7f50c0fa7ba9 [ 2622.190169][T21974] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2622.209822][T21974] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2622.218363][T21974] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2622.226378][T21974] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2622.234355][T21974] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2622.242311][T21974] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2622.250326][T21974] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2622.258304][T21974] [ 2622.261414][T21974] memory: usage 307200kB, limit 307200kB, failcnt 98355 [ 2622.268381][T21974] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2622.276265][T21974] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2622.283605][T21974] Memory cgroup stats for /syz3: [ 2622.285065][T21974] cache 16384 [ 2622.293361][T21974] rss 8192 [ 2622.296454][T21974] shmem 0 [ 2622.299382][T21974] mapped_file 0 [ 2622.302886][T21974] dirty 0 [ 2622.305896][T21974] writeback 0 [ 2622.309206][T21974] workingset_refault_anon 74734 [ 2622.314134][T21974] workingset_refault_file 320 [ 2622.318869][T21974] swap 1896448 [ 2622.322231][T21974] swapcached 8192 [ 2622.325864][T21974] pgpgin 378063 [ 2622.329334][T21974] pgpgout 378057 [ 2622.332946][T21974] pgfault 563389 [ 2622.336502][T21974] pgmajfault 39527 [ 2622.340279][T21974] inactive_anon 8192 [ 2622.344164][T21974] active_anon 0 [ 2622.347652][T21974] inactive_file 4096 [ 2622.351621][T21974] active_file 12288 [ 2622.355446][T21974] unevictable 0 [ 2622.359024][T21974] hierarchical_memory_limit 314572800 [ 2622.364389][T21974] hierarchical_memsw_limit 9223372036854771712 [ 2622.370574][T21974] total_cache 16384 [ 2622.374369][T21974] total_rss 8192 [ 2622.378072][T21974] total_shmem 0 [ 2622.381519][T21974] total_mapped_file 0 [ 2622.385485][T21974] total_dirty 0 [ 2622.389000][T21974] total_writeback 0 [ 2622.392881][T21974] total_workingset_refault_anon 74734 [ 2622.398269][T21974] total_workingset_refault_file 320 [ 2622.403453][T21974] total_swap 1896448 [ 2622.407368][T21974] total_swapcached 8192 [ 2622.411522][T21974] total_pgpgin 378063 [ 2622.415534][T21974] total_pgpgout 378057 [ 2622.419610][T21974] total_pgfault 563389 [ 2622.423720][T21974] total_pgmajfault 39527 [ 2622.428007][T21974] total_inactive_anon 8192 [ 2622.432430][T21974] total_active_anon 0 [ 2622.436425][T21974] total_inactive_file 4096 [ 2622.440851][T21974] total_active_file 12288 [ 2622.445166][T21974] total_unevictable 0 [ 2622.449197][T21974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21971,uid=0 [ 2622.464502][T21974] Memory cgroup out of memory: Killed process 21971 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2622.482083][T21966] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2622.495642][T21966] CPU: 1 PID: 21966 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2622.506067][T21966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2622.516121][T21966] Call Trace: [ 2622.519401][T21966] [ 2622.522385][T21966] dump_stack_lvl+0xda/0x130 [ 2622.527010][T21966] dump_stack+0x15/0x20 [ 2622.531185][T21966] dump_header+0x82/0x2d0 [ 2622.535591][T21966] oom_kill_process+0x33a/0x4c0 [ 2622.540507][T21966] out_of_memory+0x9ca/0xbf0 [ 2622.545171][T21966] mem_cgroup_out_of_memory+0x139/0x190 [ 2622.550745][T21966] try_charge_memcg+0x75c/0xd30 [ 2622.555601][T21966] obj_cgroup_charge_pages+0xab/0x130 [ 2622.560986][T21966] __memcg_kmem_charge_page+0x9c/0x170 [ 2622.566452][T21966] __alloc_pages+0x1bb/0x340 [ 2622.571114][T21966] alloc_pages_mpol+0xb1/0x1d0 [ 2622.575885][T21966] alloc_pages+0xe0/0x100 [ 2622.580250][T21966] __vmalloc_node_range+0x6d2/0xea0 [ 2622.585567][T21966] kvmalloc_node+0x121/0x160 [ 2622.590151][T21966] ? xt_alloc_table_info+0x3d/0x80 [ 2622.595300][T21966] xt_alloc_table_info+0x3d/0x80 [ 2622.600268][T21966] do_arpt_set_ctl+0x634/0x13b0 [ 2622.605218][T21966] ? __futex_wait+0x227/0x280 [ 2622.609889][T21966] ? __futex_wake_mark+0x70/0x70 [ 2622.614819][T21966] ? tcp_release_cb+0xfe/0x370 [ 2622.619594][T21966] ? _raw_spin_unlock_bh+0x36/0x40 [ 2622.624744][T21966] nf_setsockopt+0x18d/0x1b0 [ 2622.629333][T21966] ip_setsockopt+0xe6/0x100 [ 2622.633885][T21966] tcp_setsockopt+0x90/0xa0 [ 2622.638378][T21966] sock_common_setsockopt+0x61/0x70 [ 2622.643597][T21966] ? sock_common_recvmsg+0xe0/0xe0 [ 2622.648707][T21966] __sys_setsockopt+0x1d4/0x240 [ 2622.653712][T21966] __x64_sys_setsockopt+0x66/0x80 [ 2622.658775][T21966] do_syscall_64+0x44/0x110 [ 2622.663313][T21966] ? syscall_exit_to_user_mode+0x38/0x140 [ 2622.669025][T21966] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2622.674912][T21966] RIP: 0033:0x7ffbf0714ba9 [ 2622.679316][T21966] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2622.698935][T21966] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2622.707336][T21966] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2622.715408][T21966] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2622.723366][T21966] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2622.731415][T21966] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2622.739376][T21966] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2622.747341][T21966] [ 2622.750465][T21966] memory: usage 307200kB, limit 307200kB, failcnt 50904 [ 2622.757535][T21966] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2622.765414][T21966] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2622.772703][T21966] Memory cgroup stats for /syz4: [ 2622.776268][T21966] cache 12288 [ 2622.784637][T21966] rss 8192 [ 2622.787737][T21966] shmem 0 [ 2622.790742][T21966] mapped_file 0 [ 2622.794191][T21966] dirty 0 [ 2622.797130][T21966] writeback 4096 [ 2622.800695][T21966] workingset_refault_anon 64924 [ 2622.805542][T21966] workingset_refault_file 309 [ 2622.810326][T21966] swap 4632576 [ 2622.813684][T21966] swapcached 4096 [ 2622.817394][T21966] pgpgin 891692 [ 2622.820913][T21966] pgpgout 891687 [ 2622.824441][T21966] pgfault 970488 [ 2622.828008][T21966] pgmajfault 34030 [ 2622.831759][T21966] inactive_anon 0 [ 2622.835390][T21966] active_anon 0 [ 2622.838873][T21966] inactive_file 0 03:55:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2622.842557][T21966] active_file 12288 [ 2622.846437][T21966] unevictable 0 [ 2622.849965][T21966] hierarchical_memory_limit 314572800 [ 2622.855392][T21966] hierarchical_memsw_limit 9223372036854771712 [ 2622.861561][T21966] total_cache 12288 [ 2622.865416][T21966] total_rss 8192 [ 2622.869072][T21966] total_shmem 0 [ 2622.872518][T21966] total_mapped_file 0 [ 2622.876593][T21966] total_dirty 0 [ 2622.880108][T21966] total_writeback 4096 [ 2622.884177][T21966] total_workingset_refault_anon 64924 [ 2622.889650][T21966] total_workingset_refault_file 309 [ 2622.894836][T21966] total_swap 4632576 [ 2622.898807][T21966] total_swapcached 4096 [ 2622.903048][T21966] total_pgpgin 891692 [ 2622.907197][T21966] total_pgpgout 891687 [ 2622.911262][T21966] total_pgfault 970488 [ 2622.915318][T21966] total_pgmajfault 34030 [ 2622.919559][T21966] total_inactive_anon 0 [ 2622.923710][T21966] total_active_anon 0 [ 2622.927703][T21966] total_inactive_file 0 [ 2622.931918][T21966] total_active_file 12288 [ 2622.936318][T21966] total_unevictable 0 03:56:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2622.940369][T21966] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21965,uid=0 [ 2622.955812][T21966] Memory cgroup out of memory: Killed process 21965 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x200000000000000}, 0x0) 03:56:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0xd}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x4c00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfe35, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2623.256200][T22002] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2623.276954][T22003] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0xe}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x300000000000000}, 0x0) 03:56:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6343, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2623.302103][T22006] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2623.310368][T22009] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x400000000000000}, 0x0) [ 2623.371124][T22015] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2623.789191][T21995] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2623.800593][T21995] CPU: 1 PID: 21995 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2623.811014][T21995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2623.821156][T21995] Call Trace: [ 2623.824434][T21995] [ 2623.827357][T21995] dump_stack_lvl+0xda/0x130 [ 2623.832010][T21995] dump_stack+0x15/0x20 [ 2623.836229][T21995] dump_header+0x82/0x2d0 [ 2623.840570][T21995] oom_kill_process+0x33a/0x4c0 [ 2623.845448][T21995] out_of_memory+0x9ca/0xbf0 [ 2623.850039][T21995] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2623.856113][T21995] mem_cgroup_out_of_memory+0x139/0x190 [ 2623.861736][T21995] try_charge_memcg+0x75c/0xd30 [ 2623.866626][T21995] ? __swap_duplicate+0x29b/0x2b0 [ 2623.871722][T21995] ? radix_tree_lookup+0xf9/0x150 [ 2623.876805][T21995] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2623.882876][T21995] __read_swap_cache_async+0x2f6/0x550 [ 2623.888343][T21995] swap_cluster_readahead+0x27c/0x4c0 [ 2623.893725][T21995] swapin_readahead+0xe9/0x7f0 [ 2623.898568][T21995] ? __filemap_get_folio+0x41a/0x5a0 [ 2623.903882][T21995] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2623.909543][T21995] ? swap_cache_get_folio+0x6e/0x200 [ 2623.914854][T21995] do_swap_page+0x4a0/0x1670 [ 2623.919443][T21995] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2623.924742][T21995] ? __rcu_read_lock+0x35/0x50 [ 2623.929573][T21995] ? pte_offset_map_nolock+0x124/0x1d0 [ 2623.935040][T21995] handle_mm_fault+0xa36/0x2dd0 [ 2623.940132][T21995] exc_page_fault+0x3ff/0x6c0 [ 2623.944813][T21995] asm_exc_page_fault+0x26/0x30 [ 2623.949682][T21995] RIP: 0033:0x7f07d1420bc4 [ 2623.954130][T21995] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2623.973784][T21995] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2623.979856][T21995] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2623.987880][T21995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2623.995844][T21995] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2624.003915][T21995] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028092c [ 2624.012141][T21995] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 00000000002805eb [ 2624.020140][T21995] [ 2624.023348][T21995] memory: usage 307200kB, limit 307200kB, failcnt 200175 [ 2624.030506][T21995] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2624.038434][T21995] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2624.045710][T21995] Memory cgroup stats for /syz1: [ 2624.047298][T21995] cache 4096 [ 2624.055531][T21995] rss 16384 [ 2624.058756][T21995] shmem 0 [ 2624.061724][T21995] mapped_file 0 [ 2624.065215][T21995] dirty 0 [ 2624.068215][T21995] writeback 8192 [ 2624.071799][T21995] workingset_refault_anon 90618 [ 2624.076656][T21995] workingset_refault_file 314 [ 2624.081422][T21995] swap 536576 [ 2624.084747][T21995] swapcached 16384 [ 2624.088509][T21995] pgpgin 1999825 [ 2624.092060][T21995] pgpgout 1999820 [ 2624.095686][T21995] pgfault 2097099 [ 2624.099369][T21995] pgmajfault 39996 [ 2624.103120][T21995] inactive_anon 0 [ 2624.106779][T21995] active_anon 0 [ 2624.110297][T21995] inactive_file 4096 [ 2624.114275][T21995] active_file 0 [ 2624.117742][T21995] unevictable 0 [ 2624.121194][T21995] hierarchical_memory_limit 314572800 [ 2624.126625][T21995] hierarchical_memsw_limit 9223372036854771712 [ 2624.132928][T21995] total_cache 4096 [ 2624.136670][T21995] total_rss 16384 [ 2624.140297][T21995] total_shmem 0 [ 2624.143777][T21995] total_mapped_file 0 [ 2624.147815][T21995] total_dirty 0 [ 2624.151297][T21995] total_writeback 8192 [ 2624.155363][T21995] total_workingset_refault_anon 90618 [ 2624.160768][T21995] total_workingset_refault_file 314 [ 2624.165955][T21995] total_swap 536576 [ 2624.169786][T21995] total_swapcached 16384 [ 2624.174013][T21995] total_pgpgin 1999825 [ 2624.178106][T21995] total_pgpgout 1999820 [ 2624.182256][T21995] total_pgfault 2097099 [ 2624.186426][T21995] total_pgmajfault 39996 [ 2624.190701][T21995] total_inactive_anon 0 [ 2624.194838][T21995] total_active_anon 0 [ 2624.198899][T21995] total_inactive_file 4096 [ 2624.203360][T21995] total_active_file 0 [ 2624.207341][T21995] total_unevictable 0 [ 2624.211354][T21995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21995,uid=0 [ 2624.226642][T21995] Memory cgroup out of memory: Killed process 21995 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2624.243985][T21997] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2624.255413][T21997] CPU: 0 PID: 21997 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2624.265967][T21997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2624.276109][T21997] Call Trace: [ 2624.279456][T21997] [ 2624.282381][T21997] dump_stack_lvl+0xda/0x130 [ 2624.286984][T21997] dump_stack+0x15/0x20 [ 2624.291179][T21997] dump_header+0x82/0x2d0 [ 2624.295519][T21997] oom_kill_process+0x33a/0x4c0 [ 2624.300372][T21997] out_of_memory+0x9ca/0xbf0 [ 2624.305040][T21997] mem_cgroup_out_of_memory+0x139/0x190 [ 2624.310737][T21997] try_charge_memcg+0x75c/0xd30 [ 2624.315599][T21997] ? __swap_duplicate+0x29b/0x2b0 [ 2624.320642][T21997] ? radix_tree_lookup+0xf9/0x150 [ 2624.325794][T21997] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2624.331865][T21997] __read_swap_cache_async+0x2f6/0x550 [ 2624.337332][T21997] swap_cluster_readahead+0x27c/0x4c0 [ 2624.342754][T21997] swapin_readahead+0xe9/0x7f0 [ 2624.347596][T21997] ? __filemap_get_folio+0x41a/0x5a0 [ 2624.352907][T21997] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2624.358533][T21997] ? swap_cache_get_folio+0x6e/0x200 [ 2624.363868][T21997] do_swap_page+0x4a0/0x1670 [ 2624.368453][T21997] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2624.373801][T21997] ? __rcu_read_lock+0x35/0x50 [ 2624.378556][T21997] ? pte_offset_map_nolock+0x124/0x1d0 [ 2624.384011][T21997] handle_mm_fault+0xa36/0x2dd0 [ 2624.388861][T21997] exc_page_fault+0x3ff/0x6c0 [ 2624.393532][T21997] asm_exc_page_fault+0x26/0x30 [ 2624.398374][T21997] RIP: 0033:0x7f50c0f60a29 [ 2624.402802][T21997] Code: c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 bb 01 00 00 00 bd e7 03 00 00 e9 12 fe ff ff 90 80 3d 85 fc c8 00 00 74 27 <80> 3d e0 06 14 00 00 49 8d bd 98 00 00 00 4c 89 e2 48 89 de 74 21 [ 2624.422407][T21997] RSP: 002b:00007ffd61c03bd0 EFLAGS: 00010202 [ 2624.428497][T21997] RAX: 0000001b2d020608 RBX: 0000001b2d020600 RCX: 0000001b2d020000 [ 2624.436458][T21997] RDX: 0000001b2d02060c RSI: 0000000000000000 RDI: 0000000000000000 [ 2624.444418][T21997] RBP: 0000001b2d020608 R08: 0000001b2d420000 R09: 00007ffd61de10b0 [ 2624.452380][T21997] R10: 00007ffd61de1080 R11: 000000000007c9d2 R12: 0000001b2d020604 [ 2624.460395][T21997] R13: 00007f50c10c6f80 R14: 00007f50c0b2b000 R15: 0000000000280626 [ 2624.468370][T21997] [ 2624.471516][T21997] memory: usage 307200kB, limit 307200kB, failcnt 98504 [ 2624.478476][T21997] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2624.486408][T21997] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2624.493684][T21997] Memory cgroup stats for /syz3: [ 2624.496645][T21997] cache 16384 [ 2624.504856][T21997] rss 8192 [ 2624.507898][T21997] shmem 0 [ 2624.510832][T21997] mapped_file 0 [ 2624.514280][T21997] dirty 0 [ 2624.517239][T21997] writeback 0 [ 2624.520610][T21997] workingset_refault_anon 74775 [ 2624.525448][T21997] workingset_refault_file 320 [ 2624.530135][T21997] swap 1896448 [ 2624.533493][T21997] swapcached 8192 [ 2624.537140][T21997] pgpgin 378127 [ 2624.540590][T21997] pgpgout 378121 [ 2624.544120][T21997] pgfault 563636 [ 2624.547685][T21997] pgmajfault 39544 [ 2624.551389][T21997] inactive_anon 8192 [ 2624.555268][T21997] active_anon 0 [ 2624.558792][T21997] inactive_file 12288 [ 2624.562761][T21997] active_file 4096 [ 2624.566617][T21997] unevictable 0 [ 2624.570215][T21997] hierarchical_memory_limit 314572800 [ 2624.575596][T21997] hierarchical_memsw_limit 9223372036854771712 [ 2624.581784][T21997] total_cache 16384 [ 2624.585584][T21997] total_rss 8192 [ 2624.589177][T21997] total_shmem 0 [ 2624.592651][T21997] total_mapped_file 0 [ 2624.596660][T21997] total_dirty 0 [ 2624.600107][T21997] total_writeback 0 [ 2624.603903][T21997] total_workingset_refault_anon 74775 [ 2624.609304][T21997] total_workingset_refault_file 320 [ 2624.614489][T21997] total_swap 1896448 [ 2624.618397][T21997] total_swapcached 8192 [ 2624.622714][T21997] total_pgpgin 378127 [ 2624.626710][T21997] total_pgpgout 378121 [ 2624.630862][T21997] total_pgfault 563636 [ 2624.634936][T21997] total_pgmajfault 39544 03:56:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x16]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2624.639184][T21997] total_inactive_anon 8192 [ 2624.643659][T21997] total_active_anon 0 [ 2624.647665][T21997] total_inactive_file 12288 [ 2624.652161][T21997] total_active_file 4096 [ 2624.656430][T21997] total_unevictable 0 [ 2624.660410][T21997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21997,uid=0 [ 2624.675703][T21997] Memory cgroup out of memory: Killed process 21997 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:56:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x679a, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x500000000000000}, 0x0) 03:56:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x600000000000000}, 0x0) 03:56:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x11}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x700000000000000}, 0x0) 03:56:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6800, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x12}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2624.923513][T22030] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x900000000000000}, 0x0) [ 2624.999568][T22040] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2625.488504][T22022] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2625.502063][T22022] CPU: 1 PID: 22022 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2625.512481][T22022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2625.522713][T22022] Call Trace: [ 2625.526008][T22022] [ 2625.528945][T22022] dump_stack_lvl+0xda/0x130 [ 2625.533635][T22022] dump_stack+0x15/0x20 [ 2625.537798][T22022] dump_header+0x82/0x2d0 [ 2625.542223][T22022] oom_kill_process+0x33a/0x4c0 [ 2625.547104][T22022] out_of_memory+0x9ca/0xbf0 [ 2625.551765][T22022] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2625.557921][T22022] mem_cgroup_out_of_memory+0x139/0x190 [ 2625.563541][T22022] try_charge_memcg+0x75c/0xd30 [ 2625.568432][T22022] obj_cgroup_charge_pages+0xab/0x130 [ 2625.573808][T22022] __memcg_kmem_charge_page+0x9c/0x170 [ 2625.579339][T22022] __alloc_pages+0x1bb/0x340 [ 2625.583992][T22022] alloc_pages_mpol+0xb1/0x1d0 [ 2625.588772][T22022] alloc_pages+0xe0/0x100 [ 2625.593138][T22022] __vmalloc_node_range+0x6d2/0xea0 [ 2625.598462][T22022] kvmalloc_node+0x121/0x160 [ 2625.603056][T22022] ? xt_alloc_table_info+0x3d/0x80 [ 2625.608239][T22022] xt_alloc_table_info+0x3d/0x80 [ 2625.613186][T22022] do_arpt_set_ctl+0x634/0x13b0 [ 2625.618159][T22022] ? __futex_wait+0x227/0x280 [ 2625.622848][T22022] ? __futex_wake_mark+0x70/0x70 [ 2625.627806][T22022] ? tcp_release_cb+0xfe/0x370 [ 2625.632625][T22022] ? _raw_spin_unlock_bh+0x36/0x40 [ 2625.637752][T22022] nf_setsockopt+0x18d/0x1b0 [ 2625.642368][T22022] ip_setsockopt+0xe6/0x100 [ 2625.646921][T22022] tcp_setsockopt+0x90/0xa0 [ 2625.651435][T22022] sock_common_setsockopt+0x61/0x70 [ 2625.656761][T22022] ? sock_common_recvmsg+0xe0/0xe0 [ 2625.661925][T22022] __sys_setsockopt+0x1d4/0x240 [ 2625.666857][T22022] __x64_sys_setsockopt+0x66/0x80 [ 2625.671934][T22022] do_syscall_64+0x44/0x110 [ 2625.676567][T22022] ? syscall_exit_to_user_mode+0x38/0x140 [ 2625.682295][T22022] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2625.688202][T22022] RIP: 0033:0x7f07d1466ba9 [ 2625.692650][T22022] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2625.712272][T22022] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2625.720699][T22022] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2625.728677][T22022] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2625.736721][T22022] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2625.744745][T22022] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2625.752779][T22022] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2625.760817][T22022] [ 2625.764143][T22022] memory: usage 307200kB, limit 307200kB, failcnt 200349 [ 2625.771217][T22022] memory+swap: usage 307708kB, limit 9007199254740988kB, failcnt 0 [ 2625.779110][T22022] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 2625.786457][T22022] Memory cgroup stats for /syz1: [ 2625.786624][T22022] cache 4096 [ 2625.794809][T22022] rss 28672 [ 2625.797973][T22022] shmem 0 [ 2625.801055][T22022] mapped_file 0 [ 2625.804563][T22022] dirty 0 [ 2625.807526][T22022] writeback 0 [ 2625.810835][T22022] workingset_refault_anon 90652 [ 2625.815707][T22022] workingset_refault_file 314 [ 2625.820400][T22022] swap 520192 [ 2625.823747][T22022] swapcached 32768 [ 2625.827511][T22022] pgpgin 1999882 [ 2625.831058][T22022] pgpgout 1999873 [ 2625.834747][T22022] pgfault 2097240 [ 2625.838433][T22022] pgmajfault 40016 [ 2625.842209][T22022] inactive_anon 32768 [ 2625.846182][T22022] active_anon 0 [ 2625.849667][T22022] inactive_file 0 [ 2625.853363][T22022] active_file 4096 [ 2625.857185][T22022] unevictable 0 [ 2625.860636][T22022] hierarchical_memory_limit 314572800 [ 2625.866067][T22022] hierarchical_memsw_limit 9223372036854771712 [ 2625.872244][T22022] total_cache 4096 [ 2625.876316][T22022] total_rss 28672 [ 2625.879952][T22022] total_shmem 0 [ 2625.883399][T22022] total_mapped_file 0 [ 2625.887463][T22022] total_dirty 0 [ 2625.890978][T22022] total_writeback 0 [ 2625.894782][T22022] total_workingset_refault_anon 90652 [ 2625.900219][T22022] total_workingset_refault_file 314 [ 2625.905412][T22022] total_swap 520192 [ 2625.909275][T22022] total_swapcached 32768 [ 2625.913584][T22022] total_pgpgin 1999882 [ 2625.917775][T22022] total_pgpgout 1999873 [ 2625.921966][T22022] total_pgfault 2097240 [ 2625.926146][T22022] total_pgmajfault 40016 [ 2625.930406][T22022] total_inactive_anon 32768 [ 2625.934915][T22022] total_active_anon 0 [ 2625.938940][T22022] total_inactive_file 0 [ 2625.943095][T22022] total_active_file 4096 [ 2625.947353][T22022] total_unevictable 0 [ 2625.951332][T22022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22021,uid=0 [ 2625.966667][T22022] Memory cgroup out of memory: Killed process 22021 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2625.984063][T22031] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2625.995581][T22031] CPU: 0 PID: 22031 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2626.006078][T22031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2626.016131][T22031] Call Trace: [ 2626.019404][T22031] [ 2626.022402][T22031] dump_stack_lvl+0xda/0x130 [ 2626.026990][T22031] dump_stack+0x15/0x20 [ 2626.031137][T22031] dump_header+0x82/0x2d0 [ 2626.035463][T22031] oom_kill_process+0x33a/0x4c0 [ 2626.040318][T22031] out_of_memory+0x9ca/0xbf0 [ 2626.045022][T22031] mem_cgroup_out_of_memory+0x139/0x190 [ 2626.050566][T22031] try_charge_memcg+0x75c/0xd30 [ 2626.055407][T22031] ? __swap_duplicate+0x29b/0x2b0 [ 2626.060434][T22031] ? radix_tree_lookup+0xf9/0x150 [ 2626.065446][T22031] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2626.071536][T22031] __read_swap_cache_async+0x2f6/0x550 [ 2626.077081][T22031] swap_cluster_readahead+0x452/0x4c0 [ 2626.082441][T22031] swapin_readahead+0xe9/0x7f0 [ 2626.087221][T22031] ? __filemap_get_folio+0x41a/0x5a0 [ 2626.092542][T22031] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2626.098159][T22031] ? swap_cache_get_folio+0x6e/0x200 [ 2626.103431][T22031] do_swap_page+0x4a0/0x1670 [ 2626.108040][T22031] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2626.113387][T22031] ? __rcu_read_lock+0x35/0x50 [ 2626.118318][T22031] ? pte_offset_map_nolock+0x124/0x1d0 [ 2626.123812][T22031] handle_mm_fault+0xa36/0x2dd0 [ 2626.128655][T22031] exc_page_fault+0x3ff/0x6c0 [ 2626.133531][T22031] asm_exc_page_fault+0x26/0x30 [ 2626.138451][T22031] RIP: 0033:0x7f50c0f6387c [ 2626.142940][T22031] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 35 f8 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 2626.162552][T22031] RSP: 002b:00007ffd61c03b70 EFLAGS: 00010286 [ 2626.168602][T22031] RAX: 0000000000000000 RBX: 00007f50c10c7018 RCX: 0000000000000000 [ 2626.176564][T22031] RDX: ffffffff83b076b4 RSI: 00007f50c092b008 RDI: 00007f50c10c7018 [ 2626.184687][T22031] RBP: 0000000083b07000 R08: 0000001b2d420000 R09: 0000000000000000 [ 2626.192645][T22031] R10: 0000000000000001 R11: 000000000007cb2e R12: 0000000000000000 [ 2626.200701][T22031] R13: 0000000000000001 R14: 00007f50c10bb000 R15: ffffffff83b076b4 [ 2626.208661][T22031] ? __x64_sys_setsockopt+0x14/0x80 [ 2626.213869][T22031] ? __x64_sys_setsockopt+0x14/0x80 [ 2626.219062][T22031] [ 2626.222168][T22031] memory: usage 307200kB, limit 307200kB, failcnt 98675 [ 2626.229110][T22031] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2626.237015][T22031] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2626.244403][T22031] Memory cgroup stats for /syz3: [ 2626.246098][T22031] cache 16384 [ 2626.254328][T22031] rss 8192 [ 2626.257352][T22031] shmem 0 [ 2626.260279][T22031] mapped_file 0 [ 2626.263822][T22031] dirty 0 [ 2626.266761][T22031] writeback 0 [ 2626.270159][T22031] workingset_refault_anon 74815 [ 2626.275060][T22031] workingset_refault_file 320 [ 2626.279749][T22031] swap 1896448 [ 2626.283112][T22031] swapcached 4096 [ 2626.286792][T22031] pgpgin 378190 [ 2626.290270][T22031] pgpgout 378184 [ 2626.293803][T22031] pgfault 563839 [ 2626.297353][T22031] pgmajfault 39562 [ 2626.301086][T22031] inactive_anon 8192 [ 2626.304965][T22031] active_anon 0 [ 2626.308469][T22031] inactive_file 4096 [ 2626.312352][T22031] active_file 12288 [ 2626.316143][T22031] unevictable 0 [ 2626.319620][T22031] hierarchical_memory_limit 314572800 [ 2626.324996][T22031] hierarchical_memsw_limit 9223372036854771712 [ 2626.331231][T22031] total_cache 16384 [ 2626.335048][T22031] total_rss 8192 [ 2626.338625][T22031] total_shmem 0 [ 2626.342081][T22031] total_mapped_file 0 [ 2626.346107][T22031] total_dirty 0 [ 2626.349622][T22031] total_writeback 0 [ 2626.353424][T22031] total_workingset_refault_anon 74815 [ 2626.358813][T22031] total_workingset_refault_file 320 [ 2626.364003][T22031] total_swap 1896448 [ 2626.367942][T22031] total_swapcached 4096 [ 2626.372085][T22031] total_pgpgin 378190 [ 2626.376050][T22031] total_pgpgout 378184 [ 2626.380173][T22031] total_pgfault 563839 [ 2626.384268][T22031] total_pgmajfault 39562 03:56:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x17]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2626.388536][T22031] total_inactive_anon 8192 [ 2626.392944][T22031] total_active_anon 0 [ 2626.396976][T22031] total_inactive_file 4096 [ 2626.401428][T22031] total_active_file 12288 [ 2626.405750][T22031] total_unevictable 0 [ 2626.409752][T22031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22031,uid=0 [ 2626.425111][T22031] Memory cgroup out of memory: Killed process 22031 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2626.444159][T22024] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2626.457841][T22024] CPU: 1 PID: 22024 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2626.468450][T22024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2626.478630][T22024] Call Trace: [ 2626.481906][T22024] [ 2626.484837][T22024] dump_stack_lvl+0xda/0x130 [ 2626.489522][T22024] dump_stack+0x15/0x20 [ 2626.493706][T22024] dump_header+0x82/0x2d0 [ 2626.498049][T22024] oom_kill_process+0x33a/0x4c0 [ 2626.502953][T22024] out_of_memory+0x9ca/0xbf0 [ 2626.507570][T22024] mem_cgroup_out_of_memory+0x139/0x190 [ 2626.513288][T22024] try_charge_memcg+0x75c/0xd30 [ 2626.518168][T22024] obj_cgroup_charge_pages+0xab/0x130 [ 2626.523625][T22024] __memcg_kmem_charge_page+0x9c/0x170 [ 2626.529110][T22024] __alloc_pages+0x1bb/0x340 [ 2626.533761][T22024] alloc_pages_mpol+0xb1/0x1d0 [ 2626.538552][T22024] alloc_pages+0xe0/0x100 [ 2626.542909][T22024] __vmalloc_node_range+0x6d2/0xea0 [ 2626.548141][T22024] kvmalloc_node+0x121/0x160 [ 2626.552747][T22024] ? xt_alloc_table_info+0x3d/0x80 [ 2626.557951][T22024] xt_alloc_table_info+0x3d/0x80 [ 2626.562881][T22024] do_arpt_set_ctl+0x634/0x13b0 [ 2626.567726][T22024] ? __futex_wait+0x227/0x280 [ 2626.572394][T22024] ? __futex_wake_mark+0x70/0x70 [ 2626.577323][T22024] ? tcp_release_cb+0xfe/0x370 [ 2626.582093][T22024] ? _raw_spin_unlock_bh+0x36/0x40 [ 2626.587198][T22024] nf_setsockopt+0x18d/0x1b0 [ 2626.591789][T22024] ip_setsockopt+0xe6/0x100 [ 2626.596342][T22024] tcp_setsockopt+0x90/0xa0 [ 2626.600843][T22024] sock_common_setsockopt+0x61/0x70 [ 2626.606093][T22024] ? sock_common_recvmsg+0xe0/0xe0 [ 2626.611249][T22024] __sys_setsockopt+0x1d4/0x240 [ 2626.616091][T22024] __x64_sys_setsockopt+0x66/0x80 [ 2626.621312][T22024] do_syscall_64+0x44/0x110 [ 2626.625836][T22024] ? syscall_exit_to_user_mode+0x38/0x140 [ 2626.631547][T22024] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2626.637443][T22024] RIP: 0033:0x7ffbf0714ba9 [ 2626.641844][T22024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2626.661618][T22024] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2626.670091][T22024] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2626.678054][T22024] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2626.686018][T22024] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2626.693983][T22024] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2626.701947][T22024] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2626.709952][T22024] [ 2626.713075][T22024] memory: usage 307200kB, limit 307200kB, failcnt 51244 [ 2626.720117][T22024] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2626.728014][T22024] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2626.735291][T22024] Memory cgroup stats for /syz4: [ 2626.750390][T22024] cache 12288 [ 2626.758816][T22024] rss 8192 [ 2626.761832][T22024] shmem 0 [ 2626.764761][T22024] mapped_file 0 [ 2626.768230][T22024] dirty 0 [ 2626.771157][T22024] writeback 4096 [ 2626.774816][T22024] workingset_refault_anon 65018 [ 2626.779671][T22024] workingset_refault_file 309 [ 2626.784333][T22024] swap 4632576 [ 2626.787867][T22024] swapcached 0 [ 2626.791277][T22024] pgpgin 891830 [ 2626.794768][T22024] pgpgout 891825 [ 2626.798390][T22024] pgfault 970859 [ 2626.801920][T22024] pgmajfault 34062 [ 2626.805662][T22024] inactive_anon 8192 [ 2626.809606][T22024] active_anon 0 [ 2626.813067][T22024] inactive_file 8192 [ 2626.816997][T22024] active_file 4096 [ 2626.820794][T22024] unevictable 0 [ 2626.824254][T22024] hierarchical_memory_limit 314572800 [ 2626.829631][T22024] hierarchical_memsw_limit 9223372036854771712 [ 2626.835851][T22024] total_cache 12288 [ 2626.839693][T22024] total_rss 8192 [ 2626.843303][T22024] total_shmem 0 [ 2626.846768][T22024] total_mapped_file 0 [ 2626.850796][T22024] total_dirty 0 [ 2626.854303][T22024] total_writeback 4096 [ 2626.858392][T22024] total_workingset_refault_anon 65018 [ 2626.863768][T22024] total_workingset_refault_file 309 [ 2626.869038][T22024] total_swap 4632576 [ 2626.872925][T22024] total_swapcached 0 [ 2626.876930][T22024] total_pgpgin 891830 [ 2626.880985][T22024] total_pgpgout 891825 [ 2626.885035][T22024] total_pgfault 970859 [ 2626.889177][T22024] total_pgmajfault 34062 [ 2626.893447][T22024] total_inactive_anon 8192 [ 2626.897892][T22024] total_active_anon 0 [ 2626.901859][T22024] total_inactive_file 8192 [ 2626.906330][T22024] total_active_file 4096 [ 2626.910564][T22024] total_unevictable 0 [ 2626.914536][T22024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22023,uid=0 [ 2626.929899][T22024] Memory cgroup out of memory: Killed process 22023 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x25}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6c00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xb00000000000000}, 0x0) [ 2627.027965][T22052] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2627.038965][T22050] validate_nla: 11 callbacks suppressed [ 2627.038977][T22050] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2627.055601][T22053] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:56:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xff35, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7400, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xf00000000000000}, 0x0) 03:56:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x48}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x18]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x4c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x2000000000000000}, 0x0) 03:56:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7a00, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2627.332808][T22060] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2627.341352][T22062] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2627.352784][T22064] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2627.367059][T22066] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2627.422083][T22071] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2627.431502][T22072] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:56:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x60}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xda45000000000000}, 0x0) 03:56:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7e45, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2628.117652][T22075] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2628.125787][T22076] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.145616][T22078] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2628.231379][T22068] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2628.244945][T22068] CPU: 0 PID: 22068 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2628.255420][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2628.265570][T22068] Call Trace: [ 2628.268875][T22068] [ 2628.271801][T22068] dump_stack_lvl+0xda/0x130 [ 2628.276483][T22068] dump_stack+0x15/0x20 [ 2628.280692][T22068] dump_header+0x82/0x2d0 [ 2628.285198][T22068] oom_kill_process+0x33a/0x4c0 [ 2628.290077][T22068] out_of_memory+0x9ca/0xbf0 [ 2628.294741][T22068] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2628.300876][T22068] mem_cgroup_out_of_memory+0x139/0x190 [ 2628.306447][T22068] try_charge_memcg+0x75c/0xd30 [ 2628.311360][T22068] obj_cgroup_charge_pages+0xab/0x130 [ 2628.316857][T22068] __memcg_kmem_charge_page+0x9c/0x170 [ 2628.322347][T22068] __alloc_pages+0x1bb/0x340 [ 2628.326999][T22068] alloc_pages_mpol+0xb1/0x1d0 [ 2628.331829][T22068] alloc_pages+0xe0/0x100 [ 2628.336183][T22068] __vmalloc_node_range+0x6d2/0xea0 [ 2628.341527][T22068] kvmalloc_node+0x121/0x160 [ 2628.346127][T22068] ? xt_alloc_table_info+0x3d/0x80 [ 2628.351245][T22068] xt_alloc_table_info+0x3d/0x80 [ 2628.356179][T22068] do_arpt_set_ctl+0x634/0x13b0 [ 2628.361030][T22068] ? __futex_wait+0x227/0x280 [ 2628.365774][T22068] ? __futex_wake_mark+0x70/0x70 [ 2628.370745][T22068] ? tcp_release_cb+0xfe/0x370 [ 2628.375510][T22068] ? _raw_spin_unlock_bh+0x36/0x40 [ 2628.380709][T22068] nf_setsockopt+0x18d/0x1b0 [ 2628.385453][T22068] ip_setsockopt+0xe6/0x100 [ 2628.390027][T22068] tcp_setsockopt+0x90/0xa0 [ 2628.394583][T22068] sock_common_setsockopt+0x61/0x70 [ 2628.399889][T22068] ? sock_common_recvmsg+0xe0/0xe0 [ 2628.405058][T22068] __sys_setsockopt+0x1d4/0x240 [ 2628.409901][T22068] __x64_sys_setsockopt+0x66/0x80 [ 2628.414915][T22068] do_syscall_64+0x44/0x110 [ 2628.419490][T22068] ? syscall_exit_to_user_mode+0x38/0x140 [ 2628.425206][T22068] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2628.431095][T22068] RIP: 0033:0x7ffbf0714ba9 [ 2628.435501][T22068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2628.455215][T22068] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2628.463628][T22068] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2628.471704][T22068] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2628.479723][T22068] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2628.487684][T22068] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2628.495647][T22068] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2628.503700][T22068] [ 2628.506957][T22068] memory: usage 307200kB, limit 307200kB, failcnt 51668 [ 2628.513889][T22068] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 2628.521802][T22068] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2628.529145][T22068] Memory cgroup stats for /syz4: [ 2628.594752][T22068] cache 12288 [ 2628.603076][T22068] rss 0 [ 2628.605833][T22068] shmem 0 [ 2628.608852][T22068] mapped_file 0 [ 2628.612305][T22068] dirty 0 [ 2628.615236][T22068] writeback 0 [ 2628.618615][T22068] workingset_refault_anon 65047 [ 2628.623457][T22068] workingset_refault_file 309 [ 2628.628168][T22068] swap 4640768 [ 2628.631542][T22068] swapcached 0 [ 2628.634907][T22068] pgpgin 891881 [ 2628.638455][T22068] pgpgout 891878 [ 2628.642001][T22068] pgfault 970992 [ 2628.645539][T22068] pgmajfault 34070 [ 2628.649294][T22068] inactive_anon 0 [ 2628.652926][T22068] active_anon 0 [ 2628.656487][T22068] inactive_file 8192 [ 2628.660424][T22068] active_file 4096 [ 2628.664145][T22068] unevictable 0 [ 2628.667658][T22068] hierarchical_memory_limit 314572800 [ 2628.673068][T22068] hierarchical_memsw_limit 9223372036854771712 [ 2628.679316][T22068] total_cache 12288 [ 2628.683413][T22068] total_rss 0 [ 2628.686750][T22068] total_shmem 0 [ 2628.690209][T22068] total_mapped_file 0 [ 2628.694263][T22068] total_dirty 0 [ 2628.697746][T22068] total_writeback 0 [ 2628.701622][T22068] total_workingset_refault_anon 65047 [ 2628.707132][T22068] total_workingset_refault_file 309 [ 2628.712317][T22068] total_swap 4640768 [ 2628.716235][T22068] total_swapcached 0 [ 2628.720152][T22068] total_pgpgin 891881 [ 2628.724279][T22068] total_pgpgout 891878 [ 2628.728408][T22068] total_pgfault 970992 [ 2628.732476][T22068] total_pgmajfault 34070 [ 2628.736731][T22068] total_inactive_anon 0 [ 2628.740891][T22068] total_active_anon 0 [ 2628.744865][T22068] total_inactive_file 8192 [ 2628.749304][T22068] total_active_file 4096 [ 2628.753537][T22068] total_unevictable 0 [ 2628.757541][T22068] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22067,uid=0 [ 2628.772900][T22068] Memory cgroup out of memory: Killed process 22067 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2628.969004][T22079] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2628.980347][T22079] CPU: 1 PID: 22079 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2628.990758][T22079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2629.000817][T22079] Call Trace: [ 2629.004080][T22079] [ 2629.006996][T22079] dump_stack_lvl+0xda/0x130 [ 2629.011651][T22079] dump_stack+0x15/0x20 [ 2629.015871][T22079] dump_header+0x82/0x2d0 [ 2629.020187][T22079] oom_kill_process+0x33a/0x4c0 [ 2629.025022][T22079] out_of_memory+0x9ca/0xbf0 [ 2629.029646][T22079] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2629.035724][T22079] mem_cgroup_out_of_memory+0x139/0x190 [ 2629.041437][T22079] try_charge_memcg+0x75c/0xd30 [ 2629.046286][T22079] ? __swap_duplicate+0x29b/0x2b0 [ 2629.051372][T22079] ? radix_tree_lookup+0xf9/0x150 [ 2629.056476][T22079] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2629.062578][T22079] __read_swap_cache_async+0x2f6/0x550 [ 2629.068092][T22079] swap_cluster_readahead+0x27c/0x4c0 [ 2629.073545][T22079] swapin_readahead+0xe9/0x7f0 [ 2629.078306][T22079] ? __filemap_get_folio+0x41a/0x5a0 [ 2629.083614][T22079] ? swap_cache_get_folio+0x6e/0x200 [ 2629.088948][T22079] do_swap_page+0x4a0/0x1670 [ 2629.093569][T22079] ? asm_exc_page_fault+0x26/0x30 [ 2629.098592][T22079] ? __rcu_read_lock+0x35/0x50 [ 2629.103414][T22079] ? pte_offset_map_nolock+0x124/0x1d0 [ 2629.108859][T22079] handle_mm_fault+0xa36/0x2dd0 [ 2629.113834][T22079] exc_page_fault+0x3ff/0x6c0 [ 2629.118510][T22079] asm_exc_page_fault+0x26/0x30 [ 2629.123368][T22079] RIP: 0033:0x7f50c0f61bc4 [ 2629.127768][T22079] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2629.147368][T22079] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010283 [ 2629.153432][T22079] RAX: 0000000000000000 RBX: 00007f50c10c7050 RCX: 0000000000000000 [ 2629.161398][T22079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 03:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x9a67, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x68}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xeaffffff00000000}, 0x0) 03:56:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1a]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2629.169394][T22079] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2629.177358][T22079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000281d84 [ 2629.185364][T22079] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 0000000000281a43 [ 2629.193335][T22079] [ 2629.196445][T22079] memory: usage 307200kB, limit 307200kB, failcnt 98891 [ 2629.203477][T22079] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2629.211470][T22079] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 03:56:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2629.218791][T22079] Memory cgroup stats for /syz3: [ 2629.219200][T22079] cache 16384 [ 2629.227419][T22079] rss 8192 [ 2629.230451][T22079] shmem 0 [ 2629.233387][T22079] mapped_file 0 [ 2629.236864][T22079] dirty 0 [ 2629.239412][T22087] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2629.239791][T22079] writeback 8192 [ 2629.239799][T22079] workingset_refault_anon 74908 [ 2629.257520][T22079] workingset_refault_file 320 [ 2629.262242][T22079] swap 1896448 [ 2629.265648][T22079] swapcached 8192 03:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x34000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2629.269413][T22079] pgpgin 378329 [ 2629.272878][T22079] pgpgout 378323 [ 2629.276433][T22079] pgfault 564235 [ 2629.279972][T22079] pgmajfault 39603 [ 2629.283707][T22079] inactive_anon 0 [ 2629.287358][T22079] active_anon 0 [ 2629.290831][T22079] inactive_file 4096 [ 2629.292027][T22089] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2629.294713][T22079] active_file 12288 [ 2629.294772][T22079] unevictable 0 [ 2629.311393][T22079] hierarchical_memory_limit 314572800 [ 2629.316808][T22079] hierarchical_memsw_limit 9223372036854771712 [ 2629.322981][T22079] total_cache 16384 [ 2629.326818][T22079] total_rss 8192 [ 2629.330361][T22079] total_shmem 0 [ 2629.333930][T22079] total_mapped_file 0 [ 2629.338101][T22079] total_dirty 0 [ 2629.341577][T22079] total_writeback 8192 [ 2629.345735][T22079] total_workingset_refault_anon 74908 [ 2629.351169][T22079] total_workingset_refault_file 320 [ 2629.356400][T22079] total_swap 1896448 [ 2629.360339][T22079] total_swapcached 8192 [ 2629.364600][T22079] total_pgpgin 378329 03:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x6c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x400300, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2629.368606][T22079] total_pgpgout 378323 [ 2629.372710][T22079] total_pgfault 564235 [ 2629.373907][T22091] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2629.376828][T22079] total_pgmajfault 39603 [ 2629.376837][T22079] total_inactive_anon 0 [ 2629.376843][T22079] total_active_anon 0 [ 2629.376849][T22079] total_inactive_file 4096 [ 2629.376855][T22079] total_active_file 12288 [ 2629.406138][T22079] total_unevictable 0 03:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xf0ffffff00000000}, 0x0) 03:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x74}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2629.410158][T22079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22079,uid=0 [ 2629.425467][T22079] Memory cgroup out of memory: Killed process 22079 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2629.431354][T22097] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2629.459250][T22095] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xfeffffff00000000}, 0x0) 03:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x1000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x7a}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xffffff7f00000000}, 0x0) [ 2629.905603][T22106] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x2000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0xffffffff00000000}, 0x0) 03:56:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1b]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x2}, 0x0) [ 2630.445301][T22120] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2630.770861][T22109] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2630.782313][T22109] CPU: 0 PID: 22109 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2630.792858][T22109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2630.802937][T22109] Call Trace: [ 2630.806226][T22109] [ 2630.809195][T22109] dump_stack_lvl+0xda/0x130 [ 2630.813814][T22109] dump_stack+0x15/0x20 [ 2630.818028][T22109] dump_header+0x82/0x2d0 [ 2630.822384][T22109] oom_kill_process+0x33a/0x4c0 [ 2630.827329][T22109] out_of_memory+0x9ca/0xbf0 [ 2630.831974][T22109] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2630.838114][T22109] mem_cgroup_out_of_memory+0x139/0x190 [ 2630.843684][T22109] try_charge_memcg+0x75c/0xd30 [ 2630.848561][T22109] ? __swap_duplicate+0x29b/0x2b0 [ 2630.853654][T22109] ? radix_tree_lookup+0xf9/0x150 [ 2630.858769][T22109] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2630.864869][T22109] __read_swap_cache_async+0x2f6/0x550 [ 2630.870338][T22109] swap_cluster_readahead+0x27c/0x4c0 [ 2630.875743][T22109] swapin_readahead+0xe9/0x7f0 [ 2630.880623][T22109] ? __filemap_get_folio+0x41a/0x5a0 [ 2630.885953][T22109] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2630.891611][T22109] ? swap_cache_get_folio+0x6e/0x200 [ 2630.896960][T22109] do_swap_page+0x4a0/0x1670 [ 2630.901563][T22109] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2630.906970][T22109] ? __rcu_read_lock+0x35/0x50 [ 2630.911743][T22109] ? pte_offset_map_nolock+0x124/0x1d0 [ 2630.917213][T22109] handle_mm_fault+0xa36/0x2dd0 [ 2630.922131][T22109] exc_page_fault+0x3ff/0x6c0 [ 2630.926826][T22109] asm_exc_page_fault+0x26/0x30 [ 2630.931721][T22109] RIP: 0033:0x7f50c0f61bc4 [ 2630.936143][T22109] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2630.955844][T22109] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2630.961920][T22109] RAX: 0000000000000000 RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2630.969901][T22109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2630.977877][T22109] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2630.985860][T22109] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028246e [ 2630.993920][T22109] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000028212d [ 2631.001907][T22109] [ 2631.005178][T22109] memory: usage 307200kB, limit 307200kB, failcnt 99429 [ 2631.012158][T22109] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2631.020112][T22109] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2631.027448][T22109] Memory cgroup stats for /syz3: [ 2631.039635][T22109] cache 16384 [ 2631.048030][T22109] rss 8192 [ 2631.051052][T22109] shmem 0 [ 2631.053979][T22109] mapped_file 0 [ 2631.057464][T22109] dirty 0 [ 2631.060452][T22109] writeback 8192 [ 2631.064001][T22109] workingset_refault_anon 74945 [ 2631.068966][T22109] workingset_refault_file 320 [ 2631.073646][T22109] swap 1896448 [ 2631.077066][T22109] swapcached 8192 [ 2631.080704][T22109] pgpgin 378389 [ 2631.084166][T22109] pgpgout 378383 [ 2631.087745][T22109] pgfault 564461 [ 2631.091289][T22109] pgmajfault 39621 [ 2631.095009][T22109] inactive_anon 0 [ 2631.098703][T22109] active_anon 0 [ 2631.102183][T22109] inactive_file 12288 [ 2631.106161][T22109] active_file 4096 [ 2631.109932][T22109] unevictable 0 [ 2631.113401][T22109] hierarchical_memory_limit 314572800 [ 2631.118797][T22109] hierarchical_memsw_limit 9223372036854771712 [ 2631.124956][T22109] total_cache 16384 [ 2631.128812][T22109] total_rss 8192 [ 2631.132364][T22109] total_shmem 0 [ 2631.135819][T22109] total_mapped_file 0 [ 2631.139935][T22109] total_dirty 0 [ 2631.143442][T22109] total_writeback 8192 [ 2631.147524][T22109] total_workingset_refault_anon 74945 [ 2631.152897][T22109] total_workingset_refault_file 320 [ 2631.158115][T22109] total_swap 1896448 [ 2631.162007][T22109] total_swapcached 8192 [ 2631.166176][T22109] total_pgpgin 378389 [ 2631.170179][T22109] total_pgpgout 378383 [ 2631.174242][T22109] total_pgfault 564461 [ 2631.178355][T22109] total_pgmajfault 39621 [ 2631.182624][T22109] total_inactive_anon 0 [ 2631.186828][T22109] total_active_anon 0 [ 2631.190887][T22109] total_inactive_file 12288 [ 2631.195390][T22109] total_active_file 4096 [ 2631.199668][T22109] total_unevictable 0 [ 2631.203702][T22109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22109,uid=0 [ 2631.219002][T22109] Memory cgroup out of memory: Killed process 22109 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x3000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x3}, 0x0) 03:56:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1c]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x4}, 0x0) 03:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2631.592443][T22136] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x4000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x5}, 0x0) 03:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x6}, 0x0) 03:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x5000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1d]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2632.648548][T22160] __nla_validate_parse: 2 callbacks suppressed [ 2632.648578][T22160] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x7}, 0x0) 03:56:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x9}, 0x0) 03:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xb}, 0x0) 03:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x8000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2632.765689][T22167] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2632.791109][T22170] validate_nla: 13 callbacks suppressed [ 2632.791152][T22170] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x9000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2632.828543][T22176] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2632.889255][T22182] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2632.929228][T22183] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2633.544047][T22161] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2633.555504][T22161] CPU: 1 PID: 22161 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2633.565920][T22161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2633.575984][T22161] Call Trace: [ 2633.579271][T22161] [ 2633.582233][T22161] dump_stack_lvl+0xda/0x130 [ 2633.586843][T22161] dump_stack+0x15/0x20 [ 2633.591083][T22161] dump_header+0x82/0x2d0 [ 2633.595427][T22161] oom_kill_process+0x33a/0x4c0 [ 2633.600318][T22161] out_of_memory+0x9ca/0xbf0 [ 2633.604979][T22161] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2633.611064][T22161] mem_cgroup_out_of_memory+0x139/0x190 [ 2633.616640][T22161] try_charge_memcg+0x75c/0xd30 [ 2633.621509][T22161] ? __swap_duplicate+0x29b/0x2b0 [ 2633.626551][T22161] ? radix_tree_lookup+0xf9/0x150 [ 2633.631621][T22161] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2633.637694][T22161] __read_swap_cache_async+0x2f6/0x550 [ 2633.643357][T22161] swap_cluster_readahead+0x452/0x4c0 [ 2633.648739][T22161] swapin_readahead+0xe9/0x7f0 [ 2633.653600][T22161] ? __filemap_get_folio+0x41a/0x5a0 [ 2633.658912][T22161] ? _raw_spin_unlock+0x26/0x40 [ 2633.663779][T22161] ? swap_cache_get_folio+0x6e/0x200 [ 2633.669067][T22161] do_swap_page+0x4a0/0x1670 [ 2633.673756][T22161] ? __rcu_read_lock+0x35/0x50 [ 2633.678546][T22161] ? pte_offset_map_nolock+0x124/0x1d0 [ 2633.684022][T22161] handle_mm_fault+0xa36/0x2dd0 [ 2633.688890][T22161] exc_page_fault+0x3ff/0x6c0 [ 2633.693627][T22161] asm_exc_page_fault+0x26/0x30 [ 2633.698482][T22161] RIP: 0033:0x7f07d1420d4b [ 2633.702890][T22161] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2633.722589][T22161] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2633.728654][T22161] RAX: 0000000000000001 RBX: 00007f07d1585f80 RCX: 0000000000282d28 [ 2633.736703][T22161] RDX: 0000000000000201 RSI: 00007fffaf03b8f0 RDI: 00007f07d1585f80 [ 2633.744697][T22161] RBP: 00007f07d1587980 R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2633.752702][T22161] R10: 00007fffaf111080 R11: 000000000007d0ba R12: 0000000000282f28 [ 2633.760660][T22161] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000282be7 [ 2633.768696][T22161] [ 2633.772012][T22161] memory: usage 307200kB, limit 307200kB, failcnt 200580 [ 2633.779198][T22161] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2633.787170][T22161] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2633.794552][T22161] Memory cgroup stats for /syz1: [ 2633.794832][T22161] cache 4096 [ 2633.803212][T22161] rss 8192 [ 2633.806322][T22161] shmem 0 [ 2633.809282][T22161] mapped_file 0 [ 2633.812851][T22161] dirty 4096 [ 2633.816161][T22161] writeback 8192 [ 2633.819777][T22161] workingset_refault_anon 90862 [ 2633.824671][T22161] workingset_refault_file 314 [ 2633.829397][T22161] swap 544768 [ 2633.832786][T22161] swapcached 8192 [ 2633.836464][T22161] pgpgin 2000230 [ 2633.840029][T22161] pgpgout 2000227 [ 2633.843710][T22161] pgfault 2098147 [ 2633.847459][T22161] pgmajfault 40117 [ 2633.851206][T22161] inactive_anon 0 [ 2633.854872][T22161] active_anon 0 [ 2633.858343][T22161] inactive_file 4096 [ 2633.862230][T22161] active_file 0 [ 2633.865666][T22161] unevictable 0 [ 2633.869209][T22161] hierarchical_memory_limit 314572800 [ 2633.874640][T22161] hierarchical_memsw_limit 9223372036854771712 [ 2633.880890][T22161] total_cache 4096 [ 2633.884637][T22161] total_rss 8192 [ 2633.888220][T22161] total_shmem 0 [ 2633.891667][T22161] total_mapped_file 0 [ 2633.895625][T22161] total_dirty 4096 [ 2633.899392][T22161] total_writeback 8192 [ 2633.903500][T22161] total_workingset_refault_anon 90862 [ 2633.908998][T22161] total_workingset_refault_file 314 [ 2633.914184][T22161] total_swap 544768 [ 2633.918049][T22161] total_swapcached 8192 [ 2633.922229][T22161] total_pgpgin 2000230 [ 2633.926499][T22161] total_pgpgout 2000227 [ 2633.930725][T22161] total_pgfault 2098147 [ 2633.934863][T22161] total_pgmajfault 40117 [ 2633.939180][T22161] total_inactive_anon 0 [ 2633.943411][T22161] total_active_anon 0 [ 2633.947469][T22161] total_inactive_file 4096 [ 2633.951929][T22161] total_active_file 0 [ 2633.955888][T22161] total_unevictable 0 [ 2633.959912][T22161] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22161,uid=0 [ 2633.975265][T22161] Memory cgroup out of memory: Killed process 22161 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2633.992663][T22174] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2634.006278][T22174] CPU: 0 PID: 22174 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2634.016696][T22174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2634.026749][T22174] Call Trace: [ 2634.030095][T22174] [ 2634.033019][T22174] dump_stack_lvl+0xda/0x130 [ 2634.037626][T22174] dump_stack+0x15/0x20 [ 2634.041831][T22174] dump_header+0x82/0x2d0 [ 2634.046189][T22174] oom_kill_process+0x33a/0x4c0 [ 2634.051041][T22174] out_of_memory+0x9ca/0xbf0 [ 2634.055701][T22174] mem_cgroup_out_of_memory+0x139/0x190 [ 2634.061317][T22174] try_charge_memcg+0x75c/0xd30 [ 2634.066182][T22174] obj_cgroup_charge_pages+0xab/0x130 [ 2634.071638][T22174] __memcg_kmem_charge_page+0x9c/0x170 [ 2634.077102][T22174] __alloc_pages+0x1bb/0x340 [ 2634.081712][T22174] alloc_pages_mpol+0xb1/0x1d0 [ 2634.086475][T22174] alloc_pages+0xe0/0x100 [ 2634.090801][T22174] __vmalloc_node_range+0x6d2/0xea0 [ 2634.096094][T22174] kvmalloc_node+0x121/0x160 [ 2634.100690][T22174] ? xt_alloc_table_info+0x3d/0x80 [ 2634.105871][T22174] xt_alloc_table_info+0x3d/0x80 [ 2634.110807][T22174] do_arpt_set_ctl+0x634/0x13b0 [ 2634.115660][T22174] ? __futex_wait+0x227/0x280 [ 2634.120332][T22174] ? __futex_wake_mark+0x70/0x70 [ 2634.125429][T22174] ? tcp_release_cb+0xfe/0x370 [ 2634.130327][T22174] ? _raw_spin_unlock_bh+0x36/0x40 [ 2634.135575][T22174] nf_setsockopt+0x18d/0x1b0 [ 2634.140228][T22174] ip_setsockopt+0xe6/0x100 [ 2634.144789][T22174] tcp_setsockopt+0x90/0xa0 [ 2634.149318][T22174] sock_common_setsockopt+0x61/0x70 [ 2634.154574][T22174] ? sock_common_recvmsg+0xe0/0xe0 [ 2634.159773][T22174] __sys_setsockopt+0x1d4/0x240 [ 2634.164624][T22174] __x64_sys_setsockopt+0x66/0x80 [ 2634.169768][T22174] do_syscall_64+0x44/0x110 [ 2634.174278][T22174] ? syscall_exit_to_user_mode+0x38/0x140 [ 2634.180038][T22174] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2634.185936][T22174] RIP: 0033:0x7f50c0fa7ba9 [ 2634.190346][T22174] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2634.209969][T22174] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2634.218394][T22174] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2634.226359][T22174] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2634.234398][T22174] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2634.242376][T22174] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2634.250434][T22174] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2634.258414][T22174] [ 2634.261565][T22174] memory: usage 307200kB, limit 307200kB, failcnt 99985 [ 2634.268588][T22174] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2634.276597][T22174] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2634.283930][T22174] Memory cgroup stats for /syz3: [ 2634.287442][T22174] cache 16384 [ 2634.295717][T22174] rss 8192 [ 2634.298779][T22174] shmem 0 [ 2634.301714][T22174] mapped_file 0 [ 2634.305190][T22174] dirty 8192 [ 2634.308410][T22174] writeback 4096 [ 2634.311958][T22174] workingset_refault_anon 75041 [ 2634.316829][T22174] workingset_refault_file 320 [ 2634.321497][T22174] swap 1888256 [ 2634.324870][T22174] swapcached 8192 [ 2634.328593][T22174] pgpgin 378531 [ 2634.332048][T22174] pgpgout 378523 [ 2634.335589][T22174] pgfault 564825 [ 2634.339196][T22174] pgmajfault 39675 [ 2634.342931][T22174] inactive_anon 0 [ 2634.346587][T22174] active_anon 8192 [ 2634.350305][T22174] inactive_file 4096 [ 2634.354202][T22174] active_file 12288 [ 2634.358129][T22174] unevictable 0 [ 2634.361604][T22174] hierarchical_memory_limit 314572800 [ 2634.366995][T22174] hierarchical_memsw_limit 9223372036854771712 [ 2634.373191][T22174] total_cache 16384 [ 2634.377031][T22174] total_rss 8192 [ 2634.380583][T22174] total_shmem 0 [ 2634.384047][T22174] total_mapped_file 0 [ 2634.388071][T22174] total_dirty 8192 [ 2634.391861][T22174] total_writeback 4096 [ 2634.395929][T22174] total_workingset_refault_anon 75041 [ 2634.401327][T22174] total_workingset_refault_file 320 [ 2634.406541][T22174] total_swap 1888256 [ 2634.410430][T22174] total_swapcached 8192 [ 2634.414611][T22174] total_pgpgin 378531 [ 2634.418616][T22174] total_pgpgout 378523 [ 2634.422745][T22174] total_pgfault 564825 [ 2634.426869][T22174] total_pgmajfault 39675 [ 2634.431111][T22174] total_inactive_anon 0 [ 2634.435311][T22174] total_active_anon 8192 [ 2634.439605][T22174] total_inactive_file 4096 [ 2634.444025][T22174] total_active_file 12288 [ 2634.448374][T22174] total_unevictable 0 [ 2634.452365][T22174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22172,uid=0 [ 2634.467836][T22174] Memory cgroup out of memory: Killed process 22172 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2634.488308][T22164] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2634.499675][T22164] CPU: 0 PID: 22164 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2634.510102][T22164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2634.520160][T22164] Call Trace: [ 2634.523436][T22164] [ 2634.526364][T22164] dump_stack_lvl+0xda/0x130 [ 2634.530990][T22164] dump_stack+0x15/0x20 [ 2634.535164][T22164] dump_header+0x82/0x2d0 [ 2634.539589][T22164] oom_kill_process+0x33a/0x4c0 [ 2634.544527][T22164] out_of_memory+0x9ca/0xbf0 [ 2634.549203][T22164] mem_cgroup_out_of_memory+0x139/0x190 [ 2634.554776][T22164] try_charge_memcg+0x75c/0xd30 [ 2634.559774][T22164] ? __swap_duplicate+0x29b/0x2b0 [ 2634.564878][T22164] ? radix_tree_lookup+0xf9/0x150 [ 2634.570073][T22164] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2634.576140][T22164] __read_swap_cache_async+0x2f6/0x550 [ 2634.581604][T22164] swap_cluster_readahead+0x27c/0x4c0 [ 2634.587020][T22164] swapin_readahead+0xe9/0x7f0 [ 2634.591841][T22164] ? __filemap_get_folio+0x41a/0x5a0 [ 2634.597196][T22164] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2634.602826][T22164] ? swap_cache_get_folio+0x6e/0x200 [ 2634.608149][T22164] do_swap_page+0x4a0/0x1670 [ 2634.612842][T22164] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2634.618204][T22164] ? __rcu_read_lock+0x35/0x50 [ 2634.622960][T22164] ? pte_offset_map_nolock+0x124/0x1d0 [ 2634.628461][T22164] handle_mm_fault+0xa36/0x2dd0 [ 2634.633372][T22164] exc_page_fault+0x3ff/0x6c0 [ 2634.638045][T22164] asm_exc_page_fault+0x26/0x30 [ 2634.642936][T22164] RIP: 0033:0x7ffbf06d087c [ 2634.647348][T22164] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 35 f8 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 2634.667011][T22164] RSP: 002b:00007ffc3358c9b0 EFLAGS: 00010286 [ 2634.673100][T22164] RAX: 0000000000000000 RBX: 00007ffbf0834018 RCX: 0000000000000000 [ 2634.681121][T22164] RDX: ffffffff83b076b4 RSI: 00007ffbf0098008 RDI: 00007ffbf0834018 [ 2634.689106][T22164] RBP: 0000000083b07000 R08: 0000001b32520000 R09: 0000000000000000 [ 2634.697149][T22164] R10: 0000000000000001 R11: 000000000007d0d0 R12: 0000000000000000 [ 2634.705117][T22164] R13: 0000000000000001 R14: 00007ffbf0828000 R15: ffffffff83b076b4 [ 2634.713093][T22164] ? __x64_sys_setsockopt+0x14/0x80 [ 2634.718383][T22164] ? __x64_sys_setsockopt+0x14/0x80 [ 2634.723711][T22164] [ 2634.726847][T22164] memory: usage 307200kB, limit 307200kB, failcnt 51982 [ 2634.733788][T22164] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2634.741728][T22164] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2634.749664][T22164] Memory cgroup stats for /syz4: [ 2634.752770][T22164] cache 12288 [ 2634.761088][T22164] rss 8192 [ 2634.764121][T22164] shmem 0 [ 2634.767077][T22164] mapped_file 0 [ 2634.770527][T22164] dirty 4096 [ 2634.773722][T22164] writeback 0 [ 2634.777015][T22164] workingset_refault_anon 65171 [ 2634.782127][T22164] workingset_refault_file 309 [ 2634.786846][T22164] swap 4632576 [ 2634.790208][T22164] swapcached 8192 [ 2634.793834][T22164] pgpgin 892093 [ 2634.797329][T22164] pgpgout 892088 [ 2634.800870][T22164] pgfault 971684 [ 2634.804437][T22164] pgmajfault 34132 [ 2634.808276][T22164] inactive_anon 8192 [ 2634.812179][T22164] active_anon 0 [ 2634.815634][T22164] inactive_file 12288 [ 2634.819632][T22164] active_file 0 [ 2634.823132][T22164] unevictable 0 [ 2634.826605][T22164] hierarchical_memory_limit 314572800 [ 2634.831975][T22164] hierarchical_memsw_limit 9223372036854771712 [ 2634.838155][T22164] total_cache 12288 [ 2634.841965][T22164] total_rss 8192 [ 2634.845507][T22164] total_shmem 0 [ 2634.848983][T22164] total_mapped_file 0 [ 2634.852963][T22164] total_dirty 4096 [ 2634.856868][T22164] total_writeback 0 [ 2634.860670][T22164] total_workingset_refault_anon 65171 [ 2634.866047][T22164] total_workingset_refault_file 309 [ 2634.871301][T22164] total_swap 4632576 [ 2634.875192][T22164] total_swapcached 8192 [ 2634.879361][T22164] total_pgpgin 892093 [ 2634.883385][T22164] total_pgpgout 892088 [ 2634.887488][T22164] total_pgfault 971684 [ 2634.891548][T22164] total_pgmajfault 34132 [ 2634.895825][T22164] total_inactive_anon 8192 03:56:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xf}, 0x0) 03:56:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xa000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2634.900269][T22164] total_active_anon 0 [ 2634.904271][T22164] total_inactive_file 12288 [ 2634.908830][T22164] total_active_file 0 [ 2634.912804][T22164] total_unevictable 0 [ 2634.916796][T22164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22164,uid=0 [ 2634.932188][T22164] Memory cgroup out of memory: Killed process 22164 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2635.010024][T22189] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2635.018678][T22187] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x300}, 0x0) 03:56:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xb}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xb000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x500}, 0x0) 03:56:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xc000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xc}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2635.252638][T22201] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2635.260872][T22197] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2635.299010][T22204] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2635.319843][T22208] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2635.809835][T22190] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2635.821292][T22190] CPU: 0 PID: 22190 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2635.831775][T22190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2635.841858][T22190] Call Trace: [ 2635.845138][T22190] [ 2635.848080][T22190] dump_stack_lvl+0xda/0x130 [ 2635.852687][T22190] dump_stack+0x15/0x20 [ 2635.856895][T22190] dump_header+0x82/0x2d0 [ 2635.861336][T22190] oom_kill_process+0x33a/0x4c0 [ 2635.866314][T22190] out_of_memory+0x9ca/0xbf0 [ 2635.870938][T22190] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2635.877082][T22190] mem_cgroup_out_of_memory+0x139/0x190 [ 2635.882652][T22190] try_charge_memcg+0x75c/0xd30 [ 2635.887531][T22190] ? __swap_duplicate+0x29b/0x2b0 [ 2635.892705][T22190] ? radix_tree_lookup+0xf9/0x150 [ 2635.897856][T22190] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2635.904017][T22190] __read_swap_cache_async+0x2f6/0x550 [ 2635.909501][T22190] swap_cluster_readahead+0x27c/0x4c0 [ 2635.914889][T22190] swapin_readahead+0xe9/0x7f0 [ 2635.919671][T22190] ? __filemap_get_folio+0x41a/0x5a0 [ 2635.924967][T22190] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2635.930982][T22190] ? swap_cache_get_folio+0x6e/0x200 [ 2635.936361][T22190] do_swap_page+0x4a0/0x1670 [ 2635.940989][T22190] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2635.946302][T22190] ? __rcu_read_lock+0x35/0x50 [ 2635.951151][T22190] ? pte_offset_map_nolock+0x124/0x1d0 [ 2635.956691][T22190] handle_mm_fault+0xa36/0x2dd0 [ 2635.961552][T22190] exc_page_fault+0x3ff/0x6c0 [ 2635.966257][T22190] asm_exc_page_fault+0x26/0x30 [ 2635.971194][T22190] RIP: 0033:0x7f07d1420bc4 [ 2635.975622][T22190] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2635.995421][T22190] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2636.001482][T22190] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2636.009469][T22190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2636.017529][T22190] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2636.025504][T22190] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000283851 [ 2636.033495][T22190] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000283510 [ 2636.041474][T22190] [ 2636.044607][T22190] memory: usage 307200kB, limit 307200kB, failcnt 200721 [ 2636.051656][T22190] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2636.059605][T22190] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2636.067024][T22190] Memory cgroup stats for /syz1: [ 2636.098606][T22190] cache 4096 [ 2636.106991][T22190] rss 8192 [ 2636.110086][T22190] shmem 0 [ 2636.113031][T22190] mapped_file 0 [ 2636.116530][T22190] dirty 4096 [ 2636.119727][T22190] writeback 16384 [ 2636.123397][T22190] workingset_refault_anon 90897 [ 2636.128308][T22190] workingset_refault_file 314 [ 2636.133157][T22190] swap 536576 [ 2636.136532][T22190] swapcached 16384 [ 2636.140264][T22190] pgpgin 2000288 [ 2636.143800][T22190] pgpgout 2000283 [ 2636.147446][T22190] pgfault 2098327 [ 2636.151071][T22190] pgmajfault 40132 [ 2636.154778][T22190] inactive_anon 0 [ 2636.158416][T22190] active_anon 0 [ 2636.161954][T22190] inactive_file 4096 [ 2636.165860][T22190] active_file 0 [ 2636.169332][T22190] unevictable 0 [ 2636.172778][T22190] hierarchical_memory_limit 314572800 [ 2636.178196][T22190] hierarchical_memsw_limit 9223372036854771712 [ 2636.184343][T22190] total_cache 4096 [ 2636.188098][T22190] total_rss 8192 [ 2636.191694][T22190] total_shmem 0 [ 2636.195143][T22190] total_mapped_file 0 [ 2636.199133][T22190] total_dirty 4096 [ 2636.202890][T22190] total_writeback 16384 [ 2636.207049][T22190] total_workingset_refault_anon 90897 [ 2636.212407][T22190] total_workingset_refault_file 314 [ 2636.217699][T22190] total_swap 536576 [ 2636.221499][T22190] total_swapcached 16384 [ 2636.225769][T22190] total_pgpgin 2000288 [ 2636.229848][T22190] total_pgpgout 2000283 [ 2636.233994][T22190] total_pgfault 2098327 [ 2636.238206][T22190] total_pgmajfault 40132 [ 2636.242487][T22190] total_inactive_anon 0 [ 2636.246649][T22190] total_active_anon 0 [ 2636.250730][T22190] total_inactive_file 4096 [ 2636.255217][T22190] total_active_file 0 [ 2636.259219][T22190] total_unevictable 0 [ 2636.263193][T22190] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22190,uid=0 [ 2636.278511][T22190] Memory cgroup out of memory: Killed process 22190 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x600}, 0x0) 03:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xd000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xd}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x22]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x700}, 0x0) 03:56:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xe}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xe000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x900}, 0x0) [ 2636.491477][T22216] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2636.507151][T22218] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xb00}, 0x0) 03:56:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2636.547733][T22225] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2636.573257][T22229] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x10000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xf00}, 0x0) [ 2636.603879][T22231] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2636.636855][T22235] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2636.665797][T22237] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2637.379317][T22219] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2637.390715][T22219] CPU: 1 PID: 22219 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2637.401132][T22219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2637.411403][T22219] Call Trace: [ 2637.414734][T22219] [ 2637.417666][T22219] dump_stack_lvl+0xda/0x130 [ 2637.422306][T22219] dump_stack+0x15/0x20 03:56:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2637.426553][T22219] dump_header+0x82/0x2d0 [ 2637.430889][T22219] oom_kill_process+0x33a/0x4c0 [ 2637.435757][T22219] out_of_memory+0x9ca/0xbf0 [ 2637.440361][T22219] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2637.446507][T22219] mem_cgroup_out_of_memory+0x139/0x190 [ 2637.452115][T22219] try_charge_memcg+0x75c/0xd30 [ 2637.456978][T22219] ? __swap_duplicate+0x29b/0x2b0 [ 2637.462104][T22219] ? radix_tree_lookup+0xf9/0x150 [ 2637.467276][T22219] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2637.473359][T22219] __read_swap_cache_async+0x2f6/0x550 [ 2637.478890][T22219] swap_cluster_readahead+0x27c/0x4c0 [ 2637.484263][T22219] swapin_readahead+0xe9/0x7f0 [ 2637.489226][T22219] ? __filemap_get_folio+0x41a/0x5a0 [ 2637.494796][T22219] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2637.500443][T22219] ? swap_cache_get_folio+0x6e/0x200 [ 2637.505888][T22219] do_swap_page+0x4a0/0x1670 [ 2637.510505][T22219] ? __rcu_read_lock+0x35/0x50 [ 2637.515281][T22219] ? pte_offset_map_nolock+0x124/0x1d0 [ 2637.520747][T22219] handle_mm_fault+0xa36/0x2dd0 [ 2637.525812][T22219] ? mt_find+0x1d9/0x310 [ 2637.530069][T22219] exc_page_fault+0x2f7/0x6c0 [ 2637.534930][T22219] asm_exc_page_fault+0x26/0x30 [ 2637.539852][T22219] RIP: 0010:__get_user_8+0x11/0x20 [ 2637.545033][T22219] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2637.564698][T22219] RSP: 0018:ffffc90000e17e38 EFLAGS: 00050202 [ 2637.570749][T22219] RAX: 000055555595bda8 RBX: ffffc90000e17e40 RCX: ffffffff81443e13 [ 2637.578743][T22219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881097089d0 [ 2637.588387][T22219] RBP: ffffc90000e17ef8 R08: 00018881097089d7 R09: 0000000000000000 [ 2637.596725][T22219] R10: 0001ffffffffffff R11: 0001888109708698 R12: ffff888109708000 [ 2637.604708][T22219] R13: ffff8881097089d0 R14: ffffc90000e17f58 R15: ffffc90000e17fd8 [ 2637.612720][T22219] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2637.618649][T22219] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2637.624361][T22219] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2637.630241][T22219] exit_to_user_mode_loop+0xcc/0xe0 [ 2637.635430][T22219] exit_to_user_mode_prepare+0x6c/0xb0 [ 2637.640950][T22219] irqentry_exit_to_user_mode+0x9/0x20 [ 2637.646427][T22219] irqentry_exit+0x12/0x40 [ 2637.650827][T22219] asm_exc_page_fault+0x26/0x30 [ 2637.655699][T22219] RIP: 0033:0x7f07d1411226 [ 2637.660094][T22219] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 2637.679694][T22219] RSP: 002b:00007fffaf03b868 EFLAGS: 00010287 [ 2637.685851][T22219] RAX: 0000001b2ce22000 RBX: 00007f07d1586018 RCX: 0000001b2ce20000 [ 2637.693888][T22219] RDX: 0000001b2ce22004 RSI: 0000000080000000 RDI: 00000000819f1ac1 [ 2637.701841][T22219] RBP: 00000000819f1ac1 R08: 0000001b2d220000 R09: 0000000000001ac1 [ 2637.709793][T22219] R10: 00000000819f1ac5 R11: 000000000007d33a R12: 0000000000011fd5 [ 2637.717750][T22219] R13: 0000000000000001 R14: 00007f07d157a000 R15: ffffffff819f1979 [ 2637.725710][T22219] ? elv_rqhash_add+0x19/0x110 03:56:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2637.730466][T22219] [ 2637.733615][T22219] memory: usage 307200kB, limit 307200kB, failcnt 200878 [ 2637.740755][T22219] memory+swap: usage 307736kB, limit 9007199254740988kB, failcnt 0 [ 2637.748677][T22219] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 2637.756016][T22219] Memory cgroup stats for /syz1: [ 2637.756152][T22219] cache 4096 [ 2637.764353][T22219] rss 0 [ 2637.767156][T22219] shmem 0 [ 2637.770100][T22219] mapped_file 0 [ 2637.773535][T22219] dirty 4096 [ 2637.776787][T22219] writeback 4096 [ 2637.780579][T22219] workingset_refault_anon 90939 [ 2637.785510][T22219] workingset_refault_file 314 [ 2637.790286][T22219] swap 548864 [ 2637.793617][T22219] swapcached 4096 [ 2637.797354][T22219] pgpgin 2000353 [ 2637.800905][T22219] pgpgout 2000351 [ 2637.804552][T22219] pgfault 2098494 [ 2637.808230][T22219] pgmajfault 40153 [ 2637.811969][T22219] inactive_anon 0 [ 2637.815610][T22219] active_anon 0 [ 2637.819096][T22219] inactive_file 0 [ 2637.822795][T22219] active_file 4096 [ 2637.826559][T22219] unevictable 0 [ 2637.830034][T22219] hierarchical_memory_limit 314572800 [ 2637.835406][T22219] hierarchical_memsw_limit 9223372036854771712 [ 2637.841706][T22219] total_cache 4096 [ 2637.845466][T22219] total_rss 0 [ 2637.848799][T22219] total_shmem 0 [ 2637.852313][T22219] total_mapped_file 0 [ 2637.856329][T22219] total_dirty 4096 [ 2637.860047][T22219] total_writeback 4096 [ 2637.864167][T22219] total_workingset_refault_anon 90939 [ 2637.869585][T22219] total_workingset_refault_file 314 [ 2637.874803][T22219] total_swap 548864 [ 2637.878707][T22219] total_swapcached 4096 [ 2637.882941][T22219] total_pgpgin 2000353 [ 2637.887121][T22219] total_pgpgout 2000351 [ 2637.891379][T22219] total_pgfault 2098494 [ 2637.895553][T22219] total_pgmajfault 40153 [ 2637.899993][T22219] total_inactive_anon 0 [ 2637.904184][T22219] total_active_anon 0 [ 2637.908200][T22219] total_inactive_file 0 [ 2637.912341][T22219] total_active_file 4096 [ 2637.916637][T22219] total_unevictable 0 [ 2637.920706][T22219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22219,uid=0 [ 2637.936039][T22219] Memory cgroup out of memory: Killed process 22219 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x29]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x11000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x2000}, 0x0) 03:56:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x11}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x45da}, 0x0) 03:56:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x12}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xda45}, 0x0) [ 2638.268978][T22247] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2638.277333][T22249] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x12000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x34000}, 0x0) 03:56:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x25}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2638.337671][T22256] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2638.364415][T22259] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2638.434046][T22264] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x20000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2638.685712][T22266] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2638.974878][T22250] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2638.986289][T22250] CPU: 1 PID: 22250 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2638.996780][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2639.006932][T22250] Call Trace: [ 2639.010214][T22250] [ 2639.013150][T22250] dump_stack_lvl+0xda/0x130 [ 2639.017762][T22250] dump_stack+0x15/0x20 [ 2639.021924][T22250] dump_header+0x82/0x2d0 [ 2639.026349][T22250] oom_kill_process+0x33a/0x4c0 [ 2639.031236][T22250] out_of_memory+0x9ca/0xbf0 [ 2639.035828][T22250] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2639.041906][T22250] mem_cgroup_out_of_memory+0x139/0x190 [ 2639.047471][T22250] try_charge_memcg+0x75c/0xd30 [ 2639.052370][T22250] ? __swap_duplicate+0x29b/0x2b0 [ 2639.057417][T22250] ? radix_tree_lookup+0xf9/0x150 [ 2639.062977][T22250] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2639.069124][T22250] __read_swap_cache_async+0x2f6/0x550 [ 2639.074594][T22250] swap_cluster_readahead+0x27c/0x4c0 [ 2639.080030][T22250] swapin_readahead+0xe9/0x7f0 [ 2639.084803][T22250] ? __filemap_get_folio+0x41a/0x5a0 [ 2639.090195][T22250] ? swap_cache_get_folio+0x6e/0x200 [ 2639.095815][T22250] do_swap_page+0x4a0/0x1670 [ 2639.100536][T22250] ? asm_exc_page_fault+0x26/0x30 [ 2639.105919][T22250] ? __rcu_read_lock+0x35/0x50 [ 2639.110682][T22250] ? pte_offset_map_nolock+0x124/0x1d0 [ 2639.116470][T22250] handle_mm_fault+0xa36/0x2dd0 [ 2639.121335][T22250] exc_page_fault+0x3ff/0x6c0 [ 2639.126130][T22250] asm_exc_page_fault+0x26/0x30 [ 2639.130981][T22250] RIP: 0033:0x7f07d1420bc4 [ 2639.135459][T22250] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2639.155227][T22250] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2639.161307][T22250] RAX: 0000000000000000 RBX: 00007f07d1586050 RCX: 0000000000000000 03:56:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x48}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2639.169467][T22250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2639.177889][T22250] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2639.185862][T22250] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000284503 [ 2639.193824][T22250] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 00000000002841c2 [ 2639.201814][T22250] [ 2639.205031][T22250] memory: usage 307200kB, limit 307200kB, failcnt 201518 [ 2639.212098][T22250] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 2639.220077][T22250] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2639.222966][T22268] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2639.227493][T22250] Memory cgroup stats for /syz1: [ 2639.236241][T22250] cache 4096 [ 2639.244513][T22250] rss 8192 [ 2639.247563][T22250] shmem 0 [ 2639.250516][T22250] mapped_file 0 [ 2639.253965][T22250] dirty 0 [ 2639.257034][T22250] writeback 16384 [ 2639.260655][T22250] workingset_refault_anon 90971 [ 2639.265518][T22250] workingset_refault_file 314 [ 2639.270273][T22250] swap 528384 [ 2639.273546][T22250] swapcached 24576 [ 2639.277378][T22250] pgpgin 2000408 [ 2639.280916][T22250] pgpgout 2000401 [ 2639.284665][T22250] pgfault 2098643 [ 2639.288406][T22250] pgmajfault 40160 [ 2639.292154][T22250] inactive_anon 0 [ 2639.295855][T22250] active_anon 0 [ 2639.299506][T22250] inactive_file 4096 [ 2639.303389][T22250] active_file 0 [ 2639.306872][T22250] unevictable 0 [ 2639.310322][T22250] hierarchical_memory_limit 314572800 [ 2639.315815][T22250] hierarchical_memsw_limit 9223372036854771712 [ 2639.322169][T22250] total_cache 4096 [ 2639.325885][T22250] total_rss 8192 [ 2639.329485][T22250] total_shmem 0 [ 2639.332985][T22250] total_mapped_file 0 [ 2639.337003][T22250] total_dirty 0 [ 2639.340455][T22250] total_writeback 16384 [ 2639.344588][T22250] total_workingset_refault_anon 90971 [ 2639.350002][T22250] total_workingset_refault_file 314 [ 2639.355190][T22250] total_swap 528384 [ 2639.359030][T22250] total_swapcached 24576 [ 2639.363332][T22250] total_pgpgin 2000408 [ 2639.367423][T22250] total_pgpgout 2000401 [ 2639.371632][T22250] total_pgfault 2098643 [ 2639.375773][T22250] total_pgmajfault 40160 [ 2639.380163][T22250] total_inactive_anon 0 [ 2639.384305][T22250] total_active_anon 0 [ 2639.388304][T22250] total_inactive_file 4096 [ 2639.392715][T22250] total_active_file 0 [ 2639.398229][T22250] total_unevictable 0 [ 2639.402210][T22250] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22250,uid=0 [ 2639.417600][T22250] Memory cgroup out of memory: Killed process 22250 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x3e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x25000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x400300}, 0x0) 03:56:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x60}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x1000000}, 0x0) 03:56:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x313b0000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x68}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2639.594449][T22274] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2639.616070][T22279] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2639.631854][T22281] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x48000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x2000000}, 0x0) [ 2639.666913][T22286] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2639.701942][T22291] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2639.714693][T22289] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xfe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x4c000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x0) 03:56:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 03:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x60000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x5000000}, 0x0) [ 2640.788488][T22299] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2640.802307][T22302] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x74}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x6000000}, 0x0) 03:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x63430000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2640.849026][T22311] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2640.872715][T22314] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2640.908067][T22317] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2641.558376][T22305] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2641.569841][T22305] CPU: 1 PID: 22305 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2641.580260][T22305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2641.590321][T22305] Call Trace: [ 2641.593607][T22305] [ 2641.596664][T22305] dump_stack_lvl+0xda/0x130 [ 2641.601364][T22305] dump_stack+0x15/0x20 [ 2641.605727][T22305] dump_header+0x82/0x2d0 [ 2641.610100][T22305] oom_kill_process+0x33a/0x4c0 [ 2641.615098][T22305] out_of_memory+0x9ca/0xbf0 [ 2641.619697][T22305] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2641.625803][T22305] mem_cgroup_out_of_memory+0x139/0x190 [ 2641.631370][T22305] try_charge_memcg+0x75c/0xd30 [ 2641.636244][T22305] ? __swap_duplicate+0x29b/0x2b0 [ 2641.641313][T22305] ? radix_tree_lookup+0xf9/0x150 [ 2641.646353][T22305] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2641.652443][T22305] __read_swap_cache_async+0x2f6/0x550 [ 2641.657947][T22305] swap_cluster_readahead+0x27c/0x4c0 [ 2641.663412][T22305] swapin_readahead+0xe9/0x7f0 [ 2641.668275][T22305] ? __filemap_get_folio+0x41a/0x5a0 [ 2641.673775][T22305] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2641.679518][T22305] ? swap_cache_get_folio+0x6e/0x200 [ 2641.684905][T22305] do_swap_page+0x4a0/0x1670 [ 2641.689500][T22305] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2641.694829][T22305] ? __rcu_read_lock+0x35/0x50 [ 2641.699589][T22305] ? pte_offset_map_nolock+0x124/0x1d0 [ 2641.705055][T22305] handle_mm_fault+0xa36/0x2dd0 [ 2641.709916][T22305] exc_page_fault+0x3ff/0x6c0 [ 2641.714940][T22305] asm_exc_page_fault+0x26/0x30 [ 2641.719801][T22305] RIP: 0033:0x7ffbf06cebc4 [ 2641.724241][T22305] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2641.743903][T22305] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2641.750050][T22305] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 03:56:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2641.758034][T22305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2641.766131][T22305] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2641.774130][T22305] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000284ef7 [ 2641.782098][T22305] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000284bb6 [ 2641.790133][T22305] [ 2641.793275][T22305] memory: usage 307200kB, limit 307200kB, failcnt 52435 [ 2641.800308][T22305] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2641.808315][T22305] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2641.815666][T22305] Memory cgroup stats for /syz4: [ 2641.815912][T22305] cache 12288 [ 2641.824214][T22305] rss 8192 [ 2641.827296][T22305] shmem 0 [ 2641.830229][T22305] mapped_file 0 [ 2641.833956][T22305] dirty 0 [ 2641.836952][T22305] writeback 8192 [ 2641.840525][T22305] workingset_refault_anon 65369 [ 2641.845497][T22305] workingset_refault_file 309 [ 2641.850299][T22305] swap 4632576 [ 2641.853724][T22305] swapcached 8192 [ 2641.857385][T22305] pgpgin 892401 [ 2641.860857][T22305] pgpgout 892396 [ 2641.864468][T22305] pgfault 972580 [ 2641.868062][T22305] pgmajfault 34229 [ 2641.871789][T22305] inactive_anon 0 [ 2641.875458][T22305] active_anon 0 [ 2641.878947][T22305] inactive_file 0 [ 2641.882666][T22305] active_file 12288 [ 2641.886571][T22305] unevictable 0 [ 2641.890021][T22305] hierarchical_memory_limit 314572800 [ 2641.895499][T22305] hierarchical_memsw_limit 9223372036854771712 [ 2641.901768][T22305] total_cache 12288 [ 2641.905595][T22305] total_rss 8192 [ 2641.909210][T22305] total_shmem 0 [ 2641.912806][T22305] total_mapped_file 0 [ 2641.916920][T22305] total_dirty 0 [ 2641.920416][T22305] total_writeback 8192 [ 2641.924575][T22305] total_workingset_refault_anon 65369 [ 2641.930052][T22305] total_workingset_refault_file 309 [ 2641.935381][T22305] total_swap 4632576 [ 2641.939304][T22305] total_swapcached 8192 [ 2641.943485][T22305] total_pgpgin 892401 [ 2641.947536][T22305] total_pgpgout 892396 [ 2641.951600][T22305] total_pgfault 972580 [ 2641.955785][T22305] total_pgmajfault 34229 [ 2641.960053][T22305] total_inactive_anon 0 [ 2641.964196][T22305] total_active_anon 0 [ 2641.968346][T22305] total_inactive_file 0 [ 2641.972597][T22305] total_active_file 12288 [ 2641.977039][T22305] total_unevictable 0 [ 2641.981119][T22305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22305,uid=0 [ 2641.996452][T22305] Memory cgroup out of memory: Killed process 22305 (syz-executor.4) total-vm:46300kB, anon-rss:324kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2642.078719][ T3105] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2642.089807][ T3105] CPU: 1 PID: 3105 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2642.100375][ T3105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2642.110422][ T3105] Call Trace: [ 2642.113688][ T3105] [ 2642.116681][ T3105] dump_stack_lvl+0xda/0x130 [ 2642.121291][ T3105] dump_stack+0x15/0x20 [ 2642.125489][ T3105] dump_header+0x82/0x2d0 [ 2642.129824][ T3105] oom_kill_process+0x33a/0x4c0 [ 2642.134777][ T3105] out_of_memory+0x9ca/0xbf0 [ 2642.139396][ T3105] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2642.145494][ T3105] mem_cgroup_out_of_memory+0x139/0x190 [ 2642.151075][ T3105] try_charge_memcg+0x75c/0xd30 [ 2642.155963][ T3105] ? __swap_duplicate+0x29b/0x2b0 [ 2642.160997][ T3105] ? radix_tree_lookup+0xf9/0x150 [ 2642.166016][ T3105] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2642.172246][ T3105] __read_swap_cache_async+0x2f6/0x550 [ 2642.177699][ T3105] swap_cluster_readahead+0x27c/0x4c0 [ 2642.183170][ T3105] swapin_readahead+0xe9/0x7f0 [ 2642.187923][ T3105] ? __filemap_get_folio+0x41a/0x5a0 [ 2642.193395][ T3105] ? swap_cache_get_folio+0x6e/0x200 [ 2642.198682][ T3105] do_swap_page+0x4a0/0x1670 [ 2642.203265][ T3105] ? __rcu_read_lock+0x35/0x50 [ 2642.208094][ T3105] ? pte_offset_map_nolock+0x124/0x1d0 [ 2642.213546][ T3105] handle_mm_fault+0xa36/0x2dd0 [ 2642.218403][ T3105] exc_page_fault+0x3ff/0x6c0 [ 2642.223072][ T3105] asm_exc_page_fault+0x26/0x30 [ 2642.227923][ T3105] RIP: 0033:0x7f07d1491f75 [ 2642.232524][ T3105] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 8e 4f 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 2642.252133][ T3105] RSP: 002b:00007fffaf03baf8 EFLAGS: 00010246 [ 2642.258338][ T3105] RAX: 0000000000000000 RBX: 0000000000001fbe RCX: 00007f07d1491f73 [ 2642.266304][ T3105] RDX: 00007fffaf03bb10 RSI: 0000000000000000 RDI: 0000000000000000 [ 2642.274270][ T3105] RBP: 00007fffaf03bb9c R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2642.282234][ T3105] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2642.290196][ T3105] R13: 0000000000284bce R14: 0000000000284bab R15: 0000000000000001 [ 2642.298220][ T3105] [ 2642.301560][ T3105] memory: usage 307200kB, limit 307200kB, failcnt 201816 [ 2642.308639][ T3105] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2642.316667][ T3105] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2642.323974][ T3105] Memory cgroup stats for /syz1: [ 2642.331088][ T3105] cache 4096 [ 2642.339305][ T3105] rss 0 [ 2642.342116][ T3105] shmem 0 [ 2642.345044][ T3105] mapped_file 0 [ 2642.348610][ T3105] dirty 0 [ 2642.351538][ T3105] writeback 4096 [ 2642.355140][ T3105] workingset_refault_anon 91053 [ 2642.360044][ T3105] workingset_refault_file 314 [ 2642.364708][ T3105] swap 544768 [ 2642.367998][ T3105] swapcached 8192 [ 2642.371695][ T3105] pgpgin 2000537 [ 2642.375232][ T3105] pgpgout 2000534 [ 2642.378953][ T3105] pgfault 2098999 [ 2642.382606][ T3105] pgmajfault 40202 [ 2642.386398][ T3105] inactive_anon 0 [ 2642.390041][ T3105] active_anon 0 [ 2642.393493][ T3105] inactive_file 0 [ 2642.397146][ T3105] active_file 4096 [ 2642.400854][ T3105] unevictable 0 [ 2642.404301][ T3105] hierarchical_memory_limit 314572800 [ 2642.409708][ T3105] hierarchical_memsw_limit 9223372036854771712 [ 2642.415845][ T3105] total_cache 4096 [ 2642.419572][ T3105] total_rss 0 [ 2642.422840][ T3105] total_shmem 0 [ 2642.426326][ T3105] total_mapped_file 0 [ 2642.430294][ T3105] total_dirty 0 [ 2642.433795][ T3105] total_writeback 4096 [ 2642.437879][ T3105] total_workingset_refault_anon 91053 [ 2642.443238][ T3105] total_workingset_refault_file 314 [ 2642.452536][ T3105] total_swap 544768 [ 2642.456385][ T3105] total_swapcached 8192 [ 2642.460696][ T3105] total_pgpgin 2000537 [ 2642.464800][ T3105] total_pgpgout 2000534 [ 2642.469119][ T3105] total_pgfault 2098999 [ 2642.473272][ T3105] total_pgmajfault 40202 [ 2642.477562][ T3105] total_inactive_anon 0 [ 2642.481740][ T3105] total_active_anon 0 [ 2642.485761][ T3105] total_inactive_file 0 [ 2642.490004][ T3105] total_active_file 4096 [ 2642.494271][ T3105] total_unevictable 0 [ 2642.498378][ T3105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22303,uid=0 [ 2642.513678][ T3105] Memory cgroup out of memory: Killed process 22303 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x7000000}, 0x0) 03:56:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7a}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x679a0000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x9000000}, 0x0) 03:56:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xb000000}, 0x0) 03:56:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x68000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2643.162711][T22326] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2643.181301][T22328] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xf000000}, 0x0) [ 2643.281005][T22344] validate_nla: 1 callbacks suppressed [ 2643.281053][T22344] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2644.011813][T22330] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2644.023285][T22330] CPU: 1 PID: 22330 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2644.033928][T22330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2644.044162][T22330] Call Trace: [ 2644.047522][T22330] [ 2644.050453][T22330] dump_stack_lvl+0xda/0x130 [ 2644.055164][T22330] dump_stack+0x15/0x20 [ 2644.059346][T22330] dump_header+0x82/0x2d0 [ 2644.063781][T22330] oom_kill_process+0x33a/0x4c0 [ 2644.068636][T22330] out_of_memory+0x9ca/0xbf0 [ 2644.073253][T22330] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2644.079429][T22330] mem_cgroup_out_of_memory+0x139/0x190 [ 2644.085110][T22330] try_charge_memcg+0x75c/0xd30 [ 2644.089994][T22330] ? __swap_duplicate+0x29b/0x2b0 [ 2644.095035][T22330] ? radix_tree_lookup+0xf9/0x150 [ 2644.100070][T22330] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2644.106243][T22330] __read_swap_cache_async+0x2f6/0x550 [ 2644.111717][T22330] swap_cluster_readahead+0x27c/0x4c0 [ 2644.117195][T22330] swapin_readahead+0xe9/0x7f0 [ 2644.121968][T22330] ? __filemap_get_folio+0x41a/0x5a0 [ 2644.127642][T22330] ? __perf_event_task_sched_in+0x769/0x790 [ 2644.133574][T22330] ? swap_cache_get_folio+0x6e/0x200 [ 2644.138873][T22330] do_swap_page+0x4a0/0x1670 [ 2644.143477][T22330] ? __rcu_read_lock+0x35/0x50 [ 2644.148244][T22330] ? pte_offset_map_nolock+0x124/0x1d0 [ 2644.153714][T22330] handle_mm_fault+0xa36/0x2dd0 [ 2644.158624][T22330] ? mt_find+0x1d9/0x310 [ 2644.163055][T22330] exc_page_fault+0x2f7/0x6c0 [ 2644.167723][T22330] asm_exc_page_fault+0x26/0x30 [ 2644.172635][T22330] RIP: 0010:__get_user_8+0x11/0x20 [ 2644.177736][T22330] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2644.197510][T22330] RSP: 0018:ffffc90000a47e38 EFLAGS: 00050202 [ 2644.203668][T22330] RAX: 000055555710bda8 RBX: ffffc90000a47e40 RCX: ffffffff81443e13 [ 2644.211785][T22330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881cbf909d0 [ 2644.220228][T22330] RBP: ffffc90000a47ef8 R08: 00018881cbf909d7 R09: 0000000000000000 [ 2644.228217][T22330] R10: 0001ffffffffffff R11: 0001c90000a47ec0 R12: ffff8881cbf90000 [ 2644.236477][T22330] R13: ffff8881cbf909d0 R14: ffffc90000a47f58 R15: ffffc90000a47fd8 [ 2644.244539][T22330] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2644.250510][T22330] ? __schedule+0x63e/0x8d0 [ 2644.255006][T22330] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2644.260733][T22330] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2644.266777][T22330] exit_to_user_mode_loop+0xcc/0xe0 [ 2644.272006][T22330] exit_to_user_mode_prepare+0x6c/0xb0 [ 2644.277482][T22330] irqentry_exit_to_user_mode+0x9/0x20 [ 2644.283061][T22330] irqentry_exit+0x12/0x40 [ 2644.287466][T22330] asm_exc_page_fault+0x26/0x30 [ 2644.292345][T22330] RIP: 0033:0x7ffbf06cebc4 [ 2644.296751][T22330] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2644.316354][T22330] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2644.322407][T22330] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2644.330365][T22330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2644.338373][T22330] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2644.346396][T22330] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028583f [ 2644.354356][T22330] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 00000000002854fe [ 2644.362413][T22330] [ 2644.365603][T22330] memory: usage 307200kB, limit 307200kB, failcnt 53748 [ 2644.372702][T22330] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2644.380695][T22330] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2644.388031][T22330] Memory cgroup stats for /syz4: [ 2644.444596][T22330] cache 12288 [ 2644.452870][T22330] rss 8192 [ 2644.455887][T22330] shmem 0 [ 2644.458863][T22330] mapped_file 0 [ 2644.462332][T22330] dirty 0 [ 2644.465266][T22330] writeback 4096 [ 2644.468842][T22330] workingset_refault_anon 65416 [ 2644.473702][T22330] workingset_refault_file 309 [ 2644.478406][T22330] swap 4624384 [ 2644.481773][T22330] swapcached 16384 [ 2644.485569][T22330] pgpgin 892470 [ 2644.489088][T22330] pgpgout 892463 [ 2644.492623][T22330] pgfault 972812 [ 2644.496156][T22330] pgmajfault 34243 [ 2644.500395][T22330] inactive_anon 8192 [ 2644.504282][T22330] active_anon 0 [ 2644.507748][T22330] inactive_file 0 [ 2644.511378][T22330] active_file 12288 [ 2644.515236][T22330] unevictable 0 [ 2644.518770][T22330] hierarchical_memory_limit 314572800 [ 2644.524135][T22330] hierarchical_memsw_limit 9223372036854771712 [ 2644.530306][T22330] total_cache 12288 [ 2644.534102][T22330] total_rss 8192 [ 2644.537698][T22330] total_shmem 0 [ 2644.541269][T22330] total_mapped_file 0 [ 2644.545237][T22330] total_dirty 0 [ 2644.548790][T22330] total_writeback 4096 [ 2644.553013][T22330] total_workingset_refault_anon 65416 [ 2644.558456][T22330] total_workingset_refault_file 309 [ 2644.563729][T22330] total_swap 4624384 [ 2644.567679][T22330] total_swapcached 16384 [ 2644.571970][T22330] total_pgpgin 892470 [ 2644.575951][T22330] total_pgpgout 892463 [ 2644.580114][T22330] total_pgfault 972812 [ 2644.584195][T22330] total_pgmajfault 34243 [ 2644.588459][T22330] total_inactive_anon 8192 [ 2644.592886][T22330] total_active_anon 0 [ 2644.597237][T22330] total_inactive_file 0 [ 2644.601396][T22330] total_active_file 12288 [ 2644.605737][T22330] total_unevictable 0 [ 2644.609783][T22330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22330,uid=0 [ 2644.625087][T22330] Memory cgroup out of memory: Killed process 22330 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x6c000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x20000000}, 0x0) 03:56:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2644.630375][T22349] __nla_validate_parse: 1 callbacks suppressed [ 2644.630400][T22349] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2644.738374][T22356] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x74000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xda450000}, 0x0) 03:56:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xeaffffff}, 0x0) 03:56:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 2645.010112][T22363] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2645.018289][T22362] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2645.044224][T22368] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2645.665796][T22373] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7a000000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xfeffffff}, 0x0) [ 2645.863450][T22365] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2645.877103][T22365] CPU: 0 PID: 22365 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2645.884824][T22380] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2645.887512][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2645.887537][T22365] Call Trace: [ 2645.887544][T22365] [ 2645.887550][T22365] dump_stack_lvl+0xda/0x130 [ 2645.887592][T22365] dump_stack+0x15/0x20 [ 2645.887617][T22365] dump_header+0x82/0x2d0 [ 2645.887645][T22365] oom_kill_process+0x33a/0x4c0 [ 2645.931313][T22365] out_of_memory+0x9ca/0xbf0 [ 2645.936013][T22365] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2645.942139][T22365] mem_cgroup_out_of_memory+0x139/0x190 [ 2645.947772][T22365] try_charge_memcg+0x75c/0xd30 [ 2645.952657][T22365] obj_cgroup_charge_pages+0xab/0x130 [ 2645.958199][T22365] __memcg_kmem_charge_page+0x9c/0x170 [ 2645.963663][T22365] __alloc_pages+0x1bb/0x340 [ 2645.968297][T22365] alloc_pages_mpol+0xb1/0x1d0 [ 2645.973064][T22365] alloc_pages+0xe0/0x100 [ 2645.977406][T22365] __vmalloc_node_range+0x6d2/0xea0 [ 2645.982725][T22365] kvmalloc_node+0x121/0x160 [ 2645.987356][T22365] ? xt_alloc_table_info+0x3d/0x80 [ 2645.992503][T22365] xt_alloc_table_info+0x3d/0x80 [ 2645.997487][T22365] do_arpt_set_ctl+0x634/0x13b0 [ 2646.002380][T22365] ? __futex_wait+0x227/0x280 [ 2646.007083][T22365] ? __futex_wake_mark+0x70/0x70 [ 2646.012090][T22365] ? tcp_release_cb+0xfe/0x370 [ 2646.016903][T22365] ? _raw_spin_unlock_bh+0x36/0x40 [ 2646.022148][T22365] nf_setsockopt+0x18d/0x1b0 [ 2646.026763][T22365] ip_setsockopt+0xe6/0x100 [ 2646.031281][T22365] tcp_setsockopt+0x90/0xa0 [ 2646.035929][T22365] sock_common_setsockopt+0x61/0x70 [ 2646.041336][T22365] ? sock_common_recvmsg+0xe0/0xe0 [ 2646.046446][T22365] __sys_setsockopt+0x1d4/0x240 [ 2646.051389][T22365] __x64_sys_setsockopt+0x66/0x80 [ 2646.056471][T22365] do_syscall_64+0x44/0x110 [ 2646.060995][T22365] ? syscall_exit_to_user_mode+0x38/0x140 [ 2646.066766][T22365] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2646.072709][T22365] RIP: 0033:0x7ffbf0714ba9 [ 2646.077152][T22365] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2646.096754][T22365] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2646.105157][T22365] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2646.113194][T22365] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2646.121153][T22365] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2646.129114][T22365] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2646.137185][T22365] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2646.145170][T22365] [ 2646.148449][T22365] memory: usage 307200kB, limit 307200kB, failcnt 53893 [ 2646.155394][T22365] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2646.163487][T22365] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2646.170907][T22365] Memory cgroup stats for /syz4: [ 2646.171072][T22365] cache 12288 [ 2646.179292][T22365] rss 0 [ 2646.182046][T22365] shmem 0 [ 2646.184973][T22365] mapped_file 0 [ 2646.188478][T22365] dirty 0 [ 2646.191479][T22365] writeback 0 [ 2646.194760][T22365] workingset_refault_anon 65441 [ 2646.199630][T22365] workingset_refault_file 309 [ 2646.204365][T22365] swap 4632576 [ 2646.207752][T22365] swapcached 8192 [ 2646.211386][T22365] pgpgin 892517 [ 2646.214830][T22365] pgpgout 892512 [ 2646.218403][T22365] pgfault 973004 [ 2646.221956][T22365] pgmajfault 34259 [ 2646.225684][T22365] inactive_anon 8192 [ 2646.229602][T22365] active_anon 0 [ 2646.233126][T22365] inactive_file 0 [ 2646.236838][T22365] active_file 12288 [ 2646.240699][T22365] unevictable 0 [ 2646.244183][T22365] hierarchical_memory_limit 314572800 [ 2646.249598][T22365] hierarchical_memsw_limit 9223372036854771712 [ 2646.255762][T22365] total_cache 12288 [ 2646.259585][T22365] total_rss 0 [ 2646.262944][T22365] total_shmem 0 [ 2646.266489][T22365] total_mapped_file 0 [ 2646.270556][T22365] total_dirty 0 [ 2646.274010][T22365] total_writeback 0 [ 2646.277879][T22365] total_workingset_refault_anon 65441 [ 2646.283398][T22365] total_workingset_refault_file 309 [ 2646.288652][T22365] total_swap 4632576 [ 2646.292540][T22365] total_swapcached 8192 [ 2646.296718][T22365] total_pgpgin 892517 [ 2646.300866][T22365] total_pgpgout 892512 [ 2646.304922][T22365] total_pgfault 973004 [ 2646.309045][T22365] total_pgmajfault 34259 [ 2646.313277][T22365] total_inactive_anon 8192 [ 2646.317822][T22365] total_active_anon 0 [ 2646.321920][T22365] total_inactive_file 0 [ 2646.326162][T22365] total_active_file 12288 [ 2646.330660][T22365] total_unevictable 0 [ 2646.334651][T22365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22364,uid=0 [ 2646.349973][T22365] Memory cgroup out of memory: Killed process 22364 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x7e450000, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:56:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xffffffea}, 0x0) 03:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xeaffffff, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xfffffffe}, 0x0) [ 2646.743429][T22392] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2646.758084][T22393] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2646.803734][T22399] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xf0ffffff, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2646.955046][T22403] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2646.979576][T22405] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2647.653254][T22396] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2647.664623][T22396] CPU: 1 PID: 22396 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2647.675121][T22396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2647.685180][T22396] Call Trace: [ 2647.688504][T22396] [ 2647.691426][T22396] dump_stack_lvl+0xda/0x130 [ 2647.696043][T22396] dump_stack+0x15/0x20 [ 2647.700231][T22396] dump_header+0x82/0x2d0 [ 2647.704625][T22396] oom_kill_process+0x33a/0x4c0 [ 2647.709514][T22396] out_of_memory+0x9ca/0xbf0 [ 2647.714156][T22396] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2647.720300][T22396] mem_cgroup_out_of_memory+0x139/0x190 [ 2647.726040][T22396] try_charge_memcg+0x75c/0xd30 [ 2647.730968][T22396] ? __swap_duplicate+0x29b/0x2b0 [ 2647.735989][T22396] ? radix_tree_lookup+0xf9/0x150 [ 2647.741052][T22396] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2647.747123][T22396] __read_swap_cache_async+0x2f6/0x550 [ 2647.752617][T22396] swap_cluster_readahead+0x27c/0x4c0 [ 2647.758063][T22396] swapin_readahead+0xe9/0x7f0 [ 2647.762835][T22396] ? __filemap_get_folio+0x41a/0x5a0 [ 2647.768217][T22396] ? __perf_event_task_sched_in+0x769/0x790 [ 2647.774279][T22396] ? swap_cache_get_folio+0x6e/0x200 [ 2647.779663][T22396] do_swap_page+0x4a0/0x1670 [ 2647.784263][T22396] ? __rcu_read_lock+0x35/0x50 [ 2647.789064][T22396] ? pte_offset_map_nolock+0x124/0x1d0 [ 2647.794664][T22396] handle_mm_fault+0xa36/0x2dd0 [ 2647.799582][T22396] ? mt_find+0x1d9/0x310 [ 2647.803831][T22396] exc_page_fault+0x2f7/0x6c0 [ 2647.808507][T22396] asm_exc_page_fault+0x26/0x30 [ 2647.813399][T22396] RIP: 0010:__get_user_8+0x11/0x20 [ 2647.818503][T22396] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2647.838124][T22396] RSP: 0018:ffffc90000edfe38 EFLAGS: 00050202 [ 2647.844169][T22396] RAX: 000055555710bda8 RBX: ffffc90000edfe40 RCX: ffffffff81443e13 [ 2647.852138][T22396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103a9eb50 [ 2647.860131][T22396] RBP: ffffc90000edfef8 R08: 0001888103a9eb57 R09: 0000000000000000 [ 2647.868205][T22396] R10: 0001ffffffffffff R11: 0001c90000edfec0 R12: ffff888103a9e180 [ 2647.876200][T22396] R13: ffff888103a9eb50 R14: ffffc90000edff58 R15: ffffc90000edffd8 [ 2647.884164][T22396] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2647.890114][T22396] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2647.896371][T22396] ? __rcu_read_unlock+0x4d/0x70 [ 2647.901293][T22396] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2647.907180][T22396] exit_to_user_mode_loop+0xcc/0xe0 [ 2647.912602][T22396] exit_to_user_mode_prepare+0x6c/0xb0 [ 2647.918291][T22396] irqentry_exit_to_user_mode+0x9/0x20 [ 2647.923801][T22396] irqentry_exit+0x12/0x40 [ 2647.928207][T22396] asm_exc_page_fault+0x26/0x30 [ 2647.933158][T22396] RIP: 0033:0x7ffbf06cebc4 [ 2647.937553][T22396] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2647.957393][T22396] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2647.963442][T22396] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2647.971397][T22396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2647.979361][T22396] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2647.987367][T22396] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000286651 [ 2647.995357][T22396] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000286310 [ 2648.003421][T22396] [ 2648.006601][T22396] memory: usage 307200kB, limit 307200kB, failcnt 54161 [ 2648.013540][T22396] memory+swap: usage 311716kB, limit 9007199254740988kB, failcnt 0 [ 2648.021591][T22396] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2648.028934][T22396] Memory cgroup stats for /syz4: [ 2648.029051][T22396] cache 12288 [ 2648.037459][T22396] rss 8192 [ 2648.040476][T22396] shmem 0 [ 2648.043483][T22396] mapped_file 0 [ 2648.047089][T22396] dirty 0 [ 2648.050062][T22396] writeback 4096 [ 2648.053643][T22396] workingset_refault_anon 65496 [ 2648.058536][T22396] workingset_refault_file 309 [ 2648.063323][T22396] swap 4624384 [ 2648.066758][T22396] swapcached 16384 [ 2648.070503][T22396] pgpgin 892594 [ 2648.073940][T22396] pgpgout 892587 [ 2648.077523][T22396] pgfault 973196 [ 2648.081105][T22396] pgmajfault 34280 [ 2648.084870][T22396] inactive_anon 0 [ 2648.088591][T22396] active_anon 0 [ 2648.092037][T22396] inactive_file 12288 [ 2648.096037][T22396] active_file 0 [ 2648.099517][T22396] unevictable 0 [ 2648.102961][T22396] hierarchical_memory_limit 314572800 [ 2648.108414][T22396] hierarchical_memsw_limit 9223372036854771712 [ 2648.114554][T22396] total_cache 12288 [ 2648.118390][T22396] total_rss 8192 [ 2648.121952][T22396] total_shmem 0 [ 2648.125390][T22396] total_mapped_file 0 [ 2648.129417][T22396] total_dirty 0 [ 2648.132916][T22396] total_writeback 4096 [ 2648.136993][T22396] total_workingset_refault_anon 65496 [ 2648.142371][T22396] total_workingset_refault_file 309 [ 2648.147578][T22396] total_swap 4624384 [ 2648.151465][T22396] total_swapcached 16384 [ 2648.155678][T22396] total_pgpgin 892594 [ 2648.159723][T22396] total_pgpgout 892587 [ 2648.163779][T22396] total_pgfault 973196 [ 2648.167865][T22396] total_pgmajfault 34280 [ 2648.172091][T22396] total_inactive_anon 0 [ 2648.176233][T22396] total_active_anon 0 [ 2648.180303][T22396] total_inactive_file 12288 [ 2648.184842][T22396] total_active_file 0 [ 2648.188853][T22396] total_unevictable 0 [ 2648.192825][T22396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22396,uid=0 [ 2648.208095][T22396] Memory cgroup out of memory: Killed process 22396 (syz-executor.4) total-vm:46300kB, anon-rss:324kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2648.238926][T22407] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2648.252601][T22407] CPU: 0 PID: 22407 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2648.263025][T22407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2648.273085][T22407] Call Trace: [ 2648.276366][T22407] [ 2648.279294][T22407] dump_stack_lvl+0xda/0x130 [ 2648.283902][T22407] dump_stack+0x15/0x20 [ 2648.288114][T22407] dump_header+0x82/0x2d0 [ 2648.292521][T22407] oom_kill_process+0x33a/0x4c0 [ 2648.297393][T22407] out_of_memory+0x9ca/0xbf0 [ 2648.301985][T22407] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2648.308060][T22407] mem_cgroup_out_of_memory+0x139/0x190 [ 2648.313666][T22407] try_charge_memcg+0x75c/0xd30 [ 2648.318516][T22407] obj_cgroup_charge_pages+0xab/0x130 [ 2648.323953][T22407] __memcg_kmem_charge_page+0x9c/0x170 [ 2648.329408][T22407] __alloc_pages+0x1bb/0x340 [ 2648.334031][T22407] alloc_pages_mpol+0xb1/0x1d0 [ 2648.338911][T22407] alloc_pages+0xe0/0x100 [ 2648.343267][T22407] __vmalloc_node_range+0x6d2/0xea0 [ 2648.348540][T22407] kvmalloc_node+0x121/0x160 [ 2648.353211][T22407] ? xt_alloc_table_info+0x3d/0x80 [ 2648.358321][T22407] xt_alloc_table_info+0x3d/0x80 [ 2648.363256][T22407] do_arpt_set_ctl+0x634/0x13b0 [ 2648.368105][T22407] ? __futex_wait+0x227/0x280 [ 2648.372799][T22407] ? __futex_wake_mark+0x70/0x70 [ 2648.377829][T22407] ? tcp_release_cb+0xfe/0x370 [ 2648.382610][T22407] ? _raw_spin_unlock_bh+0x36/0x40 [ 2648.387787][T22407] nf_setsockopt+0x18d/0x1b0 [ 2648.392415][T22407] ip_setsockopt+0xe6/0x100 [ 2648.396988][T22407] tcp_setsockopt+0x90/0xa0 [ 2648.401486][T22407] sock_common_setsockopt+0x61/0x70 [ 2648.406701][T22407] ? sock_common_recvmsg+0xe0/0xe0 [ 2648.412508][T22407] __sys_setsockopt+0x1d4/0x240 [ 2648.417540][T22407] __x64_sys_setsockopt+0x66/0x80 [ 2648.422642][T22407] do_syscall_64+0x44/0x110 [ 2648.427204][T22407] ? syscall_exit_to_user_mode+0x38/0x140 [ 2648.433012][T22407] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2648.438912][T22407] RIP: 0033:0x7f50c0fa7ba9 [ 2648.443315][T22407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2648.463408][T22407] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2648.471845][T22407] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2648.479860][T22407] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2648.489334][T22407] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2648.497317][T22407] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2648.505319][T22407] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2648.513287][T22407] [ 2648.516465][T22407] memory: usage 307200kB, limit 307200kB, failcnt 100593 [ 2648.523480][T22407] memory+swap: usage 309040kB, limit 9007199254740988kB, failcnt 0 [ 2648.531401][T22407] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 2648.538699][T22407] Memory cgroup stats for /syz3: [ 2648.545726][T22407] cache 16384 [ 2648.554078][T22407] rss 4096 [ 2648.557135][T22407] shmem 0 [ 2648.560128][T22407] mapped_file 0 [ 2648.563579][T22407] dirty 0 [ 2648.566543][T22407] writeback 0 [ 2648.569822][T22407] workingset_refault_anon 75507 [ 2648.574702][T22407] workingset_refault_file 320 [ 2648.579420][T22407] swap 1884160 [ 2648.582783][T22407] swapcached 16384 [ 2648.586515][T22407] pgpgin 379228 [ 2648.590063][T22407] pgpgout 379219 [ 2648.593605][T22407] pgfault 566566 [ 2648.597229][T22407] pgmajfault 39911 [ 2648.600972][T22407] inactive_anon 20480 [ 2648.604944][T22407] active_anon 0 [ 2648.608498][T22407] inactive_file 12288 [ 2648.612470][T22407] active_file 4096 [ 2648.616258][T22407] unevictable 0 [ 2648.619832][T22407] hierarchical_memory_limit 314572800 [ 2648.625219][T22407] hierarchical_memsw_limit 9223372036854771712 [ 2648.631471][T22407] total_cache 16384 [ 2648.635268][T22407] total_rss 4096 [ 2648.638852][T22407] total_shmem 0 [ 2648.642368][T22407] total_mapped_file 0 [ 2648.646402][T22407] total_dirty 0 [ 2648.649856][T22407] total_writeback 0 03:56:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x40030000000000}, 0x0) 03:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xfeffffff, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2648.653732][T22407] total_workingset_refault_anon 75507 [ 2648.659159][T22407] total_workingset_refault_file 320 [ 2648.664376][T22407] total_swap 1884160 [ 2648.668361][T22407] total_swapcached 16384 [ 2648.672599][T22407] total_pgpgin 379228 [ 2648.676699][T22407] total_pgpgout 379219 [ 2648.680887][T22407] total_pgfault 566566 [ 2648.684945][T22407] total_pgmajfault 39911 [ 2648.689227][T22407] total_inactive_anon 20480 [ 2648.693963][T22407] total_active_anon 0 [ 2648.697971][T22407] total_inactive_file 12288 [ 2648.702470][T22407] total_active_file 4096 03:56:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2648.706771][T22407] total_unevictable 0 [ 2648.707855][T22415] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2648.710746][T22407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22406,uid=0 [ 2648.734247][T22407] Memory cgroup out of memory: Killed process 22406 (syz-executor.3) total-vm:46432kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:56:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xffffff7f, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2648.759415][T22420] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2648.767710][T22414] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2648.822651][T22426] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2648.850421][T22427] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xffffffea, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2649.087035][T22431] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2649.103157][T22433] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2649.475401][T22416] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2649.486967][T22416] CPU: 1 PID: 22416 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2649.497430][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2649.507598][T22416] Call Trace: [ 2649.510876][T22416] [ 2649.513845][T22416] dump_stack_lvl+0xda/0x130 [ 2649.518457][T22416] dump_stack+0x15/0x20 [ 2649.522635][T22416] dump_header+0x82/0x2d0 [ 2649.527049][T22416] oom_kill_process+0x33a/0x4c0 [ 2649.531932][T22416] out_of_memory+0x9ca/0xbf0 [ 2649.536520][T22416] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2649.542620][T22416] mem_cgroup_out_of_memory+0x139/0x190 [ 2649.548165][T22416] try_charge_memcg+0x75c/0xd30 [ 2649.553673][T22416] ? __swap_duplicate+0x29b/0x2b0 [ 2649.558730][T22416] ? radix_tree_lookup+0xf9/0x150 [ 2649.563827][T22416] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2649.569970][T22416] __read_swap_cache_async+0x2f6/0x550 [ 2649.575438][T22416] swap_cluster_readahead+0x27c/0x4c0 [ 2649.580902][T22416] swapin_readahead+0xe9/0x7f0 [ 2649.585664][T22416] ? __filemap_get_folio+0x41a/0x5a0 [ 2649.590993][T22416] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2649.596697][T22416] ? swap_cache_get_folio+0x6e/0x200 [ 2649.602416][T22416] do_swap_page+0x4a0/0x1670 [ 2649.606997][T22416] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2649.612285][T22416] ? __rcu_read_lock+0x35/0x50 [ 2649.617249][T22416] ? pte_offset_map_nolock+0x124/0x1d0 [ 2649.622706][T22416] handle_mm_fault+0xa36/0x2dd0 [ 2649.627563][T22416] exc_page_fault+0x3ff/0x6c0 [ 2649.632274][T22416] asm_exc_page_fault+0x26/0x30 [ 2649.637113][T22416] RIP: 0033:0x7ffbf06cebae [ 2649.641571][T22416] Code: ff 6d 16 00 00 0f 8e 12 ff ff ff e8 4c 07 ff ff 49 39 c4 0f 82 60 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be [ 2649.661171][T22416] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2649.667282][T22416] RAX: 0000000000286d77 RBX: 00007ffbf0833f80 RCX: 0000000000286ba8 [ 2649.675242][T22416] RDX: 00000000000001cf RSI: 00007ffc3358ca30 RDI: 00000000000003e8 [ 2649.683234][T22416] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2649.691188][T22416] R10: 00007ffc335ae080 R11: 000000000007dc4c R12: 0000000000286df8 [ 2649.699146][T22416] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000286ab7 [ 2649.707173][T22416] [ 2649.710283][T22416] memory: usage 307200kB, limit 307200kB, failcnt 54363 [ 2649.717289][T22416] memory+swap: usage 311720kB, limit 9007199254740988kB, failcnt 0 [ 2649.725269][T22416] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2649.732621][T22416] Memory cgroup stats for /syz4: [ 2649.732763][T22416] cache 12288 [ 2649.741087][T22416] rss 8192 [ 2649.744086][T22416] shmem 0 [ 2649.747023][T22416] mapped_file 0 [ 2649.750553][T22416] dirty 0 [ 2649.753512][T22416] writeback 8192 [ 2649.757060][T22416] workingset_refault_anon 65544 [ 2649.761984][T22416] workingset_refault_file 309 [ 2649.766680][T22416] swap 4628480 [ 2649.770043][T22416] swapcached 12288 [ 2649.773747][T22416] pgpgin 892664 [ 2649.777229][T22416] pgpgout 892658 [ 2649.780793][T22416] pgfault 973362 [ 2649.784354][T22416] pgmajfault 34302 [ 2649.788084][T22416] inactive_anon 0 [ 2649.791711][T22416] active_anon 0 [ 2649.795153][T22416] inactive_file 12288 [ 2649.799266][T22416] active_file 0 [ 2649.802722][T22416] unevictable 0 [ 2649.806156][T22416] hierarchical_memory_limit 314572800 [ 2649.811584][T22416] hierarchical_memsw_limit 9223372036854771712 [ 2649.817733][T22416] total_cache 12288 [ 2649.821513][T22416] total_rss 8192 [ 2649.825058][T22416] total_shmem 0 [ 2649.828530][T22416] total_mapped_file 0 [ 2649.832615][T22416] total_dirty 0 [ 2649.836063][T22416] total_writeback 8192 [ 2649.840138][T22416] total_workingset_refault_anon 65544 [ 2649.845559][T22416] total_workingset_refault_file 309 [ 2649.851380][T22416] total_swap 4628480 [ 2649.855328][T22416] total_swapcached 12288 [ 2649.859579][T22416] total_pgpgin 892664 [ 2649.863560][T22416] total_pgpgout 892658 [ 2649.867649][T22416] total_pgfault 973362 [ 2649.871697][T22416] total_pgmajfault 34302 [ 2649.875913][T22416] total_inactive_anon 0 [ 2649.880138][T22416] total_active_anon 0 [ 2649.884133][T22416] total_inactive_file 12288 [ 2649.888662][T22416] total_active_file 0 [ 2649.892707][T22416] total_unevictable 0 [ 2649.896699][T22416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22416,uid=0 [ 2649.911953][T22416] Memory cgroup out of memory: Killed process 22416 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2649.935971][T22421] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2649.947314][T22421] CPU: 1 PID: 22421 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2649.957820][T22421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2649.968113][T22421] Call Trace: [ 2649.971457][T22421] [ 2649.974381][T22421] dump_stack_lvl+0xda/0x130 [ 2649.979858][T22421] dump_stack+0x15/0x20 [ 2649.984117][T22421] dump_header+0x82/0x2d0 [ 2649.988491][T22421] oom_kill_process+0x33a/0x4c0 [ 2649.993516][T22421] out_of_memory+0x9ca/0xbf0 [ 2649.998138][T22421] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2650.004195][T22421] mem_cgroup_out_of_memory+0x139/0x190 [ 2650.009826][T22421] try_charge_memcg+0x75c/0xd30 [ 2650.014662][T22421] ? __swap_duplicate+0x29b/0x2b0 [ 2650.019702][T22421] ? radix_tree_lookup+0xf9/0x150 [ 2650.024709][T22421] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2650.030828][T22421] __read_swap_cache_async+0x2f6/0x550 [ 2650.036281][T22421] swap_cluster_readahead+0x27c/0x4c0 [ 2650.041752][T22421] swapin_readahead+0xe9/0x7f0 [ 2650.046506][T22421] ? __filemap_get_folio+0x41a/0x5a0 [ 2650.051787][T22421] ? swap_cache_get_folio+0x6e/0x200 [ 2650.057087][T22421] do_swap_page+0x4a0/0x1670 [ 2650.061751][T22421] ? asm_exc_page_fault+0x26/0x30 [ 2650.066772][T22421] ? __rcu_read_lock+0x35/0x50 [ 2650.071549][T22421] ? pte_offset_map_nolock+0x124/0x1d0 [ 2650.077099][T22421] handle_mm_fault+0xa36/0x2dd0 [ 2650.082020][T22421] exc_page_fault+0x3ff/0x6c0 [ 2650.086859][T22421] asm_exc_page_fault+0x26/0x30 [ 2650.091709][T22421] RIP: 0033:0x7f07d1420bc4 [ 2650.096136][T22421] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2650.115731][T22421] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2650.121860][T22421] RAX: 0000000000000000 RBX: 00007f07d1587090 RCX: 0000000000000000 [ 2650.129825][T22421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2650.137818][T22421] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2650.145823][T22421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000286e30 [ 2650.153782][T22421] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000286aef [ 2650.161827][T22421] [ 2650.164953][T22421] memory: usage 307200kB, limit 307200kB, failcnt 202657 [ 2650.172030][T22421] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2650.179942][T22421] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2650.187240][T22421] Memory cgroup stats for /syz1: [ 2650.187437][T22421] cache 4096 [ 2650.195544][T22421] rss 8192 [ 2650.198577][T22421] shmem 0 [ 2650.201503][T22421] mapped_file 0 [ 2650.204952][T22421] dirty 0 [ 2650.207959][T22421] writeback 16384 [ 2650.211586][T22421] workingset_refault_anon 91235 [ 2650.216512][T22421] workingset_refault_file 314 [ 2650.221183][T22421] swap 536576 [ 2650.224462][T22421] swapcached 16384 [ 2650.228256][T22421] pgpgin 2000858 [ 2650.231814][T22421] pgpgout 2000853 [ 2650.235444][T22421] pgfault 2099741 [ 2650.239107][T22421] pgmajfault 40256 [ 2650.242839][T22421] inactive_anon 0 [ 2650.246503][T22421] active_anon 0 [ 2650.250043][T22421] inactive_file 0 [ 2650.253674][T22421] active_file 4096 [ 2650.257413][T22421] unevictable 0 [ 2650.260878][T22421] hierarchical_memory_limit 314572800 [ 2650.266318][T22421] hierarchical_memsw_limit 9223372036854771712 [ 2650.272533][T22421] total_cache 4096 [ 2650.276244][T22421] total_rss 8192 [ 2650.279820][T22421] total_shmem 0 [ 2650.283312][T22421] total_mapped_file 0 [ 2650.287305][T22421] total_dirty 0 [ 2650.290792][T22421] total_writeback 16384 [ 2650.294941][T22421] total_workingset_refault_anon 91235 [ 2650.300334][T22421] total_workingset_refault_file 314 [ 2650.305527][T22421] total_swap 536576 [ 2650.309371][T22421] total_swapcached 16384 [ 2650.313609][T22421] total_pgpgin 2000858 [ 2650.317696][T22421] total_pgpgout 2000853 [ 2650.321847][T22421] total_pgfault 2099741 [ 2650.326083][T22421] total_pgmajfault 40256 [ 2650.330355][T22421] total_inactive_anon 0 [ 2650.334584][T22421] total_active_anon 0 [ 2650.338628][T22421] total_inactive_file 0 [ 2650.342777][T22421] total_active_file 4096 [ 2650.347648][T22421] total_unevictable 0 [ 2650.351622][T22421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22421,uid=0 [ 2650.367000][T22421] Memory cgroup out of memory: Killed process 22421 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:56:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xfffffff0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2650.413056][T22438] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2650.431431][T22441] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0xfffffffe, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 2650.840523][T22449] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2650.850130][T22452] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2650.879486][T22454] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2651.243532][T22434] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2651.254896][T22434] CPU: 1 PID: 22434 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2651.265329][T22434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2651.275433][T22434] Call Trace: [ 2651.278792][T22434] [ 2651.281719][T22434] dump_stack_lvl+0xda/0x130 [ 2651.286325][T22434] dump_stack+0x15/0x20 [ 2651.290562][T22434] dump_header+0x82/0x2d0 [ 2651.295005][T22434] oom_kill_process+0x33a/0x4c0 [ 2651.299925][T22434] out_of_memory+0x9ca/0xbf0 [ 2651.304552][T22434] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2651.310637][T22434] mem_cgroup_out_of_memory+0x139/0x190 [ 2651.316194][T22434] try_charge_memcg+0x75c/0xd30 [ 2651.321074][T22434] ? __swap_duplicate+0x29b/0x2b0 [ 2651.326104][T22434] ? radix_tree_lookup+0xf9/0x150 [ 2651.331127][T22434] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2651.337216][T22434] __read_swap_cache_async+0x2f6/0x550 [ 2651.342728][T22434] swap_cluster_readahead+0x27c/0x4c0 [ 2651.348106][T22434] swapin_readahead+0xe9/0x7f0 [ 2651.352908][T22434] ? __filemap_get_folio+0x41a/0x5a0 [ 2651.358220][T22434] ? __perf_event_task_sched_in+0x769/0x790 [ 2651.364134][T22434] ? swap_cache_get_folio+0x6e/0x200 [ 2651.369467][T22434] do_swap_page+0x4a0/0x1670 [ 2651.374118][T22434] ? __rcu_read_lock+0x35/0x50 [ 2651.378901][T22434] ? pte_offset_map_nolock+0x124/0x1d0 [ 2651.384368][T22434] handle_mm_fault+0xa36/0x2dd0 [ 2651.389241][T22434] ? mt_find+0x1d9/0x310 [ 2651.393490][T22434] exc_page_fault+0x2f7/0x6c0 [ 2651.398187][T22434] asm_exc_page_fault+0x26/0x30 [ 2651.403109][T22434] RIP: 0010:__get_user_8+0x11/0x20 [ 2651.408316][T22434] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2651.427928][T22434] RSP: 0018:ffffc90000e67e38 EFLAGS: 00050202 [ 2651.433995][T22434] RAX: 0000555557356da8 RBX: ffffc90000e67e40 RCX: ffffffff81443e13 [ 2651.441976][T22434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888106d16b50 [ 2651.449947][T22434] RBP: ffffc90000e67ef8 R08: 0001888106d16b57 R09: 0000000000000000 [ 2651.457978][T22434] R10: 0001ffffffffffff R11: 0001c90000e67ec0 R12: ffff888106d16180 [ 2651.465956][T22434] R13: ffff888106d16b50 R14: ffffc90000e67f58 R15: ffffc90000e67fd8 [ 2651.473938][T22434] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2651.479883][T22434] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2651.485640][T22434] ? __rcu_read_unlock+0x4d/0x70 [ 2651.490668][T22434] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2651.496580][T22434] exit_to_user_mode_loop+0xcc/0xe0 [ 2651.501839][T22434] exit_to_user_mode_prepare+0x6c/0xb0 [ 2651.507382][T22434] irqentry_exit_to_user_mode+0x9/0x20 [ 2651.512940][T22434] irqentry_exit+0x12/0x40 [ 2651.517391][T22434] asm_exc_page_fault+0x26/0x30 [ 2651.522251][T22434] RIP: 0033:0x7f50c0f61bc4 [ 2651.526660][T22434] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2651.546279][T22434] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2651.552482][T22434] RAX: 0000000000000000 RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2651.560538][T22434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2651.568534][T22434] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2651.576508][T22434] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028745f [ 2651.584519][T22434] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000028711e [ 2651.592497][T22434] [ 2651.595706][T22434] memory: usage 307200kB, limit 307200kB, failcnt 100746 [ 2651.602780][T22434] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2651.610817][T22434] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2651.618130][T22434] Memory cgroup stats for /syz3: [ 2651.618712][T22434] cache 16384 [ 2651.627236][T22434] rss 8192 [ 2651.630288][T22434] shmem 0 [ 2651.633251][T22434] mapped_file 0 [ 2651.636773][T22434] dirty 4096 [ 2651.639965][T22434] writeback 4096 [ 2651.643507][T22434] workingset_refault_anon 75563 [ 2651.648405][T22434] workingset_refault_file 320 [ 2651.653140][T22434] swap 1896448 [ 2651.656526][T22434] swapcached 8192 [ 2651.660151][T22434] pgpgin 379307 [ 2651.663608][T22434] pgpgout 379301 [ 2651.667173][T22434] pgfault 566820 [ 2651.670799][T22434] pgmajfault 39938 [ 2651.674516][T22434] inactive_anon 0 [ 2651.678169][T22434] active_anon 0 [ 2651.681613][T22434] inactive_file 12288 [ 2651.685656][T22434] active_file 4096 [ 2651.689388][T22434] unevictable 0 [ 2651.693106][T22434] hierarchical_memory_limit 314572800 [ 2651.698504][T22434] hierarchical_memsw_limit 9223372036854771712 [ 2651.704728][T22434] total_cache 16384 [ 2651.708622][T22434] total_rss 8192 [ 2651.712205][T22434] total_shmem 0 [ 2651.715659][T22434] total_mapped_file 0 [ 2651.719654][T22434] total_dirty 4096 [ 2651.723486][T22434] total_writeback 4096 [ 2651.727673][T22434] total_workingset_refault_anon 75563 [ 2651.733029][T22434] total_workingset_refault_file 320 [ 2651.738285][T22434] total_swap 1896448 [ 2651.742226][T22434] total_swapcached 8192 [ 2651.746407][T22434] total_pgpgin 379307 [ 2651.750373][T22434] total_pgpgout 379301 [ 2651.754437][T22434] total_pgfault 566820 [ 2651.758641][T22434] total_pgmajfault 39938 [ 2651.763012][T22434] total_inactive_anon 0 [ 2651.767189][T22434] total_active_anon 0 [ 2651.771229][T22434] total_inactive_file 12288 [ 2651.775817][T22434] total_active_file 4096 [ 2651.780098][T22434] total_unevictable 0 [ 2651.784112][T22434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22434,uid=0 [ 2651.799456][T22434] Memory cgroup out of memory: Killed process 22434 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2651.816951][T22442] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2651.828317][T22442] CPU: 0 PID: 22442 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2651.838777][T22442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2651.848842][T22442] Call Trace: [ 2651.852129][T22442] [ 2651.855055][T22442] dump_stack_lvl+0xda/0x130 [ 2651.859672][T22442] dump_stack+0x15/0x20 [ 2651.863840][T22442] dump_header+0x82/0x2d0 [ 2651.868214][T22442] oom_kill_process+0x33a/0x4c0 [ 2651.873167][T22442] out_of_memory+0x9ca/0xbf0 [ 2651.877781][T22442] mem_cgroup_out_of_memory+0x139/0x190 [ 2651.883404][T22442] try_charge_memcg+0x75c/0xd30 [ 2651.888471][T22442] ? __swap_duplicate+0x29b/0x2b0 [ 2651.893500][T22442] ? radix_tree_lookup+0xf9/0x150 [ 2651.898557][T22442] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2651.904642][T22442] __read_swap_cache_async+0x2f6/0x550 [ 2651.910116][T22442] swap_cluster_readahead+0x27c/0x4c0 [ 2651.915544][T22442] swapin_readahead+0xe9/0x7f0 [ 2651.920363][T22442] ? __filemap_get_folio+0x41a/0x5a0 [ 2651.925654][T22442] ? _raw_spin_unlock+0x26/0x40 [ 2651.930507][T22442] ? swap_cache_get_folio+0x6e/0x200 [ 2651.935813][T22442] do_swap_page+0x4a0/0x1670 [ 2651.940481][T22442] ? __rcu_read_lock+0x35/0x50 [ 2651.945233][T22442] ? pte_offset_map_nolock+0x124/0x1d0 [ 2651.950950][T22442] handle_mm_fault+0xa36/0x2dd0 [ 2651.955877][T22442] exc_page_fault+0x3ff/0x6c0 [ 2651.960547][T22442] asm_exc_page_fault+0x26/0x30 [ 2651.965392][T22442] RIP: 0033:0x7ffbf06ced4b [ 2651.969819][T22442] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2651.989416][T22442] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010202 [ 2651.995474][T22442] RAX: 0000000000000001 RBX: 00007ffbf0833f80 RCX: 0000000000287378 [ 2652.003481][T22442] RDX: 0000000000000117 RSI: 00007ffc3358ca30 RDI: 00007ffbf0833f80 [ 2652.011446][T22442] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2652.019412][T22442] R10: 00007ffc335ae080 R11: 000000000007ddb6 R12: 000000000028748e [ 2652.027520][T22442] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000028714d [ 2652.035572][T22442] [ 2652.038694][T22442] memory: usage 307200kB, limit 307200kB, failcnt 54538 [ 2652.045715][T22442] memory+swap: usage 311684kB, limit 9007199254740988kB, failcnt 0 [ 2652.053654][T22442] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 2652.061139][T22442] Memory cgroup stats for /syz4: [ 2652.066004][T22442] cache 12288 [ 2652.074325][T22442] rss 8192 [ 2652.077404][T22442] shmem 0 [ 2652.080360][T22442] mapped_file 0 [ 2652.083830][T22442] dirty 0 [ 2652.086766][T22442] writeback 0 [ 2652.090045][T22442] workingset_refault_anon 65574 [ 2652.094950][T22442] workingset_refault_file 309 [ 2652.099638][T22442] swap 4603904 [ 2652.103007][T22442] swapcached 32768 [ 2652.106742][T22442] pgpgin 892716 [ 2652.110271][T22442] pgpgout 892704 [ 2652.113807][T22442] pgfault 973494 [ 2652.117495][T22442] pgmajfault 34312 [ 2652.121271][T22442] inactive_anon 36864 [ 2652.125385][T22442] active_anon 0 [ 2652.128857][T22442] inactive_file 12288 [ 2652.132827][T22442] active_file 0 [ 2652.136293][T22442] unevictable 0 [ 2652.139741][T22442] hierarchical_memory_limit 314572800 [ 2652.145100][T22442] hierarchical_memsw_limit 9223372036854771712 [ 2652.151267][T22442] total_cache 12288 [ 2652.155061][T22442] total_rss 8192 [ 2652.158619][T22442] total_shmem 0 [ 2652.162151][T22442] total_mapped_file 0 [ 2652.166137][T22442] total_dirty 0 [ 2652.169710][T22442] total_writeback 0 [ 2652.173506][T22442] total_workingset_refault_anon 65574 [ 2652.178884][T22442] total_workingset_refault_file 309 [ 2652.184105][T22442] total_swap 4603904 [ 2652.188021][T22442] total_swapcached 32768 [ 2652.192322][T22442] total_pgpgin 892716 [ 2652.196371][T22442] total_pgpgout 892704 [ 2652.200419][T22442] total_pgfault 973494 [ 2652.204613][T22442] total_pgmajfault 34312 [ 2652.208982][T22442] total_inactive_anon 36864 [ 2652.213558][T22442] total_active_anon 0 [ 2652.217577][T22442] total_inactive_file 12288 [ 2652.222118][T22442] total_active_file 0 [ 2652.226083][T22442] total_unevictable 0 [ 2652.230091][T22442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22442,uid=0 [ 2652.245398][T22442] Memory cgroup out of memory: Killed process 22442 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2652.263907][T22457] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2652.275257][T22457] CPU: 0 PID: 22457 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2652.285684][T22457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2652.295738][T22457] Call Trace: [ 2652.299004][T22457] [ 2652.301936][T22457] dump_stack_lvl+0xda/0x130 [ 2652.306590][T22457] dump_stack+0x15/0x20 [ 2652.310860][T22457] dump_header+0x82/0x2d0 [ 2652.315193][T22457] oom_kill_process+0x33a/0x4c0 [ 2652.320062][T22457] out_of_memory+0x9ca/0xbf0 [ 2652.324678][T22457] mem_cgroup_out_of_memory+0x139/0x190 [ 2652.330227][T22457] try_charge_memcg+0x75c/0xd30 [ 2652.335724][T22457] ? __swap_duplicate+0x29b/0x2b0 [ 2652.340829][T22457] ? radix_tree_lookup+0xf9/0x150 [ 2652.345938][T22457] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2652.352083][T22457] __read_swap_cache_async+0x2f6/0x550 [ 2652.357620][T22457] swap_cluster_readahead+0x27c/0x4c0 [ 2652.363070][T22457] swapin_readahead+0xe9/0x7f0 [ 2652.367869][T22457] ? __filemap_get_folio+0x41a/0x5a0 [ 2652.373234][T22457] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2652.378859][T22457] ? swap_cache_get_folio+0x6e/0x200 [ 2652.384216][T22457] do_swap_page+0x4a0/0x1670 [ 2652.388797][T22457] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2652.394198][T22457] ? __rcu_read_lock+0x35/0x50 [ 2652.398950][T22457] ? pte_offset_map_nolock+0x124/0x1d0 [ 2652.404437][T22457] handle_mm_fault+0xa36/0x2dd0 [ 2652.409303][T22457] exc_page_fault+0x3ff/0x6c0 [ 2652.413980][T22457] asm_exc_page_fault+0x26/0x30 [ 2652.418850][T22457] RIP: 0033:0x7f07d1420bc4 [ 2652.423321][T22457] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2652.443078][T22457] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2652.449145][T22457] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2652.457104][T22457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2652.465256][T22457] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2652.473272][T22457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000287655 [ 2652.481231][T22457] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000287314 [ 2652.489194][T22457] [ 2652.492360][T22457] memory: usage 307200kB, limit 307200kB, failcnt 202789 [ 2652.499444][T22457] memory+swap: usage 307784kB, limit 9007199254740988kB, failcnt 0 [ 2652.507405][T22457] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2652.514683][T22457] Memory cgroup stats for /syz1: [ 2652.516073][T22457] cache 4096 [ 2652.524221][T22457] rss 8192 [ 2652.527278][T22457] shmem 0 [ 2652.530206][T22457] mapped_file 0 [ 2652.533658][T22457] dirty 0 [ 2652.536671][T22457] writeback 0 [ 2652.539944][T22457] workingset_refault_anon 91251 [ 2652.544792][T22457] workingset_refault_file 314 [ 2652.549559][T22457] swap 610304 [ 2652.552897][T22457] swapcached 0 [ 2652.556261][T22457] pgpgin 2000897 [ 2652.559917][T22457] pgpgout 2000894 [ 2652.563629][T22457] pgfault 2099921 [ 2652.567277][T22457] pgmajfault 40263 [ 2652.571018][T22457] inactive_anon 0 [ 2652.574657][T22457] active_anon 8192 [ 2652.578415][T22457] inactive_file 0 [ 2652.582047][T22457] active_file 4096 [ 2652.585754][T22457] unevictable 0 [ 2652.589230][T22457] hierarchical_memory_limit 314572800 [ 2652.594793][T22457] hierarchical_memsw_limit 9223372036854771712 [ 2652.601096][T22457] total_cache 4096 [ 2652.604842][T22457] total_rss 8192 [ 2652.608421][T22457] total_shmem 0 [ 2652.611872][T22457] total_mapped_file 0 [ 2652.615840][T22457] total_dirty 0 [ 2652.619313][T22457] total_writeback 0 [ 2652.623121][T22457] total_workingset_refault_anon 91251 [ 2652.628600][T22457] total_workingset_refault_file 314 [ 2652.633787][T22457] total_swap 610304 [ 2652.637611][T22457] total_swapcached 0 [ 2652.641571][T22457] total_pgpgin 2000897 [ 2652.645633][T22457] total_pgpgout 2000894 03:56:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2652.649818][T22457] total_pgfault 2099921 [ 2652.653961][T22457] total_pgmajfault 40263 [ 2652.658217][T22457] total_inactive_anon 0 [ 2652.662389][T22457] total_active_anon 8192 [ 2652.666796][T22457] total_inactive_file 0 [ 2652.670946][T22457] total_active_file 4096 [ 2652.675272][T22457] total_unevictable 0 [ 2652.679485][T22457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22457,uid=0 03:56:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x2, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2652.694927][T22457] Memory cgroup out of memory: Killed process 22457 (syz-executor.1) total-vm:46300kB, anon-rss:492kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2652.733588][T22466] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 2652.744923][T22468] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x3, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xb00000000000000}, 0x0) 03:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2653.079858][T22476] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2653.096057][T22480] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x11}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x4, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x2000000000000000}, 0x0) 03:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xda45000000000000}, 0x0) [ 2653.924926][T22488] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2653.937133][T22489] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2653.947824][T22478] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2653.959227][T22478] CPU: 0 PID: 22478 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2653.969648][T22478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2653.979724][T22478] Call Trace: [ 2653.983090][T22478] [ 2653.986111][T22478] dump_stack_lvl+0xda/0x130 [ 2653.990792][T22478] dump_stack+0x15/0x20 [ 2653.995071][T22478] dump_header+0x82/0x2d0 [ 2653.999535][T22478] oom_kill_process+0x33a/0x4c0 [ 2654.004421][T22478] out_of_memory+0x9ca/0xbf0 [ 2654.009370][T22478] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2654.015437][T22478] mem_cgroup_out_of_memory+0x139/0x190 [ 2654.020988][T22478] try_charge_memcg+0x75c/0xd30 [ 2654.025989][T22478] ? __swap_duplicate+0x29b/0x2b0 [ 2654.031008][T22478] ? radix_tree_lookup+0xf9/0x150 [ 2654.036120][T22478] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2654.042226][T22478] __read_swap_cache_async+0x2f6/0x550 [ 2654.047688][T22478] swap_cluster_readahead+0x27c/0x4c0 [ 2654.053094][T22478] swapin_readahead+0xe9/0x7f0 [ 2654.057909][T22478] ? __filemap_get_folio+0x41a/0x5a0 [ 2654.063188][T22478] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2654.068816][T22478] ? swap_cache_get_folio+0x6e/0x200 [ 2654.074094][T22478] do_swap_page+0x4a0/0x1670 [ 2654.078733][T22478] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2654.084212][T22478] ? __rcu_read_lock+0x35/0x50 [ 2654.088967][T22478] ? pte_offset_map_nolock+0x124/0x1d0 [ 2654.094425][T22478] handle_mm_fault+0xa36/0x2dd0 [ 2654.099273][T22478] exc_page_fault+0x3ff/0x6c0 [ 2654.104010][T22478] asm_exc_page_fault+0x26/0x30 [ 2654.108942][T22478] RIP: 0033:0x7f07d142287c [ 2654.113366][T22478] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 35 f8 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 2654.133159][T22478] RSP: 002b:00007fffaf03b870 EFLAGS: 00010286 [ 2654.139215][T22478] RAX: 0000000000000000 RBX: 00007f07d1586018 RCX: 0000000000000000 [ 2654.147179][T22478] RDX: ffffffff83b076b4 RSI: 00007f07d0dea008 RDI: 00007f07d1586018 [ 2654.155176][T22478] RBP: 0000000083b07000 R08: 0000001b2d220000 R09: 0000000000000000 [ 2654.163370][T22478] R10: 0000000000000001 R11: 000000000007df7c R12: 0000000000000000 [ 2654.171330][T22478] R13: 0000000000000001 R14: 00007f07d157a000 R15: ffffffff83b076b4 [ 2654.179296][T22478] ? __x64_sys_setsockopt+0x14/0x80 [ 2654.184550][T22478] ? __x64_sys_setsockopt+0x14/0x80 [ 2654.189740][T22478] [ 2654.192875][T22478] memory: usage 307200kB, limit 307200kB, failcnt 202890 [ 2654.200113][T22478] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2654.208044][T22478] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 2654.215440][T22478] Memory cgroup stats for /syz1: [ 2654.215670][T22478] cache 4096 [ 2654.224018][T22478] rss 32768 [ 2654.227197][T22478] shmem 0 [ 2654.230136][T22478] mapped_file 0 [ 2654.233721][T22478] dirty 0 [ 2654.236711][T22478] writeback 4096 [ 2654.240303][T22478] workingset_refault_anon 91273 [ 2654.245214][T22478] workingset_refault_file 314 [ 2654.249918][T22478] swap 516096 [ 2654.253209][T22478] swapcached 16384 [ 2654.256981][T22478] pgpgin 2000942 [ 2654.260588][T22478] pgpgout 2000932 [ 2654.264307][T22478] pgfault 2100055 [ 2654.267973][T22478] pgmajfault 40273 [ 2654.271687][T22478] inactive_anon 16384 [ 2654.275775][T22478] active_anon 20480 [ 2654.279627][T22478] inactive_file 4096 [ 2654.283531][T22478] active_file 0 [ 2654.287032][T22478] unevictable 0 [ 2654.290498][T22478] hierarchical_memory_limit 314572800 [ 2654.295958][T22478] hierarchical_memsw_limit 9223372036854771712 [ 2654.302164][T22478] total_cache 4096 [ 2654.305894][T22478] total_rss 32768 [ 2654.309976][T22478] total_shmem 0 [ 2654.313469][T22478] total_mapped_file 0 [ 2654.317482][T22478] total_dirty 0 [ 2654.320939][T22478] total_writeback 4096 [ 2654.325015][T22478] total_workingset_refault_anon 91273 [ 2654.330402][T22478] total_workingset_refault_file 314 [ 2654.335604][T22478] total_swap 516096 [ 2654.339452][T22478] total_swapcached 16384 [ 2654.343684][T22478] total_pgpgin 2000942 [ 2654.347855][T22478] total_pgpgout 2000932 [ 2654.352016][T22478] total_pgfault 2100055 [ 2654.356317][T22478] total_pgmajfault 40273 [ 2654.360591][T22478] total_inactive_anon 16384 [ 2654.365082][T22478] total_active_anon 20480 [ 2654.369516][T22478] total_inactive_file 4096 [ 2654.373955][T22478] total_active_file 0 [ 2654.377972][T22478] total_unevictable 0 [ 2654.381939][T22478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22478,uid=0 [ 2654.397228][T22478] Memory cgroup out of memory: Killed process 22478 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x5, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xeaffffff00000000}, 0x0) 03:56:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2654.758887][T22501] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2654.783041][T22506] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2654.801224][T22510] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x25}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) 03:56:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x48}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x8, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2655.150392][T22513] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2655.158657][T22516] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 2655.216165][T22524] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2655.234011][T22525] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2655.633485][T22503] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2655.644947][T22503] CPU: 1 PID: 22503 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2655.655388][T22503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2655.665447][T22503] Call Trace: [ 2655.668737][T22503] [ 2655.671673][T22503] dump_stack_lvl+0xda/0x130 [ 2655.676300][T22503] dump_stack+0x15/0x20 [ 2655.680571][T22503] dump_header+0x82/0x2d0 [ 2655.684992][T22503] oom_kill_process+0x33a/0x4c0 [ 2655.689935][T22503] out_of_memory+0x9ca/0xbf0 [ 2655.694547][T22503] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2655.700641][T22503] mem_cgroup_out_of_memory+0x139/0x190 [ 2655.706201][T22503] try_charge_memcg+0x75c/0xd30 [ 2655.711135][T22503] ? __swap_duplicate+0x29b/0x2b0 [ 2655.716757][T22503] ? radix_tree_lookup+0xf9/0x150 [ 2655.721789][T22503] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2655.727971][T22503] __read_swap_cache_async+0x2f6/0x550 [ 2655.733515][T22503] swap_cluster_readahead+0x27c/0x4c0 [ 2655.738978][T22503] swapin_readahead+0xe9/0x7f0 [ 2655.743767][T22503] ? __filemap_get_folio+0x41a/0x5a0 [ 2655.749083][T22503] ? _raw_spin_unlock+0x26/0x40 [ 2655.753983][T22503] ? swap_cache_get_folio+0x6e/0x200 [ 2655.759277][T22503] do_swap_page+0x4a0/0x1670 [ 2655.763912][T22503] ? __rcu_read_lock+0x35/0x50 [ 2655.768756][T22503] ? pte_offset_map_nolock+0x124/0x1d0 [ 2655.774235][T22503] handle_mm_fault+0xa36/0x2dd0 [ 2655.779101][T22503] exc_page_fault+0x3ff/0x6c0 [ 2655.783873][T22503] asm_exc_page_fault+0x26/0x30 [ 2655.788735][T22503] RIP: 0033:0x7ffbf06ced4b [ 2655.793176][T22503] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2655.812964][T22503] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010202 [ 2655.819113][T22503] RAX: 0000000000000001 RBX: 00007ffbf0833f80 RCX: 0000000000288318 [ 2655.827117][T22503] RDX: 0000000000000261 RSI: 00007ffc3358ca30 RDI: 00007ffbf0833f80 [ 2655.835346][T22503] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2655.843351][T22503] R10: 00007ffc335ae080 R11: 000000000007e0a0 R12: 0000000000288578 [ 2655.851371][T22503] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000288237 [ 2655.859382][T22503] [ 2655.862561][T22503] memory: usage 307200kB, limit 307200kB, failcnt 54689 [ 2655.869740][T22503] memory+swap: usage 311720kB, limit 9007199254740988kB, failcnt 0 [ 2655.877677][T22503] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2655.885194][T22503] Memory cgroup stats for /syz4: [ 2655.887220][T22503] cache 12288 [ 2655.895536][T22503] rss 8192 [ 2655.898827][T22503] shmem 0 [ 2655.901794][T22503] mapped_file 0 [ 2655.905280][T22503] dirty 0 [ 2655.908335][T22503] writeback 8192 [ 2655.911883][T22503] workingset_refault_anon 65678 [ 2655.916768][T22503] workingset_refault_file 309 [ 2655.921487][T22503] swap 4628480 [ 2655.924863][T22503] swapcached 12288 [ 2655.928598][T22503] pgpgin 892889 [ 2655.932051][T22503] pgpgout 892883 [ 2655.935594][T22503] pgfault 973913 [ 2655.939185][T22503] pgmajfault 34370 [ 2655.942901][T22503] inactive_anon 0 [ 2655.946549][T22503] active_anon 0 [ 2655.950041][T22503] inactive_file 12288 [ 2655.954018][T22503] active_file 0 [ 2655.957507][T22503] unevictable 0 [ 2655.960965][T22503] hierarchical_memory_limit 314572800 [ 2655.966359][T22503] hierarchical_memsw_limit 9223372036854771712 [ 2655.972505][T22503] total_cache 12288 [ 2655.976415][T22503] total_rss 8192 [ 2655.979958][T22503] total_shmem 0 [ 2655.983473][T22503] total_mapped_file 0 [ 2655.987481][T22503] total_dirty 0 [ 2655.990935][T22503] total_writeback 8192 [ 2655.995074][T22503] total_workingset_refault_anon 65678 [ 2656.000475][T22503] total_workingset_refault_file 309 [ 2656.005676][T22503] total_swap 4628480 [ 2656.009719][T22503] total_swapcached 12288 [ 2656.014008][T22503] total_pgpgin 892889 [ 2656.018044][T22503] total_pgpgout 892883 [ 2656.022236][T22503] total_pgfault 973913 [ 2656.026345][T22503] total_pgmajfault 34370 [ 2656.030585][T22503] total_inactive_anon 0 [ 2656.034738][T22503] total_active_anon 0 [ 2656.038811][T22503] total_inactive_file 12288 [ 2656.043363][T22503] total_active_file 0 [ 2656.047425][T22503] total_unevictable 0 [ 2656.051557][T22503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22503,uid=0 [ 2656.067098][T22503] Memory cgroup out of memory: Killed process 22503 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2656.084513][T22509] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2656.095897][T22509] CPU: 0 PID: 22509 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2656.106324][T22509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2656.116468][T22509] Call Trace: [ 2656.119815][T22509] [ 2656.122830][T22509] dump_stack_lvl+0xda/0x130 [ 2656.127430][T22509] dump_stack+0x15/0x20 [ 2656.131637][T22509] dump_header+0x82/0x2d0 [ 2656.135970][T22509] oom_kill_process+0x33a/0x4c0 [ 2656.140901][T22509] out_of_memory+0x9ca/0xbf0 [ 2656.145661][T22509] mem_cgroup_out_of_memory+0x139/0x190 [ 2656.151237][T22509] try_charge_memcg+0x75c/0xd30 [ 2656.156100][T22509] ? __swap_duplicate+0x29b/0x2b0 [ 2656.161210][T22509] ? radix_tree_lookup+0xf9/0x150 [ 2656.166323][T22509] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2656.172422][T22509] __read_swap_cache_async+0x2f6/0x550 [ 2656.177974][T22509] swap_cluster_readahead+0x27c/0x4c0 [ 2656.183348][T22509] swapin_readahead+0xe9/0x7f0 [ 2656.188188][T22509] ? __filemap_get_folio+0x41a/0x5a0 [ 2656.193513][T22509] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2656.199181][T22509] ? swap_cache_get_folio+0x6e/0x200 [ 2656.204486][T22509] do_swap_page+0x4a0/0x1670 [ 2656.209091][T22509] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2656.214383][T22509] ? __rcu_read_lock+0x35/0x50 [ 2656.219153][T22509] ? pte_offset_map_nolock+0x124/0x1d0 [ 2656.224625][T22509] handle_mm_fault+0xa36/0x2dd0 [ 2656.229558][T22509] exc_page_fault+0x3ff/0x6c0 [ 2656.234311][T22509] asm_exc_page_fault+0x26/0x30 [ 2656.239175][T22509] RIP: 0033:0x7f07d142287c [ 2656.243619][T22509] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 35 f8 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 2656.263332][T22509] RSP: 002b:00007fffaf03b870 EFLAGS: 00010286 [ 2656.269448][T22509] RAX: 0000000000000000 RBX: 00007f07d1586018 RCX: 0000000000000000 [ 2656.277427][T22509] RDX: ffffffff83b076b4 RSI: 00007f07d0dea008 RDI: 00007f07d1586018 [ 2656.285562][T22509] RBP: 0000000083b07000 R08: 0000001b2d220000 R09: 0000000000000000 [ 2656.293539][T22509] R10: 0000000000000001 R11: 000000000007e0ae R12: 0000000000000000 [ 2656.301585][T22509] R13: 0000000000000001 R14: 00007f07d157a000 R15: ffffffff83b076b4 [ 2656.309549][T22509] ? __x64_sys_setsockopt+0x14/0x80 [ 2656.314743][T22509] ? __x64_sys_setsockopt+0x14/0x80 [ 2656.319931][T22509] [ 2656.323144][T22509] memory: usage 307200kB, limit 307200kB, failcnt 203108 [ 2656.330369][T22509] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 2656.338340][T22509] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2656.345627][T22509] Memory cgroup stats for /syz1: [ 2656.348662][T22509] cache 4096 [ 2656.356911][T22509] rss 8192 [ 2656.359927][T22509] shmem 0 [ 2656.362934][T22509] mapped_file 0 [ 2656.366462][T22509] dirty 0 [ 2656.369417][T22509] writeback 0 [ 2656.372710][T22509] workingset_refault_anon 91314 [ 2656.378301][T22509] workingset_refault_file 314 [ 2656.383054][T22509] swap 561152 [ 2656.386440][T22509] swapcached 4096 [ 2656.390113][T22509] pgpgin 2001006 [ 2656.393655][T22509] pgpgout 2001003 [ 2656.397357][T22509] pgfault 2100215 [ 2656.400981][T22509] pgmajfault 40287 [ 2656.404700][T22509] inactive_anon 8192 [ 2656.408612][T22509] active_anon 0 [ 2656.412074][T22509] inactive_file 4096 [ 2656.415964][T22509] active_file 0 [ 2656.419456][T22509] unevictable 0 [ 2656.422941][T22509] hierarchical_memory_limit 314572800 [ 2656.428340][T22509] hierarchical_memsw_limit 9223372036854771712 [ 2656.434489][T22509] total_cache 4096 [ 2656.438356][T22509] total_rss 8192 [ 2656.441897][T22509] total_shmem 0 [ 2656.445378][T22509] total_mapped_file 0 [ 2656.449426][T22509] total_dirty 0 [ 2656.452914][T22509] total_writeback 0 [ 2656.456754][T22509] total_workingset_refault_anon 91314 [ 2656.462313][T22509] total_workingset_refault_file 314 [ 2656.467606][T22509] total_swap 561152 [ 2656.471414][T22509] total_swapcached 4096 [ 2656.475568][T22509] total_pgpgin 2001006 [ 2656.479717][T22509] total_pgpgout 2001003 [ 2656.483908][T22509] total_pgfault 2100215 [ 2656.488100][T22509] total_pgmajfault 40287 [ 2656.492333][T22509] total_inactive_anon 8192 [ 2656.496788][T22509] total_active_anon 0 [ 2656.501157][T22509] total_inactive_file 4096 [ 2656.505561][T22509] total_active_file 0 [ 2656.509871][T22509] total_unevictable 0 [ 2656.514109][T22509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22509,uid=0 03:56:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2656.529562][T22509] Memory cgroup out of memory: Killed process 22509 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2656.560283][T22531] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2656.568842][T22532] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:56:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x9, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:56:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 2656.786054][T22537] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2656.806440][T22541] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2656.815924][T22542] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x68}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xa, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2656.852471][T22546] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2656.900192][T22550] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2656.909837][T22551] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2657.419217][T22533] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2657.430697][T22533] CPU: 1 PID: 22533 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2657.441208][T22533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2657.451331][T22533] Call Trace: [ 2657.454615][T22533] [ 2657.457596][T22533] dump_stack_lvl+0xda/0x130 [ 2657.462237][T22533] dump_stack+0x15/0x20 [ 2657.466413][T22533] dump_header+0x82/0x2d0 [ 2657.470792][T22533] oom_kill_process+0x33a/0x4c0 [ 2657.475705][T22533] out_of_memory+0x9ca/0xbf0 [ 2657.480309][T22533] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2657.486391][T22533] mem_cgroup_out_of_memory+0x139/0x190 [ 2657.491985][T22533] try_charge_memcg+0x75c/0xd30 [ 2657.496843][T22533] ? __swap_duplicate+0x29b/0x2b0 [ 2657.501878][T22533] ? radix_tree_lookup+0xf9/0x150 [ 2657.507000][T22533] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2657.513420][T22533] __read_swap_cache_async+0x2f6/0x550 [ 2657.518888][T22533] swap_cluster_readahead+0x27c/0x4c0 [ 2657.524331][T22533] swapin_readahead+0xe9/0x7f0 [ 2657.529139][T22533] ? __filemap_get_folio+0x41a/0x5a0 [ 2657.534580][T22533] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2657.540226][T22533] ? swap_cache_get_folio+0x6e/0x200 [ 2657.545514][T22533] do_swap_page+0x4a0/0x1670 [ 2657.550112][T22533] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2657.555471][T22533] ? __rcu_read_lock+0x35/0x50 [ 2657.560441][T22533] ? pte_offset_map_nolock+0x124/0x1d0 [ 2657.565982][T22533] handle_mm_fault+0xa36/0x2dd0 [ 2657.570921][T22533] exc_page_fault+0x3ff/0x6c0 [ 2657.575600][T22533] asm_exc_page_fault+0x26/0x30 [ 2657.580532][T22533] RIP: 0033:0x7ffbf06cebc4 [ 2657.585011][T22533] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2657.604666][T22533] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2657.610732][T22533] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2657.618718][T22533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2657.627103][T22533] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2657.635128][T22533] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000288c7f [ 2657.643117][T22533] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000028893e [ 2657.651109][T22533] [ 2657.654226][T22533] memory: usage 307200kB, limit 307200kB, failcnt 54996 [ 2657.661321][T22533] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2657.669266][T22533] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2657.676636][T22533] Memory cgroup stats for /syz4: [ 2657.677123][T22533] cache 12288 [ 2657.685550][T22533] rss 8192 [ 2657.688626][T22533] shmem 0 [ 2657.691554][T22533] mapped_file 0 [ 2657.695015][T22533] dirty 0 [ 2657.698024][T22533] writeback 4096 [ 2657.701621][T22533] workingset_refault_anon 65711 [ 2657.706511][T22533] workingset_refault_file 309 [ 2657.711271][T22533] swap 4632576 [ 2657.714672][T22533] swapcached 4096 [ 2657.718355][T22533] pgpgin 892944 [ 2657.721876][T22533] pgpgout 892939 [ 2657.725449][T22533] pgfault 974086 [ 2657.729021][T22533] pgmajfault 34382 [ 2657.732776][T22533] inactive_anon 0 [ 2657.736451][T22533] active_anon 0 [ 2657.739934][T22533] inactive_file 0 [ 2657.743601][T22533] active_file 12288 [ 2657.747421][T22533] unevictable 0 [ 2657.750867][T22533] hierarchical_memory_limit 314572800 [ 2657.756319][T22533] hierarchical_memsw_limit 9223372036854771712 [ 2657.762462][T22533] total_cache 12288 [ 2657.766253][T22533] total_rss 8192 [ 2657.769817][T22533] total_shmem 0 [ 2657.773330][T22533] total_mapped_file 0 [ 2657.777334][T22533] total_dirty 0 [ 2657.780785][T22533] total_writeback 4096 [ 2657.784874][T22533] total_workingset_refault_anon 65711 [ 2657.790262][T22533] total_workingset_refault_file 309 [ 2657.795458][T22533] total_swap 4632576 [ 2657.799380][T22533] total_swapcached 4096 [ 2657.803547][T22533] total_pgpgin 892944 [ 2657.807580][T22533] total_pgpgout 892939 [ 2657.811737][T22533] total_pgfault 974086 [ 2657.815779][T22533] total_pgmajfault 34382 [ 2657.820022][T22533] total_inactive_anon 0 [ 2657.824171][T22533] total_active_anon 0 [ 2657.828195][T22533] total_inactive_file 0 [ 2657.832336][T22533] total_active_file 12288 [ 2657.836667][T22533] total_unevictable 0 [ 2657.840681][T22533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22533,uid=0 [ 2657.855964][T22533] Memory cgroup out of memory: Killed process 22533 (syz-executor.4) total-vm:46300kB, anon-rss:324kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2657.873311][T22544] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2657.884654][T22544] CPU: 0 PID: 22544 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2657.895074][T22544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2657.905142][T22544] Call Trace: [ 2657.908420][T22544] [ 2657.911349][T22544] dump_stack_lvl+0xda/0x130 [ 2657.916035][T22544] dump_stack+0x15/0x20 [ 2657.920199][T22544] dump_header+0x82/0x2d0 [ 2657.924565][T22544] oom_kill_process+0x33a/0x4c0 [ 2657.929527][T22544] out_of_memory+0x9ca/0xbf0 [ 2657.934128][T22544] mem_cgroup_out_of_memory+0x139/0x190 [ 2657.939680][T22544] try_charge_memcg+0x75c/0xd30 [ 2657.944543][T22544] ? __swap_duplicate+0x29b/0x2b0 [ 2657.949610][T22544] ? radix_tree_lookup+0xf9/0x150 [ 2657.954776][T22544] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2657.961003][T22544] __read_swap_cache_async+0x2f6/0x550 [ 2657.966512][T22544] swap_cluster_readahead+0x27c/0x4c0 [ 2657.971892][T22544] swapin_readahead+0xe9/0x7f0 [ 2657.976674][T22544] ? __filemap_get_folio+0x41a/0x5a0 [ 2657.981965][T22544] ? __perf_event_task_sched_in+0x769/0x790 [ 2657.987867][T22544] ? swap_cache_get_folio+0x6e/0x200 [ 2657.993172][T22544] do_swap_page+0x4a0/0x1670 [ 2657.997778][T22544] ? __rcu_read_lock+0x35/0x50 [ 2658.002569][T22544] ? pte_offset_map_nolock+0x124/0x1d0 [ 2658.008098][T22544] handle_mm_fault+0xa36/0x2dd0 [ 2658.012959][T22544] ? mt_find+0x1d9/0x310 [ 2658.017253][T22544] exc_page_fault+0x2f7/0x6c0 [ 2658.021922][T22544] asm_exc_page_fault+0x26/0x30 [ 2658.026769][T22544] RIP: 0010:__get_user_8+0x11/0x20 [ 2658.031948][T22544] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2658.051584][T22544] RSP: 0018:ffffc90000d37e38 EFLAGS: 00050202 [ 2658.057713][T22544] RAX: 000055555595bda8 RBX: ffffc90000d37e40 RCX: ffffffff81443e13 [ 2658.065677][T22544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888136871a10 [ 2658.073738][T22544] RBP: ffffc90000d37ef8 R08: 0001888136871a17 R09: 0000000000000000 [ 2658.081699][T22544] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffff888136871040 [ 2658.089665][T22544] R13: ffff888136871a10 R14: ffffc90000d37f58 R15: ffffc90000d37fd8 [ 2658.097625][T22544] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2658.103538][T22544] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2658.109257][T22544] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2658.115216][T22544] exit_to_user_mode_loop+0xcc/0xe0 [ 2658.120505][T22544] exit_to_user_mode_prepare+0x6c/0xb0 [ 2658.126002][T22544] irqentry_exit_to_user_mode+0x9/0x20 [ 2658.131956][T22544] irqentry_exit+0x12/0x40 [ 2658.136415][T22544] asm_exc_page_fault+0x26/0x30 [ 2658.141277][T22544] RIP: 0033:0x7f07d1420d4b [ 2658.145805][T22544] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2658.165478][T22544] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2658.171603][T22544] RAX: 0000000000000001 RBX: 00007f07d1585f80 RCX: 0000000000288ae8 [ 2658.179580][T22544] RDX: 00000000000002a6 RSI: 00007fffaf03b8f0 RDI: 00007f07d1585f80 [ 2658.187549][T22544] RBP: 00007f07d1587980 R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2658.195546][T22544] R10: 00007fffaf111080 R11: 000000000007e210 R12: 0000000000288d8d [ 2658.203611][T22544] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000288a4c [ 2658.211679][T22544] [ 2658.214889][T22544] memory: usage 307200kB, limit 307200kB, failcnt 203301 [ 2658.222020][T22544] memory+swap: usage 307800kB, limit 9007199254740988kB, failcnt 0 [ 2658.229961][T22544] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2658.237261][T22544] Memory cgroup stats for /syz1: [ 2658.240009][T22544] cache 4096 [ 2658.248193][T22544] rss 8192 [ 2658.251208][T22544] shmem 0 [ 2658.254166][T22544] mapped_file 0 [ 2658.257693][T22544] dirty 0 [ 2658.260623][T22544] writeback 0 [ 2658.264775][T22544] workingset_refault_anon 91344 [ 2658.269667][T22544] workingset_refault_file 314 [ 2658.274473][T22544] swap 614400 [ 2658.277779][T22544] swapcached 8192 [ 2658.281456][T22544] pgpgin 2001059 [ 2658.284988][T22544] pgpgout 2001056 [ 2658.288640][T22544] pgfault 2100414 [ 2658.292260][T22544] pgmajfault 40300 [ 2658.296018][T22544] inactive_anon 8192 [ 2658.299927][T22544] active_anon 0 [ 2658.303444][T22544] inactive_file 0 [ 2658.307192][T22544] active_file 4096 [ 2658.310958][T22544] unevictable 0 [ 2658.314418][T22544] hierarchical_memory_limit 314572800 [ 2658.319889][T22544] hierarchical_memsw_limit 9223372036854771712 [ 2658.326097][T22544] total_cache 4096 [ 2658.329944][T22544] total_rss 8192 [ 2658.333606][T22544] total_shmem 0 [ 2658.337148][T22544] total_mapped_file 0 [ 2658.341118][T22544] total_dirty 0 [ 2658.344566][T22544] total_writeback 0 [ 2658.348426][T22544] total_workingset_refault_anon 91344 [ 2658.353796][T22544] total_workingset_refault_file 314 [ 2658.359062][T22544] total_swap 614400 [ 2658.362893][T22544] total_swapcached 8192 [ 2658.367114][T22544] total_pgpgin 2001059 [ 2658.371182][T22544] total_pgpgout 2001056 [ 2658.375320][T22544] total_pgfault 2100414 [ 2658.379527][T22544] total_pgmajfault 40300 [ 2658.383754][T22544] total_inactive_anon 8192 [ 2658.388182][T22544] total_active_anon 0 [ 2658.392175][T22544] total_inactive_file 0 [ 2658.396366][T22544] total_active_file 4096 [ 2658.400658][T22544] total_unevictable 0 [ 2658.404625][T22544] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22544,uid=0 03:56:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:56:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xb, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2658.420054][T22544] Memory cgroup out of memory: Killed process 22544 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2658.472732][T22558] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xc, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:56:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x74}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:56:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xd, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2658.655471][T22565] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 2658.730860][T22576] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2659.484190][T22568] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2659.495637][T22568] CPU: 0 PID: 22568 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2659.506202][T22568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2659.516433][T22568] Call Trace: [ 2659.519712][T22568] [ 2659.522820][T22568] dump_stack_lvl+0xda/0x130 [ 2659.527415][T22568] dump_stack+0x15/0x20 [ 2659.531578][T22568] dump_header+0x82/0x2d0 [ 2659.535901][T22568] oom_kill_process+0x33a/0x4c0 [ 2659.540824][T22568] out_of_memory+0x9ca/0xbf0 [ 2659.545425][T22568] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2659.551497][T22568] mem_cgroup_out_of_memory+0x139/0x190 [ 2659.557050][T22568] try_charge_memcg+0x75c/0xd30 [ 2659.561903][T22568] ? __swap_duplicate+0x29b/0x2b0 [ 2659.567007][T22568] ? radix_tree_lookup+0xf9/0x150 [ 2659.572082][T22568] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2659.578146][T22568] __read_swap_cache_async+0x2f6/0x550 [ 2659.583664][T22568] swap_cluster_readahead+0x27c/0x4c0 [ 2659.589101][T22568] swapin_readahead+0xe9/0x7f0 [ 2659.593931][T22568] ? __filemap_get_folio+0x41a/0x5a0 [ 2659.599214][T22568] ? _raw_spin_unlock+0x26/0x40 [ 2659.604102][T22568] ? swap_cache_get_folio+0x6e/0x200 [ 2659.609503][T22568] do_swap_page+0x4a0/0x1670 [ 2659.614090][T22568] ? __rcu_read_lock+0x35/0x50 [ 2659.618872][T22568] ? pte_offset_map_nolock+0x124/0x1d0 [ 2659.624384][T22568] handle_mm_fault+0xa36/0x2dd0 [ 2659.629255][T22568] exc_page_fault+0x3ff/0x6c0 [ 2659.634083][T22568] asm_exc_page_fault+0x26/0x30 [ 2659.639006][T22568] RIP: 0033:0x7f07d1420bc4 [ 2659.643447][T22568] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2659.663057][T22568] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2659.669202][T22568] RAX: 0000000000000000 RBX: 00007f07d1587090 RCX: 0000000000000000 [ 2659.677179][T22568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2659.685149][T22568] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2659.693206][T22568] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002894e6 [ 2659.701210][T22568] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 00000000002891a5 [ 2659.709174][T22568] [ 2659.712345][T22568] memory: usage 307200kB, limit 307200kB, failcnt 203422 [ 2659.719420][T22568] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2659.727340][T22568] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 03:56:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xe, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2659.734661][T22568] Memory cgroup stats for /syz1: [ 2659.741926][T22568] cache 4096 [ 2659.750181][T22568] rss 12288 [ 2659.753281][T22568] shmem 0 [ 2659.756214][T22568] mapped_file 0 [ 2659.759703][T22568] dirty 0 [ 2659.762636][T22568] writeback 8192 [ 2659.766175][T22568] workingset_refault_anon 91386 [ 2659.771128][T22568] workingset_refault_file 314 [ 2659.775826][T22568] swap 536576 [ 2659.779170][T22568] swapcached 20480 [ 2659.782908][T22568] pgpgin 2001124 [ 2659.786494][T22568] pgpgout 2001116 [ 2659.790259][T22568] pgfault 2100636 [ 2659.793893][T22568] pgmajfault 40318 [ 2659.797649][T22568] inactive_anon 0 [ 2659.801342][T22568] active_anon 0 [ 2659.804799][T22568] inactive_file 4096 [ 2659.805680][T22583] validate_nla: 7 callbacks suppressed [ 2659.805692][T22583] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2659.808753][T22568] active_file 0 [ 2659.808761][T22568] unevictable 0 [ 2659.808788][T22568] hierarchical_memory_limit 314572800 [ 2659.834845][T22568] hierarchical_memsw_limit 9223372036854771712 [ 2659.841089][T22568] total_cache 4096 [ 2659.844817][T22568] total_rss 12288 [ 2659.848518][T22568] total_shmem 0 [ 2659.851984][T22568] total_mapped_file 0 [ 2659.855977][T22568] total_dirty 0 [ 2659.859464][T22568] total_writeback 8192 [ 2659.863567][T22568] total_workingset_refault_anon 91386 [ 2659.868980][T22568] total_workingset_refault_file 314 [ 2659.874174][T22568] total_swap 536576 [ 2659.878082][T22568] total_swapcached 20480 [ 2659.882325][T22568] total_pgpgin 2001124 [ 2659.886455][T22568] total_pgpgout 2001116 [ 2659.890607][T22568] total_pgfault 2100636 [ 2659.894870][T22568] total_pgmajfault 40318 [ 2659.899224][T22568] total_inactive_anon 0 [ 2659.903386][T22568] total_active_anon 0 [ 2659.907418][T22568] total_inactive_file 4096 [ 2659.911920][T22568] total_active_file 0 [ 2659.915900][T22568] total_unevictable 0 [ 2659.919908][T22568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22568,uid=0 [ 2659.935309][T22568] Memory cgroup out of memory: Killed process 22568 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2659.952753][T22563] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2659.964288][T22563] CPU: 1 PID: 22563 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2659.974772][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2659.984885][T22563] Call Trace: [ 2659.988172][T22563] [ 2659.991105][T22563] dump_stack_lvl+0xda/0x130 [ 2659.995775][T22563] dump_stack+0x15/0x20 [ 2659.999940][T22563] dump_header+0x82/0x2d0 [ 2660.004342][T22563] oom_kill_process+0x33a/0x4c0 [ 2660.009276][T22563] out_of_memory+0x9ca/0xbf0 [ 2660.013908][T22563] mem_cgroup_out_of_memory+0x139/0x190 [ 2660.019457][T22563] try_charge_memcg+0x75c/0xd30 [ 2660.024302][T22563] ? __swap_duplicate+0x29b/0x2b0 [ 2660.029449][T22563] ? radix_tree_lookup+0xf9/0x150 [ 2660.034489][T22563] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2660.040638][T22563] __read_swap_cache_async+0x2f6/0x550 [ 2660.046092][T22563] swap_cluster_readahead+0x27c/0x4c0 [ 2660.051487][T22563] swapin_readahead+0xe9/0x7f0 [ 2660.056269][T22563] ? __filemap_get_folio+0x41a/0x5a0 [ 2660.061550][T22563] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2660.067303][T22563] ? swap_cache_get_folio+0x6e/0x200 [ 2660.072599][T22563] do_swap_page+0x4a0/0x1670 [ 2660.077179][T22563] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2660.082510][T22563] ? __rcu_read_lock+0x35/0x50 [ 2660.087262][T22563] ? pte_offset_map_nolock+0x124/0x1d0 [ 2660.092712][T22563] handle_mm_fault+0xa36/0x2dd0 [ 2660.097577][T22563] exc_page_fault+0x3ff/0x6c0 [ 2660.102251][T22563] asm_exc_page_fault+0x26/0x30 [ 2660.107095][T22563] RIP: 0033:0x7f50c0f61bc4 [ 2660.111553][T22563] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2660.132386][T22563] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010283 [ 2660.138513][T22563] RAX: 0000000000000000 RBX: 00007f50c10c7050 RCX: 0000000000000000 [ 2660.146478][T22563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2660.154493][T22563] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2660.162452][T22563] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000002894a9 [ 2660.170470][T22563] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 0000000000289168 [ 2660.178509][T22563] [ 2660.181767][T22563] memory: usage 307200kB, limit 307200kB, failcnt 101253 [ 2660.188902][T22563] memory+swap: usage 309060kB, limit 9007199254740988kB, failcnt 0 [ 2660.196866][T22563] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 2660.204184][T22563] Memory cgroup stats for /syz3: [ 2660.212202][T22563] cache 16384 [ 2660.220460][T22563] rss 0 [ 2660.223285][T22563] shmem 0 [ 2660.226213][T22563] mapped_file 0 [ 2660.229719][T22563] dirty 0 [ 2660.232733][T22563] writeback 0 [ 2660.235999][T22563] workingset_refault_anon 75757 [ 2660.240942][T22563] workingset_refault_file 320 [ 2660.245699][T22563] swap 1904640 [ 2660.249132][T22563] swapcached 0 [ 2660.252491][T22563] pgpgin 379617 [ 2660.256031][T22563] pgpgout 379613 [ 2660.259648][T22563] pgfault 567766 [ 2660.263193][T22563] pgmajfault 40011 [ 2660.266924][T22563] inactive_anon 0 [ 2660.270636][T22563] active_anon 0 [ 2660.274146][T22563] inactive_file 4096 [ 2660.278074][T22563] active_file 12288 [ 2660.281951][T22563] unevictable 0 [ 2660.285400][T22563] hierarchical_memory_limit 314572800 [ 2660.290850][T22563] hierarchical_memsw_limit 9223372036854771712 [ 2660.297112][T22563] total_cache 16384 [ 2660.300911][T22563] total_rss 0 [ 2660.304317][T22563] total_shmem 0 [ 2660.307964][T22563] total_mapped_file 0 [ 2660.311942][T22563] total_dirty 0 [ 2660.315478][T22563] total_writeback 0 [ 2660.319432][T22563] total_workingset_refault_anon 75757 [ 2660.324805][T22563] total_workingset_refault_file 320 [ 2660.330106][T22563] total_swap 1904640 [ 2660.333990][T22563] total_swapcached 0 [ 2660.337893][T22563] total_pgpgin 379617 [ 2660.341866][T22563] total_pgpgout 379613 [ 2660.345931][T22563] total_pgfault 567766 [ 2660.350040][T22563] total_pgmajfault 40011 [ 2660.354271][T22563] total_inactive_anon 0 [ 2660.358434][T22563] total_active_anon 0 [ 2660.362404][T22563] total_inactive_file 4096 [ 2660.366884][T22563] total_active_file 12288 [ 2660.371230][T22563] total_unevictable 0 [ 2660.375201][T22563] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22563,uid=0 [ 2660.390545][T22563] Memory cgroup out of memory: Killed process 22563 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:56:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xb}, 0x0) [ 2660.474007][T22587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:56:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x10, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:56:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x11, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2660.823636][T22592] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2660.835022][T22593] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2660.855011][T22597] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:56:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x12, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 2660.865944][T22599] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2660.889229][T22603] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2660.911457][T22605] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x600}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2660.926977][T22607] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2660.969885][T22610] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2661.324779][T22589] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2661.338407][T22589] CPU: 0 PID: 22589 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2661.348915][T22589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2661.358983][T22589] Call Trace: [ 2661.362266][T22589] [ 2661.365196][T22589] dump_stack_lvl+0xda/0x130 [ 2661.369844][T22589] dump_stack+0x15/0x20 [ 2661.374015][T22589] dump_header+0x82/0x2d0 [ 2661.378365][T22589] oom_kill_process+0x33a/0x4c0 [ 2661.383289][T22589] out_of_memory+0x9ca/0xbf0 [ 2661.388014][T22589] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2661.394120][T22589] mem_cgroup_out_of_memory+0x139/0x190 [ 2661.399706][T22589] try_charge_memcg+0x75c/0xd30 [ 2661.404573][T22589] obj_cgroup_charge_pages+0xab/0x130 [ 2661.409954][T22589] __memcg_kmem_charge_page+0x9c/0x170 [ 2661.415481][T22589] __alloc_pages+0x1bb/0x340 [ 2661.420076][T22589] alloc_pages_mpol+0xb1/0x1d0 [ 2661.424848][T22589] alloc_pages+0xe0/0x100 [ 2661.429189][T22589] __vmalloc_node_range+0x6d2/0xea0 [ 2661.434704][T22589] kvmalloc_node+0x121/0x160 [ 2661.439358][T22589] ? xt_alloc_table_info+0x3d/0x80 [ 2661.444480][T22589] xt_alloc_table_info+0x3d/0x80 [ 2661.449495][T22589] do_arpt_set_ctl+0x634/0x13b0 [ 2661.454418][T22589] ? __futex_wait+0x227/0x280 [ 2661.459179][T22589] ? __futex_wake_mark+0x70/0x70 [ 2661.464128][T22589] ? tcp_release_cb+0xfe/0x370 [ 2661.468946][T22589] ? _raw_spin_unlock_bh+0x36/0x40 [ 2661.474054][T22589] nf_setsockopt+0x18d/0x1b0 [ 2661.478721][T22589] ip_setsockopt+0xe6/0x100 [ 2661.483289][T22589] tcp_setsockopt+0x90/0xa0 [ 2661.487787][T22589] sock_common_setsockopt+0x61/0x70 [ 2661.492994][T22589] ? sock_common_recvmsg+0xe0/0xe0 [ 2661.498140][T22589] __sys_setsockopt+0x1d4/0x240 [ 2661.502988][T22589] __x64_sys_setsockopt+0x66/0x80 [ 2661.508004][T22589] do_syscall_64+0x44/0x110 [ 2661.512724][T22589] ? syscall_exit_to_user_mode+0x38/0x140 [ 2661.518452][T22589] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2661.524356][T22589] RIP: 0033:0x7f07d1466ba9 [ 2661.528759][T22589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2661.548362][T22589] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2661.556767][T22589] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2661.564730][T22589] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2661.572814][T22589] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2661.580779][T22589] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2661.588745][T22589] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2661.596934][T22589] [ 2661.600048][T22589] memory: usage 307188kB, limit 307200kB, failcnt 203549 [ 2661.607125][T22589] memory+swap: usage 307704kB, limit 9007199254740988kB, failcnt 0 [ 2661.615069][T22589] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 2661.622426][T22589] Memory cgroup stats for /syz1: [ 2661.622654][T22589] cache 4096 [ 2661.630820][T22589] rss 32768 [ 2661.633928][T22589] shmem 0 [ 2661.636950][T22589] mapped_file 0 [ 2661.640401][T22589] dirty 0 [ 2661.643332][T22589] writeback 0 [ 2661.646663][T22589] workingset_refault_anon 91409 [ 2661.651516][T22589] workingset_refault_file 314 [ 2661.656221][T22589] swap 516096 [ 2661.659543][T22589] swapcached 8192 [ 2661.663177][T22589] pgpgin 2001171 [ 2661.666789][T22589] pgpgout 2001161 [ 2661.670419][T22589] pgfault 2100869 [ 2661.674042][T22589] pgmajfault 40329 [ 2661.677851][T22589] inactive_anon 24576 [ 2661.682360][T22589] active_anon 12288 [ 2661.686426][T22589] inactive_file 4096 [ 2661.690317][T22589] active_file 0 [ 2661.693776][T22589] unevictable 0 [ 2661.697274][T22589] hierarchical_memory_limit 314572800 [ 2661.702651][T22589] hierarchical_memsw_limit 9223372036854771712 [ 2661.708886][T22589] total_cache 4096 [ 2661.712669][T22589] total_rss 32768 [ 2661.716323][T22589] total_shmem 0 [ 2661.719807][T22589] total_mapped_file 0 [ 2661.723772][T22589] total_dirty 0 [ 2661.727250][T22589] total_writeback 0 [ 2661.731056][T22589] total_workingset_refault_anon 91409 [ 2661.736481][T22589] total_workingset_refault_file 314 [ 2661.741761][T22589] total_swap 516096 [ 2661.745813][T22589] total_swapcached 8192 [ 2661.750014][T22589] total_pgpgin 2001171 [ 2661.754206][T22589] total_pgpgout 2001161 [ 2661.758392][T22589] total_pgfault 2100869 [ 2661.762545][T22589] total_pgmajfault 40329 [ 2661.766868][T22589] total_inactive_anon 24576 [ 2661.771365][T22589] total_active_anon 12288 [ 2661.775685][T22589] total_inactive_file 4096 [ 2661.780143][T22589] total_active_file 0 [ 2661.784111][T22589] total_unevictable 0 [ 2661.788168][T22589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22588,uid=0 [ 2661.803502][T22589] Memory cgroup out of memory: Killed process 22588 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x25, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:56:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x48, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 2662.021026][T22619] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2662.031507][T22618] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2662.047374][T22620] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x4c, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 2662.109795][T22627] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2662.120639][T22629] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2662.172204][T22634] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2662.839782][T22611] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2662.851244][T22611] CPU: 0 PID: 22611 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2662.861658][T22611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2662.871744][T22611] Call Trace: [ 2662.875025][T22611] [ 2662.877959][T22611] dump_stack_lvl+0xda/0x130 [ 2662.882606][T22611] dump_stack+0x15/0x20 [ 2662.886766][T22611] dump_header+0x82/0x2d0 [ 2662.891233][T22611] oom_kill_process+0x33a/0x4c0 [ 2662.896173][T22611] out_of_memory+0x9ca/0xbf0 [ 2662.900776][T22611] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2662.906909][T22611] mem_cgroup_out_of_memory+0x139/0x190 [ 2662.912541][T22611] try_charge_memcg+0x75c/0xd30 [ 2662.917440][T22611] ? __swap_duplicate+0x29b/0x2b0 [ 2662.922569][T22611] ? radix_tree_lookup+0xf9/0x150 [ 2662.927609][T22611] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2662.933764][T22611] __read_swap_cache_async+0x2f6/0x550 [ 2662.939336][T22611] swap_cluster_readahead+0x27c/0x4c0 [ 2662.944772][T22611] swapin_readahead+0xe9/0x7f0 [ 2662.949590][T22611] ? __filemap_get_folio+0x41a/0x5a0 [ 2662.954868][T22611] ? swap_cache_get_folio+0x6e/0x200 [ 2662.960146][T22611] do_swap_page+0x4a0/0x1670 [ 2662.964926][T22611] ? __rcu_read_lock+0x35/0x50 [ 2662.969684][T22611] ? pte_offset_map_nolock+0x124/0x1d0 [ 2662.975141][T22611] handle_mm_fault+0xa36/0x2dd0 [ 2662.980022][T22611] exc_page_fault+0x3ff/0x6c0 [ 2662.984776][T22611] asm_exc_page_fault+0x26/0x30 [ 2662.989620][T22611] RIP: 0033:0x7f50c0fd2f63 [ 2662.994196][T22611] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 8e 4f 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 2663.013835][T22611] RSP: 002b:00007ffd61c03bc8 EFLAGS: 00010293 [ 2663.019900][T22611] RAX: 00000000fffffffa RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2663.027873][T22611] RDX: 00007ffd61c03be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2663.036096][T22611] RBP: 00007f50c10c8980 R08: 0000000000000010 R09: 00007ffd61de10b0 [ 2663.044157][T22611] R10: 0000000000000000 R11: 000000000007e588 R12: 000000000028a1b7 [ 2663.052120][T22611] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 0000000000289e76 [ 2663.060129][T22611] [ 2663.063226][T22611] memory: usage 307200kB, limit 307200kB, failcnt 101542 [ 2663.070337][T22611] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2663.078294][T22611] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 2663.085630][T22611] Memory cgroup stats for /syz3: [ 2663.089085][T22611] cache 16384 [ 2663.097330][T22611] rss 8192 [ 2663.100369][T22611] shmem 0 [ 2663.103442][T22611] mapped_file 0 [ 2663.106912][T22611] dirty 0 [ 2663.109905][T22611] writeback 28672 [ 2663.113548][T22611] workingset_refault_anon 75816 [ 2663.118423][T22611] workingset_refault_file 320 [ 2663.123130][T22611] swap 1888256 [ 2663.126508][T22611] swapcached 28672 [ 2663.130262][T22611] pgpgin 379722 [ 2663.133706][T22611] pgpgout 379710 [ 2663.137262][T22611] pgfault 568139 [ 2663.140931][T22611] pgmajfault 40046 [ 2663.144637][T22611] inactive_anon 0 [ 2663.148300][T22611] active_anon 0 [ 2663.151934][T22611] inactive_file 12288 [ 2663.155922][T22611] active_file 4096 [ 2663.159679][T22611] unevictable 0 [ 2663.163157][T22611] hierarchical_memory_limit 314572800 [ 2663.168640][T22611] hierarchical_memsw_limit 9223372036854771712 [ 2663.174863][T22611] total_cache 16384 [ 2663.178748][T22611] total_rss 8192 [ 2663.182299][T22611] total_shmem 0 [ 2663.185746][T22611] total_mapped_file 0 [ 2663.189766][T22611] total_dirty 0 [ 2663.193276][T22611] total_writeback 28672 [ 2663.197476][T22611] total_workingset_refault_anon 75816 [ 2663.202903][T22611] total_workingset_refault_file 320 [ 2663.208185][T22611] total_swap 1888256 [ 2663.212064][T22611] total_swapcached 28672 [ 2663.216846][T22611] total_pgpgin 379722 [ 2663.220808][T22611] total_pgpgout 379710 [ 2663.224908][T22611] total_pgfault 568139 [ 2663.229149][T22611] total_pgmajfault 40046 [ 2663.233466][T22611] total_inactive_anon 0 [ 2663.237653][T22611] total_active_anon 0 [ 2663.241741][T22611] total_inactive_file 12288 [ 2663.246320][T22611] total_active_file 4096 [ 2663.250617][T22611] total_unevictable 0 [ 2663.254588][T22611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22611,uid=0 [ 2663.269903][T22611] Memory cgroup out of memory: Killed process 22611 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2663.287325][T22624] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2663.300874][T22624] CPU: 1 PID: 22624 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2663.311298][T22624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2663.321445][T22624] Call Trace: [ 2663.324720][T22624] [ 2663.327646][T22624] dump_stack_lvl+0xda/0x130 [ 2663.332293][T22624] dump_stack+0x15/0x20 [ 2663.336494][T22624] dump_header+0x82/0x2d0 [ 2663.340875][T22624] oom_kill_process+0x33a/0x4c0 [ 2663.345735][T22624] out_of_memory+0x9ca/0xbf0 [ 2663.350346][T22624] mem_cgroup_out_of_memory+0x139/0x190 [ 2663.356021][T22624] try_charge_memcg+0x75c/0xd30 [ 2663.360912][T22624] obj_cgroup_charge_pages+0xab/0x130 [ 2663.366549][T22624] __memcg_kmem_charge_page+0x9c/0x170 [ 2663.372012][T22624] __alloc_pages+0x1bb/0x340 [ 2663.376594][T22624] alloc_pages_mpol+0xb1/0x1d0 [ 2663.381380][T22624] alloc_pages+0xe0/0x100 [ 2663.385710][T22624] __vmalloc_node_range+0x6d2/0xea0 [ 2663.391248][T22624] kvmalloc_node+0x121/0x160 [ 2663.395858][T22624] ? xt_alloc_table_info+0x3d/0x80 [ 2663.400964][T22624] xt_alloc_table_info+0x3d/0x80 [ 2663.405890][T22624] do_arpt_set_ctl+0x634/0x13b0 [ 2663.410782][T22624] ? __futex_wait+0x227/0x280 [ 2663.415482][T22624] ? __futex_wake_mark+0x70/0x70 [ 2663.420427][T22624] ? tcp_release_cb+0xfe/0x370 [ 2663.425178][T22624] ? _raw_spin_unlock_bh+0x36/0x40 [ 2663.430276][T22624] nf_setsockopt+0x18d/0x1b0 [ 2663.434885][T22624] ip_setsockopt+0xe6/0x100 [ 2663.439498][T22624] tcp_setsockopt+0x90/0xa0 [ 2663.444006][T22624] sock_common_setsockopt+0x61/0x70 [ 2663.449212][T22624] ? sock_common_recvmsg+0xe0/0xe0 [ 2663.454316][T22624] __sys_setsockopt+0x1d4/0x240 [ 2663.459176][T22624] __x64_sys_setsockopt+0x66/0x80 [ 2663.464189][T22624] do_syscall_64+0x44/0x110 [ 2663.468796][T22624] ? syscall_exit_to_user_mode+0x38/0x140 [ 2663.474643][T22624] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2663.480636][T22624] RIP: 0033:0x7f07d1466ba9 [ 2663.485094][T22624] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2663.504737][T22624] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2663.513146][T22624] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2663.521108][T22624] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2663.529086][T22624] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2663.537062][T22624] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2663.545114][T22624] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2663.553113][T22624] [ 2663.556246][T22624] memory: usage 307200kB, limit 307200kB, failcnt 203883 [ 2663.563421][T22624] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2663.571362][T22624] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2663.578685][T22624] Memory cgroup stats for /syz1: [ 2663.579068][T22624] cache 4096 [ 2663.587201][T22624] rss 0 [ 2663.589996][T22624] shmem 0 [ 2663.592922][T22624] mapped_file 0 [ 2663.596440][T22624] dirty 0 [ 2663.599378][T22624] writeback 0 [ 2663.602650][T22624] workingset_refault_anon 91465 [ 2663.607634][T22624] workingset_refault_file 314 [ 2663.612310][T22624] swap 552960 [ 2663.615589][T22624] swapcached 0 [ 2663.618996][T22624] pgpgin 2001250 [ 2663.622536][T22624] pgpgout 2001249 [ 2663.626171][T22624] pgfault 2101055 [ 2663.629863][T22624] pgmajfault 40356 [ 2663.633663][T22624] inactive_anon 0 [ 2663.637352][T22624] active_anon 0 [ 2663.640900][T22624] inactive_file 0 [ 2663.644782][T22624] active_file 4096 [ 2663.648523][T22624] unevictable 0 [ 2663.651985][T22624] hierarchical_memory_limit 314572800 [ 2663.657377][T22624] hierarchical_memsw_limit 9223372036854771712 [ 2663.663567][T22624] total_cache 4096 [ 2663.667306][T22624] total_rss 0 [ 2663.670584][T22624] total_shmem 0 [ 2663.674044][T22624] total_mapped_file 0 [ 2663.678132][T22624] total_dirty 0 [ 2663.681579][T22624] total_writeback 0 [ 2663.685376][T22624] total_workingset_refault_anon 91465 [ 2663.690812][T22624] total_workingset_refault_file 314 [ 2663.696003][T22624] total_swap 552960 [ 2663.699867][T22624] total_swapcached 0 [ 2663.703748][T22624] total_pgpgin 2001250 [ 2663.707882][T22624] total_pgpgout 2001249 [ 2663.712032][T22624] total_pgfault 2101055 [ 2663.716197][T22624] total_pgmajfault 40356 [ 2663.720526][T22624] total_inactive_anon 0 [ 2663.724681][T22624] total_active_anon 0 [ 2663.728716][T22624] total_inactive_file 0 [ 2663.734172][T22624] total_active_file 4096 [ 2663.738481][T22624] total_unevictable 0 [ 2663.742486][T22624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22622,uid=0 [ 2663.758084][T22624] Memory cgroup out of memory: Killed process 22622 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 03:56:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x60, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x68, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:56:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2663.953536][T22638] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 03:56:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6c, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2664.015372][T22649] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2664.091415][T22657] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2664.852236][T22640] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2664.865793][T22640] CPU: 0 PID: 22640 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2664.876220][T22640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2664.886278][T22640] Call Trace: [ 2664.889549][T22640] [ 2664.892470][T22640] dump_stack_lvl+0xda/0x130 [ 2664.897128][T22640] dump_stack+0x15/0x20 [ 2664.901280][T22640] dump_header+0x82/0x2d0 [ 2664.905771][T22640] oom_kill_process+0x33a/0x4c0 [ 2664.910731][T22640] out_of_memory+0x9ca/0xbf0 [ 2664.915388][T22640] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2664.921508][T22640] mem_cgroup_out_of_memory+0x139/0x190 [ 2664.927123][T22640] try_charge_memcg+0x75c/0xd30 [ 2664.932021][T22640] obj_cgroup_charge_pages+0xab/0x130 [ 2664.937390][T22640] __memcg_kmem_charge_page+0x9c/0x170 [ 2664.942918][T22640] __alloc_pages+0x1bb/0x340 [ 2664.947500][T22640] alloc_pages_mpol+0xb1/0x1d0 [ 2664.952271][T22640] alloc_pages+0xe0/0x100 [ 2664.956592][T22640] __vmalloc_node_range+0x6d2/0xea0 [ 2664.961823][T22640] kvmalloc_node+0x121/0x160 [ 2664.966409][T22640] ? xt_alloc_table_info+0x3d/0x80 [ 2664.971576][T22640] xt_alloc_table_info+0x3d/0x80 [ 2664.976509][T22640] do_arpt_set_ctl+0x634/0x13b0 [ 2664.981357][T22640] ? __futex_wait+0x227/0x280 [ 2664.986030][T22640] ? __futex_wake_mark+0x70/0x70 [ 2664.991033][T22640] ? tcp_release_cb+0xfe/0x370 [ 2664.995793][T22640] ? _raw_spin_unlock_bh+0x36/0x40 [ 2665.000899][T22640] nf_setsockopt+0x18d/0x1b0 [ 2665.005489][T22640] ip_setsockopt+0xe6/0x100 [ 2665.009994][T22640] tcp_setsockopt+0x90/0xa0 [ 2665.014493][T22640] sock_common_setsockopt+0x61/0x70 [ 2665.019766][T22640] ? sock_common_recvmsg+0xe0/0xe0 [ 2665.024879][T22640] __sys_setsockopt+0x1d4/0x240 [ 2665.029725][T22640] __x64_sys_setsockopt+0x66/0x80 [ 2665.034762][T22640] do_syscall_64+0x44/0x110 [ 2665.039270][T22640] ? syscall_exit_to_user_mode+0x38/0x140 [ 2665.044985][T22640] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2665.050914][T22640] RIP: 0033:0x7ffbf0714ba9 [ 2665.055317][T22640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2665.074928][T22640] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2665.083336][T22640] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2665.091295][T22640] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2665.099257][T22640] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2665.107229][T22640] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2665.115191][T22640] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2665.123259][T22640] [ 2665.126369][T22640] memory: usage 307200kB, limit 307200kB, failcnt 55480 [ 2665.133304][T22640] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 2665.141451][T22640] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2665.148816][T22640] Memory cgroup stats for /syz4: [ 2665.226652][T22640] cache 12288 [ 2665.235010][T22640] rss 0 [ 2665.237817][T22640] shmem 0 [ 2665.240787][T22640] mapped_file 0 [ 2665.244283][T22640] dirty 0 [ 2665.247417][T22640] writeback 0 [ 2665.250699][T22640] workingset_refault_anon 65911 [ 2665.255535][T22640] workingset_refault_file 309 [ 2665.260326][T22640] swap 4640768 [ 2665.263692][T22640] swapcached 0 [ 2665.267088][T22640] pgpgin 893254 [ 2665.270538][T22640] pgpgout 893251 03:56:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x45da}, 0x0) 03:56:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x74, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2665.274082][T22640] pgfault 974889 [ 2665.277729][T22640] pgmajfault 34474 [ 2665.281547][T22640] inactive_anon 0 [ 2665.285177][T22640] active_anon 0 [ 2665.288649][T22640] inactive_file 0 [ 2665.292286][T22640] active_file 12288 [ 2665.296136][T22640] unevictable 0 [ 2665.299643][T22640] hierarchical_memory_limit 314572800 [ 2665.303546][T22667] validate_nla: 9 callbacks suppressed [ 2665.303560][T22667] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2665.305081][T22640] hierarchical_memsw_limit 9223372036854771712 [ 2665.305091][T22640] total_cache 12288 [ 2665.305097][T22640] total_rss 0 [ 2665.316768][T22665] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2665.318737][T22640] total_shmem 0 [ 2665.330320][T22668] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2665.332098][T22640] total_mapped_file 0 [ 2665.332107][T22640] total_dirty 0 [ 2665.360580][T22640] total_writeback 0 [ 2665.364390][T22640] total_workingset_refault_anon 65911 [ 2665.371131][T22640] total_workingset_refault_file 309 [ 2665.376378][T22640] total_swap 4640768 [ 2665.380284][T22640] total_swapcached 0 [ 2665.384175][T22640] total_pgpgin 893254 [ 2665.388190][T22640] total_pgpgout 893251 [ 2665.392270][T22640] total_pgfault 974889 [ 2665.396395][T22640] total_pgmajfault 34474 [ 2665.400660][T22640] total_inactive_anon 0 [ 2665.404810][T22640] total_active_anon 0 [ 2665.408875][T22640] total_inactive_file 0 [ 2665.413038][T22640] total_active_file 12288 [ 2665.417390][T22640] total_unevictable 0 [ 2665.421370][T22640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22637,uid=0 [ 2665.436723][T22640] Memory cgroup out of memory: Killed process 22637 (syz-executor.4) total-vm:46300kB, anon-rss:324kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xda45}, 0x0) 03:56:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7a, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 03:56:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x300, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2665.843994][T22674] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2665.852187][T22676] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2665.860634][T22678] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2665.915885][T22682] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2665.936083][T22683] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2665.944775][T22685] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 03:56:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x500, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2665.984149][T22687] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2666.009409][T22689] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2666.056439][T22691] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1200}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:56:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x600, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2666.546609][T22696] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2666.569936][T22699] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:56:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x700, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1a2c}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:56:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x900, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2667.389386][T22702] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2667.402954][T22702] CPU: 0 PID: 22702 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2667.413548][T22702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2667.423613][T22702] Call Trace: [ 2667.426964][T22702] [ 2667.429896][T22702] dump_stack_lvl+0xda/0x130 [ 2667.434501][T22702] dump_stack+0x15/0x20 [ 2667.438715][T22702] dump_header+0x82/0x2d0 [ 2667.443072][T22702] oom_kill_process+0x33a/0x4c0 [ 2667.447930][T22702] out_of_memory+0x9ca/0xbf0 [ 2667.452595][T22702] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2667.458735][T22702] mem_cgroup_out_of_memory+0x139/0x190 [ 2667.464307][T22702] try_charge_memcg+0x75c/0xd30 [ 2667.469175][T22702] obj_cgroup_charge_pages+0xab/0x130 [ 2667.474584][T22702] __memcg_kmem_charge_page+0x9c/0x170 [ 2667.480183][T22702] __alloc_pages+0x1bb/0x340 [ 2667.484779][T22702] alloc_pages_mpol+0xb1/0x1d0 [ 2667.489657][T22702] alloc_pages+0xe0/0x100 [ 2667.493989][T22702] __vmalloc_node_range+0x6d2/0xea0 [ 2667.499256][T22702] kvmalloc_node+0x121/0x160 [ 2667.503862][T22702] ? xt_alloc_table_info+0x3d/0x80 [ 2667.508989][T22702] xt_alloc_table_info+0x3d/0x80 [ 2667.513989][T22702] do_arpt_set_ctl+0x634/0x13b0 [ 2667.518934][T22702] ? __futex_wait+0x227/0x280 [ 2667.523629][T22702] ? __futex_wake_mark+0x70/0x70 [ 2667.528579][T22702] ? tcp_release_cb+0xfe/0x370 [ 2667.533378][T22702] ? _raw_spin_unlock_bh+0x36/0x40 [ 2667.538511][T22702] nf_setsockopt+0x18d/0x1b0 [ 2667.543302][T22702] ip_setsockopt+0xe6/0x100 [ 2667.547820][T22702] tcp_setsockopt+0x90/0xa0 [ 2667.552329][T22702] sock_common_setsockopt+0x61/0x70 [ 2667.557608][T22702] ? sock_common_recvmsg+0xe0/0xe0 [ 2667.562803][T22702] __sys_setsockopt+0x1d4/0x240 [ 2667.567737][T22702] __x64_sys_setsockopt+0x66/0x80 [ 2667.572790][T22702] do_syscall_64+0x44/0x110 [ 2667.577355][T22702] ? syscall_exit_to_user_mode+0x38/0x140 [ 2667.583113][T22702] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2667.589195][T22702] RIP: 0033:0x7f07d1466ba9 [ 2667.593664][T22702] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2667.613799][T22702] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2667.622291][T22702] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2667.630348][T22702] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 03:56:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2667.638320][T22702] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2667.646311][T22702] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2667.654557][T22702] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2667.662523][T22702] [ 2667.665695][T22702] memory: usage 307200kB, limit 307200kB, failcnt 204267 [ 2667.672817][T22702] memory+swap: usage 307704kB, limit 9007199254740988kB, failcnt 0 [ 2667.680831][T22702] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 2667.688452][T22702] Memory cgroup stats for /syz1: [ 2667.688675][T22702] cache 4096 [ 2667.696899][T22702] rss 32768 [ 2667.700069][T22702] shmem 0 [ 2667.703046][T22702] mapped_file 0 [ 2667.706545][T22702] dirty 0 [ 2667.709490][T22702] writeback 0 [ 2667.712834][T22702] workingset_refault_anon 91568 [ 2667.717806][T22702] workingset_refault_file 314 [ 2667.722521][T22702] swap 516096 [ 2667.725808][T22702] swapcached 4096 [ 2667.729486][T22702] pgpgin 2001422 [ 2667.733067][T22702] pgpgout 2001412 [ 2667.736783][T22702] pgfault 2101546 [ 2667.740427][T22702] pgmajfault 40402 [ 2667.744140][T22702] inactive_anon 36864 [ 2667.748188][T22702] active_anon 0 [ 2667.751656][T22702] inactive_file 0 [ 2667.755306][T22702] active_file 4096 [ 2667.759071][T22702] unevictable 0 [ 2667.762536][T22702] hierarchical_memory_limit 314572800 [ 2667.767960][T22702] hierarchical_memsw_limit 9223372036854771712 [ 2667.774121][T22702] total_cache 4096 [ 2667.777880][T22702] total_rss 32768 [ 2667.781599][T22702] total_shmem 0 [ 2667.785054][T22702] total_mapped_file 0 [ 2667.789060][T22702] total_dirty 0 [ 2667.792583][T22702] total_writeback 0 [ 2667.796424][T22702] total_workingset_refault_anon 91568 [ 2667.801884][T22702] total_workingset_refault_file 314 [ 2667.807107][T22702] total_swap 516096 [ 2667.810999][T22702] total_swapcached 4096 [ 2667.815184][T22702] total_pgpgin 2001422 [ 2667.819323][T22702] total_pgpgout 2001412 [ 2667.823548][T22702] total_pgfault 2101546 [ 2667.827760][T22702] total_pgmajfault 40402 [ 2667.831995][T22702] total_inactive_anon 36864 [ 2667.836520][T22702] total_active_anon 0 [ 2667.840499][T22702] total_inactive_file 0 [ 2667.844646][T22702] total_active_file 4096 [ 2667.848914][T22702] total_unevictable 0 [ 2667.853071][T22702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22700,uid=0 [ 2667.868558][T22702] Memory cgroup out of memory: Killed process 22700 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:56:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xa00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:56:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2c1a}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:56:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3141}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) [ 2668.173378][T22728] __nla_validate_parse: 3 callbacks suppressed [ 2668.173431][T22728] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) [ 2668.483074][T22717] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2668.494530][T22717] CPU: 1 PID: 22717 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2668.505027][T22717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2668.515223][T22717] Call Trace: [ 2668.518495][T22717] [ 2668.521428][T22717] dump_stack_lvl+0xda/0x130 [ 2668.526224][T22717] dump_stack+0x15/0x20 [ 2668.530471][T22717] dump_header+0x82/0x2d0 [ 2668.534917][T22717] oom_kill_process+0x33a/0x4c0 [ 2668.539777][T22717] out_of_memory+0x9ca/0xbf0 [ 2668.544407][T22717] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2668.550526][T22717] mem_cgroup_out_of_memory+0x139/0x190 [ 2668.556160][T22717] try_charge_memcg+0x75c/0xd30 [ 2668.561016][T22717] ? __swap_duplicate+0x29b/0x2b0 [ 2668.566045][T22717] ? radix_tree_lookup+0xf9/0x150 [ 2668.571119][T22717] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2668.577310][T22717] __read_swap_cache_async+0x2f6/0x550 [ 2668.582790][T22717] swap_cluster_readahead+0x27c/0x4c0 [ 2668.588166][T22717] swapin_readahead+0xe9/0x7f0 [ 2668.592964][T22717] ? __filemap_get_folio+0x41a/0x5a0 [ 2668.598275][T22717] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2668.604191][T22717] ? swap_cache_get_folio+0x6e/0x200 [ 2668.609537][T22717] do_swap_page+0x4a0/0x1670 [ 2668.614144][T22717] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2668.619441][T22717] ? __rcu_read_lock+0x35/0x50 [ 2668.624246][T22717] ? pte_offset_map_nolock+0x124/0x1d0 [ 2668.631393][T22717] handle_mm_fault+0xa36/0x2dd0 [ 2668.636535][T22717] exc_page_fault+0x3ff/0x6c0 [ 2668.641308][T22717] asm_exc_page_fault+0x26/0x30 [ 2668.646228][T22717] RIP: 0033:0x7f50c0f61bc4 [ 2668.650641][T22717] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2668.670896][T22717] RSP: 002b:00007ffd61c03c10 EFLAGS: 00010202 [ 2668.677080][T22717] RAX: 0000000000000000 RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2668.685139][T22717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557356788 [ 2668.693531][T22717] RBP: 00007f50c10c8980 R08: 0000000000000000 R09: 00007ffd61de10b0 [ 2668.701508][T22717] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028b7f4 [ 2668.709488][T22717] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000028b4b3 [ 2668.717791][T22717] [ 2668.720907][T22717] memory: usage 307200kB, limit 307200kB, failcnt 101795 [ 2668.728046][T22717] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 2668.735923][T22717] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2668.743299][T22717] Memory cgroup stats for /syz3: [ 2668.745575][T22717] cache 16384 [ 2668.753958][T22717] rss 8192 [ 2668.757044][T22717] shmem 0 [ 2668.759974][T22717] mapped_file 0 [ 2668.763421][T22717] dirty 0 [ 2668.766357][T22717] writeback 16384 [ 2668.770119][T22717] workingset_refault_anon 75973 [ 2668.774971][T22717] workingset_refault_file 320 [ 2668.779717][T22717] swap 1888256 [ 2668.783091][T22717] swapcached 16384 [ 2668.786885][T22717] pgpgin 379971 [ 2668.790348][T22717] pgpgout 379963 [ 2668.793880][T22717] pgfault 568693 [ 2668.797453][T22717] pgmajfault 40121 [ 2668.801190][T22717] inactive_anon 0 [ 2668.804815][T22717] active_anon 0 [ 2668.808308][T22717] inactive_file 12288 [ 2668.812290][T22717] active_file 4096 [ 2668.816006][T22717] unevictable 0 [ 2668.819621][T22717] hierarchical_memory_limit 314572800 [ 2668.825070][T22717] hierarchical_memsw_limit 9223372036854771712 [ 2668.831238][T22717] total_cache 16384 [ 2668.835087][T22717] total_rss 8192 [ 2668.838725][T22717] total_shmem 0 [ 2668.842274][T22717] total_mapped_file 0 [ 2668.846249][T22717] total_dirty 0 [ 2668.849743][T22717] total_writeback 16384 [ 2668.853891][T22717] total_workingset_refault_anon 75973 [ 2668.859328][T22717] total_workingset_refault_file 320 [ 2668.864626][T22717] total_swap 1888256 [ 2668.868557][T22717] total_swapcached 16384 [ 2668.872790][T22717] total_pgpgin 379971 [ 2668.876874][T22717] total_pgpgout 379963 [ 2668.880928][T22717] total_pgfault 568693 [ 2668.885014][T22717] total_pgmajfault 40121 [ 2668.889348][T22717] total_inactive_anon 0 [ 2668.893574][T22717] total_active_anon 0 [ 2668.897591][T22717] total_inactive_file 12288 [ 2668.902105][T22717] total_active_file 4096 [ 2668.906392][T22717] total_unevictable 0 [ 2668.910358][T22717] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22717,uid=0 [ 2668.926148][T22717] Memory cgroup out of memory: Killed process 22717 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:56:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4131}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xb00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 03:56:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x136, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:56:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4788}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 03:56:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xc00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2669.278659][T22744] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xda450000}, 0x0) [ 2669.361037][T22761] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xeaffffff}, 0x0) 03:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xd00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4888}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2670.309179][T22771] validate_nla: 19 callbacks suppressed [ 2670.309191][T22771] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2670.323327][T22769] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2670.346580][T22772] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xe00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:56:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x236, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x1100, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2670.446707][T22777] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2670.464608][T22780] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:56:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) 03:56:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2670.497086][T22784] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2670.525380][T22789] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2670.536476][T22788] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2670.546888][T22791] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2671.370645][T22781] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2671.384219][T22781] CPU: 0 PID: 22781 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2671.394714][T22781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2671.404831][T22781] Call Trace: [ 2671.408104][T22781] [ 2671.411035][T22781] dump_stack_lvl+0xda/0x130 [ 2671.415638][T22781] dump_stack+0x15/0x20 [ 2671.419842][T22781] dump_header+0x82/0x2d0 [ 2671.424179][T22781] oom_kill_process+0x33a/0x4c0 [ 2671.429108][T22781] out_of_memory+0x9ca/0xbf0 [ 2671.433759][T22781] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2671.439884][T22781] mem_cgroup_out_of_memory+0x139/0x190 [ 2671.445433][T22781] try_charge_memcg+0x75c/0xd30 [ 2671.450343][T22781] obj_cgroup_charge_pages+0xab/0x130 [ 2671.455709][T22781] __memcg_kmem_charge_page+0x9c/0x170 [ 2671.461186][T22781] __alloc_pages+0x1bb/0x340 [ 2671.465768][T22781] alloc_pages_mpol+0xb1/0x1d0 [ 2671.470569][T22781] alloc_pages+0xe0/0x100 [ 2671.474912][T22781] __vmalloc_node_range+0x6d2/0xea0 [ 2671.480144][T22781] kvmalloc_node+0x121/0x160 [ 2671.484796][T22781] ? xt_alloc_table_info+0x3d/0x80 [ 2671.489904][T22781] xt_alloc_table_info+0x3d/0x80 [ 2671.494834][T22781] do_arpt_set_ctl+0x634/0x13b0 [ 2671.499745][T22781] ? __futex_wait+0x227/0x280 [ 2671.504494][T22781] ? __futex_wake_mark+0x70/0x70 [ 2671.509523][T22781] ? tcp_release_cb+0xfe/0x370 [ 2671.514287][T22781] ? _raw_spin_unlock_bh+0x36/0x40 [ 2671.519429][T22781] nf_setsockopt+0x18d/0x1b0 [ 2671.524016][T22781] ip_setsockopt+0xe6/0x100 [ 2671.528533][T22781] tcp_setsockopt+0x90/0xa0 [ 2671.533039][T22781] sock_common_setsockopt+0x61/0x70 [ 2671.538280][T22781] ? sock_common_recvmsg+0xe0/0xe0 [ 2671.543390][T22781] __sys_setsockopt+0x1d4/0x240 [ 2671.548242][T22781] __x64_sys_setsockopt+0x66/0x80 [ 2671.553255][T22781] do_syscall_64+0x44/0x110 [ 2671.557756][T22781] ? syscall_exit_to_user_mode+0x38/0x140 [ 2671.563467][T22781] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2671.569354][T22781] RIP: 0033:0x7ffbf0714ba9 [ 2671.573759][T22781] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2671.593487][T22781] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2671.601889][T22781] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2671.609850][T22781] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2671.617816][T22781] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2671.625774][T22781] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2671.633735][T22781] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2671.641699][T22781] [ 2671.644842][T22781] memory: usage 307200kB, limit 307200kB, failcnt 55702 [ 2671.651892][T22781] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2671.659798][T22781] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2671.667094][T22781] Memory cgroup stats for /syz4: [ 2671.671174][T22781] cache 12288 [ 2671.679464][T22781] rss 0 [ 2671.682225][T22781] shmem 0 [ 2671.685158][T22781] mapped_file 0 [ 2671.688676][T22781] dirty 0 [ 2671.691598][T22781] writeback 4096 [ 2671.695133][T22781] workingset_refault_anon 66102 [ 2671.700053][T22781] workingset_refault_file 309 [ 2671.704716][T22781] swap 4632576 [ 2671.708106][T22781] swapcached 8192 [ 2671.711721][T22781] pgpgin 893555 [ 2671.715170][T22781] pgpgout 893550 [ 2671.718760][T22781] pgfault 975703 [ 2671.722344][T22781] pgmajfault 34565 [ 2671.726055][T22781] inactive_anon 8192 [ 2671.730093][T22781] active_anon 0 [ 2671.733577][T22781] inactive_file 0 [ 2671.737233][T22781] active_file 0 [ 2671.740687][T22781] unevictable 0 [ 2671.744200][T22781] hierarchical_memory_limit 314572800 [ 2671.749659][T22781] hierarchical_memsw_limit 9223372036854771712 [ 2671.755876][T22781] total_cache 12288 [ 2671.759688][T22781] total_rss 0 [ 2671.762962][T22781] total_shmem 0 [ 2671.766458][T22781] total_mapped_file 0 03:56:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x1200, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:56:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2671.770436][T22781] total_dirty 0 [ 2671.773885][T22781] total_writeback 4096 [ 2671.777973][T22781] total_workingset_refault_anon 66102 [ 2671.783357][T22781] total_workingset_refault_file 309 [ 2671.788619][T22781] total_swap 4632576 [ 2671.792541][T22781] total_swapcached 8192 [ 2671.796699][T22781] total_pgpgin 893555 [ 2671.800704][T22781] total_pgpgout 893550 [ 2671.804864][T22781] total_pgfault 975703 [ 2671.808992][T22781] total_pgmajfault 34565 [ 2671.813263][T22781] total_inactive_anon 8192 [ 2671.817732][T22781] total_active_anon 0 03:56:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffffea}, 0x0) [ 2671.820177][T22794] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2671.821731][T22781] total_inactive_file 0 [ 2671.835169][T22781] total_active_file 0 [ 2671.835326][T22796] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2671.839221][T22781] total_unevictable 0 [ 2671.839230][T22781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22779,uid=0 03:56:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x2000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x627d}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2671.866617][T22781] Memory cgroup out of memory: Killed process 22779 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2671.884648][T22797] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2671.894749][T22801] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2671.916539][T22799] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2671.924707][T22805] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x2500, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:56:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2672.266587][T22814] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2672.737606][T22803] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2672.751296][T22803] CPU: 0 PID: 22803 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2672.761702][T22803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2672.771775][T22803] Call Trace: [ 2672.775040][T22803] [ 2672.777957][T22803] dump_stack_lvl+0xda/0x130 [ 2672.782548][T22803] dump_stack+0x15/0x20 [ 2672.786812][T22803] dump_header+0x82/0x2d0 [ 2672.791141][T22803] oom_kill_process+0x33a/0x4c0 [ 2672.795984][T22803] out_of_memory+0x9ca/0xbf0 [ 2672.800569][T22803] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2672.806708][T22803] mem_cgroup_out_of_memory+0x139/0x190 [ 2672.812262][T22803] try_charge_memcg+0x75c/0xd30 [ 2672.817189][T22803] obj_cgroup_charge_pages+0xab/0x130 [ 2672.822600][T22803] __memcg_kmem_charge_page+0x9c/0x170 [ 2672.828050][T22803] __alloc_pages+0x1bb/0x340 [ 2672.832712][T22803] alloc_pages_mpol+0xb1/0x1d0 [ 2672.837501][T22803] alloc_pages+0xe0/0x100 [ 2672.841821][T22803] __vmalloc_node_range+0x6d2/0xea0 [ 2672.847063][T22803] kvmalloc_node+0x121/0x160 [ 2672.851649][T22803] ? xt_alloc_table_info+0x3d/0x80 [ 2672.856770][T22803] xt_alloc_table_info+0x3d/0x80 [ 2672.861704][T22803] do_arpt_set_ctl+0x634/0x13b0 [ 2672.866645][T22803] ? __futex_wait+0x227/0x280 [ 2672.871322][T22803] ? __futex_wake_mark+0x70/0x70 [ 2672.876354][T22803] ? tcp_release_cb+0xfe/0x370 [ 2672.881112][T22803] ? _raw_spin_unlock_bh+0x36/0x40 [ 2672.886218][T22803] nf_setsockopt+0x18d/0x1b0 [ 2672.890804][T22803] ip_setsockopt+0xe6/0x100 [ 2672.895334][T22803] tcp_setsockopt+0x90/0xa0 [ 2672.899873][T22803] sock_common_setsockopt+0x61/0x70 [ 2672.905068][T22803] ? sock_common_recvmsg+0xe0/0xe0 [ 2672.910177][T22803] __sys_setsockopt+0x1d4/0x240 [ 2672.915017][T22803] __x64_sys_setsockopt+0x66/0x80 [ 2672.920139][T22803] do_syscall_64+0x44/0x110 [ 2672.924640][T22803] ? syscall_exit_to_user_mode+0x38/0x140 [ 2672.930433][T22803] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2672.936320][T22803] RIP: 0033:0x7f50c0fa7ba9 [ 2672.940721][T22803] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2672.960396][T22803] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2672.968795][T22803] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2672.976825][T22803] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2672.984823][T22803] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2672.992782][T22803] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2673.000787][T22803] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2673.008811][T22803] [ 2673.012026][T22803] memory: usage 307200kB, limit 307200kB, failcnt 102376 [ 2673.019142][T22803] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2673.027062][T22803] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2673.034411][T22803] Memory cgroup stats for /syz3: [ 2673.093186][T22803] cache 16384 [ 2673.101530][T22803] rss 0 [ 2673.104296][T22803] shmem 0 [ 2673.107265][T22803] mapped_file 0 [ 2673.110716][T22803] dirty 0 [ 2673.113649][T22803] writeback 4096 [ 2673.117232][T22803] workingset_refault_anon 76087 [ 2673.122069][T22803] workingset_refault_file 320 [ 2673.126815][T22803] swap 1896448 [ 2673.130255][T22803] swapcached 8192 [ 2673.133879][T22803] pgpgin 380154 [ 2673.137369][T22803] pgpgout 380148 [ 2673.140913][T22803] pgfault 569252 [ 2673.144529][T22803] pgmajfault 40175 [ 2673.148253][T22803] inactive_anon 0 [ 2673.151874][T22803] active_anon 0 [ 2673.155335][T22803] inactive_file 12288 [ 2673.159316][T22803] active_file 4096 [ 2673.163083][T22803] unevictable 0 [ 2673.166611][T22803] hierarchical_memory_limit 314572800 [ 2673.172182][T22803] hierarchical_memsw_limit 9223372036854771712 [ 2673.178364][T22803] total_cache 16384 [ 2673.182159][T22803] total_rss 0 [ 2673.185432][T22803] total_shmem 0 [ 2673.188910][T22803] total_mapped_file 0 [ 2673.192913][T22803] total_dirty 0 [ 2673.196388][T22803] total_writeback 4096 [ 2673.200450][T22803] total_workingset_refault_anon 76087 [ 2673.205815][T22803] total_workingset_refault_file 320 [ 2673.211009][T22803] total_swap 1896448 [ 2673.214983][T22803] total_swapcached 8192 [ 2673.219143][T22803] total_pgpgin 380154 [ 2673.223171][T22803] total_pgpgout 380148 [ 2673.227277][T22803] total_pgfault 569252 [ 2673.231464][T22803] total_pgmajfault 40175 [ 2673.235774][T22803] total_inactive_anon 0 [ 2673.240030][T22803] total_active_anon 0 [ 2673.244003][T22803] total_inactive_file 12288 [ 2673.248613][T22803] total_active_file 4096 [ 2673.252918][T22803] total_unevictable 0 [ 2673.257009][T22803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22802,uid=0 [ 2673.272352][T22803] Memory cgroup out of memory: Killed process 22802 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2673.290842][T22815] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2673.302258][T22815] CPU: 0 PID: 22815 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2673.312679][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2673.322878][T22815] Call Trace: [ 2673.326157][T22815] [ 2673.329077][T22815] dump_stack_lvl+0xda/0x130 [ 2673.333759][T22815] dump_stack+0x15/0x20 [ 2673.338001][T22815] dump_header+0x82/0x2d0 [ 2673.342324][T22815] oom_kill_process+0x33a/0x4c0 [ 2673.347303][T22815] out_of_memory+0x9ca/0xbf0 [ 2673.351886][T22815] mem_cgroup_out_of_memory+0x139/0x190 [ 2673.357493][T22815] try_charge_memcg+0x75c/0xd30 [ 2673.362370][T22815] ? __swap_duplicate+0x29b/0x2b0 [ 2673.367404][T22815] ? radix_tree_lookup+0xf9/0x150 [ 2673.372440][T22815] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2673.378568][T22815] __read_swap_cache_async+0x2f6/0x550 [ 2673.384087][T22815] swap_cluster_readahead+0x27c/0x4c0 [ 2673.389451][T22815] swapin_readahead+0xe9/0x7f0 [ 2673.394214][T22815] ? __filemap_get_folio+0x41a/0x5a0 [ 2673.399494][T22815] ? __perf_event_task_sched_in+0x769/0x790 [ 2673.405386][T22815] ? swap_cache_get_folio+0x6e/0x200 [ 2673.410673][T22815] do_swap_page+0x4a0/0x1670 [ 2673.415302][T22815] ? __rcu_read_lock+0x35/0x50 [ 2673.420055][T22815] ? pte_offset_map_nolock+0x124/0x1d0 [ 2673.425577][T22815] handle_mm_fault+0xa36/0x2dd0 [ 2673.430480][T22815] ? mt_find+0x1d9/0x310 [ 2673.434761][T22815] exc_page_fault+0x2f7/0x6c0 [ 2673.439436][T22815] asm_exc_page_fault+0x26/0x30 [ 2673.444348][T22815] RIP: 0010:__get_user_8+0x11/0x20 [ 2673.449450][T22815] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2673.469232][T22815] RSP: 0018:ffffc90000e57e38 EFLAGS: 00050202 [ 2673.475382][T22815] RAX: 000055555710bda8 RBX: ffffc90000e57e40 RCX: ffffffff81443e13 [ 2673.483349][T22815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888152669a10 [ 2673.491324][T22815] RBP: ffffc90000e57ef8 R08: 0001888152669a17 R09: 0000000000000000 [ 2673.499308][T22815] R10: 0001ffffffffffff R11: 0001c90000e57ec0 R12: ffff888152669040 [ 2673.507286][T22815] R13: ffff888152669a10 R14: ffffc90000e57f58 R15: ffffc90000e57fd8 [ 2673.515321][T22815] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2673.521216][T22815] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2673.526933][T22815] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2673.532814][T22815] exit_to_user_mode_loop+0xcc/0xe0 [ 2673.538001][T22815] exit_to_user_mode_prepare+0x6c/0xb0 [ 2673.543533][T22815] irqentry_exit_to_user_mode+0x9/0x20 [ 2673.548984][T22815] irqentry_exit+0x12/0x40 [ 2673.553450][T22815] asm_exc_page_fault+0x26/0x30 [ 2673.558291][T22815] RIP: 0033:0x7ffbf06ced4b [ 2673.562760][T22815] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2673.582377][T22815] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010202 [ 2673.588427][T22815] RAX: 0000000000000001 RBX: 00007ffbf0833f80 RCX: 000000000028c968 [ 2673.596386][T22815] RDX: 00000000000000e4 RSI: 00007ffc3358ca30 RDI: 00007ffbf0833f80 [ 2673.604353][T22815] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2673.612402][T22815] R10: 00007ffc335ae080 R11: 000000000007ecca R12: 000000000028c9ec [ 2673.620371][T22815] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000028c6ab [ 2673.628331][T22815] [ 2673.631521][T22815] memory: usage 307200kB, limit 307200kB, failcnt 55861 [ 2673.638529][T22815] memory+swap: usage 311800kB, limit 9007199254740988kB, failcnt 0 [ 2673.646446][T22815] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2673.653724][T22815] Memory cgroup stats for /syz4: [ 2673.655190][T22815] cache 12288 [ 2673.663436][T22815] rss 0 [ 2673.666184][T22815] shmem 0 [ 2673.669129][T22815] mapped_file 0 [ 2673.672578][T22815] dirty 0 [ 2673.675585][T22815] writeback 0 [ 2673.678965][T22815] workingset_refault_anon 66124 [ 2673.684087][T22815] workingset_refault_file 309 [ 2673.688795][T22815] swap 4710400 [ 2673.692236][T22815] swapcached 0 [ 2673.695594][T22815] pgpgin 893599 [ 2673.699078][T22815] pgpgout 893596 [ 2673.702713][T22815] pgfault 975845 [ 2673.706299][T22815] pgmajfault 34575 [ 2673.710008][T22815] inactive_anon 0 [ 2673.713630][T22815] active_anon 0 [ 2673.717096][T22815] inactive_file 12288 [ 2673.721159][T22815] active_file 0 [ 2673.724608][T22815] unevictable 0 [ 2673.728093][T22815] hierarchical_memory_limit 314572800 [ 2673.733474][T22815] hierarchical_memsw_limit 9223372036854771712 [ 2673.739679][T22815] total_cache 12288 [ 2673.743515][T22815] total_rss 0 [ 2673.746805][T22815] total_shmem 0 [ 2673.750243][T22815] total_mapped_file 0 [ 2673.754249][T22815] total_dirty 0 [ 2673.757742][T22815] total_writeback 0 [ 2673.761535][T22815] total_workingset_refault_anon 66124 [ 2673.766919][T22815] total_workingset_refault_file 309 [ 2673.772347][T22815] total_swap 4710400 [ 2673.776224][T22815] total_swapcached 0 [ 2673.780129][T22815] total_pgpgin 893599 [ 2673.784114][T22815] total_pgpgout 893596 [ 2673.788215][T22815] total_pgfault 975845 [ 2673.792321][T22815] total_pgmajfault 34575 [ 2673.796593][T22815] total_inactive_anon 0 [ 2673.800728][T22815] total_active_anon 0 [ 2673.804680][T22815] total_inactive_file 12288 [ 2673.809193][T22815] total_active_file 0 [ 2673.813161][T22815] total_unevictable 0 [ 2673.817137][T22815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22815,uid=0 [ 2673.832415][T22815] Memory cgroup out of memory: Killed process 22815 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2673.851145][T22807] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2673.862526][T22807] CPU: 0 PID: 22807 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2673.873202][T22807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2673.883314][T22807] Call Trace: [ 2673.886613][T22807] [ 2673.889543][T22807] dump_stack_lvl+0xda/0x130 [ 2673.894166][T22807] dump_stack+0x15/0x20 [ 2673.898376][T22807] dump_header+0x82/0x2d0 [ 2673.902725][T22807] oom_kill_process+0x33a/0x4c0 [ 2673.907567][T22807] out_of_memory+0x9ca/0xbf0 [ 2673.912150][T22807] mem_cgroup_out_of_memory+0x139/0x190 [ 2673.917762][T22807] try_charge_memcg+0x75c/0xd30 [ 2673.922656][T22807] ? __swap_duplicate+0x29b/0x2b0 [ 2673.927712][T22807] ? radix_tree_lookup+0xf9/0x150 [ 2673.932812][T22807] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2673.939007][T22807] __read_swap_cache_async+0x2f6/0x550 [ 2673.944530][T22807] swap_cluster_readahead+0x27c/0x4c0 [ 2673.949963][T22807] swapin_readahead+0xe9/0x7f0 [ 2673.954714][T22807] ? __filemap_get_folio+0x41a/0x5a0 [ 2673.959989][T22807] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2673.965612][T22807] ? swap_cache_get_folio+0x6e/0x200 [ 2673.970911][T22807] do_swap_page+0x4a0/0x1670 [ 2673.975557][T22807] ? __rcu_read_lock+0x35/0x50 [ 2673.980307][T22807] ? pte_offset_map_nolock+0x124/0x1d0 [ 2673.985759][T22807] handle_mm_fault+0xa36/0x2dd0 [ 2673.990599][T22807] ? mt_find+0x1d9/0x310 [ 2673.994825][T22807] exc_page_fault+0x2f7/0x6c0 [ 2673.999488][T22807] asm_exc_page_fault+0x26/0x30 [ 2674.004354][T22807] RIP: 0010:__get_user_8+0x11/0x20 [ 2674.009453][T22807] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2674.029043][T22807] RSP: 0018:ffffc90000f17e38 EFLAGS: 00050202 [ 2674.035092][T22807] RAX: 000055555595bda8 RBX: ffffc90000f17e40 RCX: ffffffff81443e13 [ 2674.043048][T22807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888153d76b50 [ 2674.051006][T22807] RBP: ffffc90000f17ef8 R08: 0001888153d76b57 R09: 0000000000000000 [ 2674.058968][T22807] R10: 0001ffffffffffff R11: 0001888153d76810 R12: ffff888153d76180 [ 2674.066927][T22807] R13: ffff888153d76b50 R14: ffffc90000f17f58 R15: ffffc90000f17fd8 [ 2674.074971][T22807] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2674.080922][T22807] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2674.086724][T22807] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2674.092625][T22807] exit_to_user_mode_loop+0xcc/0xe0 [ 2674.097812][T22807] exit_to_user_mode_prepare+0x6c/0xb0 [ 2674.103355][T22807] irqentry_exit_to_user_mode+0x9/0x20 [ 2674.108804][T22807] irqentry_exit+0x12/0x40 [ 2674.113205][T22807] asm_exc_page_fault+0x26/0x30 [ 2674.118065][T22807] RIP: 0033:0x7f07d1411226 [ 2674.122464][T22807] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 2674.142165][T22807] RSP: 002b:00007fffaf03b868 EFLAGS: 00010287 [ 2674.148281][T22807] RAX: 0000001b2ce21000 RBX: 00007f07d1586018 RCX: 0000001b2ce20000 [ 2674.156314][T22807] RDX: 0000001b2ce21004 RSI: 0000000080000000 RDI: 00000000815207d6 [ 2674.164271][T22807] RBP: 00000000815207d6 R08: 0000001b2d220000 R09: 00000000000007d6 [ 2674.172227][T22807] R10: 00000000815207da R11: 000000000007eca0 R12: 000000000000762d [ 2674.180183][T22807] R13: 0000000000000001 R14: 00007f07d157a000 R15: ffffffff815205d3 [ 2674.188140][T22807] ? swap_writepage+0x43/0x120 [ 2674.192926][T22807] [ 2674.196124][T22807] memory: usage 307200kB, limit 307200kB, failcnt 204514 [ 2674.203321][T22807] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2674.211320][T22807] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2674.218620][T22807] Memory cgroup stats for /syz1: [ 2674.227403][T22807] cache 4096 [ 2674.235590][T22807] rss 0 [ 2674.238383][T22807] shmem 0 [ 2674.241303][T22807] mapped_file 0 [ 2674.244828][T22807] dirty 0 [ 2674.247777][T22807] writeback 8192 [ 2674.251319][T22807] workingset_refault_anon 91730 [ 2674.256250][T22807] workingset_refault_file 314 [ 2674.261015][T22807] swap 544768 [ 2674.264291][T22807] swapcached 8192 [ 2674.267946][T22807] pgpgin 2001676 [ 2674.271482][T22807] pgpgout 2001673 [ 2674.275103][T22807] pgfault 2102169 [ 2674.278808][T22807] pgmajfault 40490 [ 2674.282512][T22807] inactive_anon 0 [ 2674.286190][T22807] active_anon 0 [ 2674.289810][T22807] inactive_file 0 [ 2674.293437][T22807] active_file 4096 [ 2674.297228][T22807] unevictable 0 [ 2674.300834][T22807] hierarchical_memory_limit 314572800 [ 2674.306187][T22807] hierarchical_memsw_limit 9223372036854771712 [ 2674.312375][T22807] total_cache 4096 [ 2674.316084][T22807] total_rss 0 [ 2674.319395][T22807] total_shmem 0 [ 2674.322847][T22807] total_mapped_file 0 [ 2674.326896][T22807] total_dirty 0 [ 2674.330344][T22807] total_writeback 8192 [ 2674.334417][T22807] total_workingset_refault_anon 91730 [ 2674.339816][T22807] total_workingset_refault_file 314 [ 2674.345181][T22807] total_swap 544768 [ 2674.349065][T22807] total_swapcached 8192 [ 2674.353212][T22807] total_pgpgin 2001676 [ 2674.357294][T22807] total_pgpgout 2001673 [ 2674.361474][T22807] total_pgfault 2102169 [ 2674.365619][T22807] total_pgmajfault 40490 [ 2674.369871][T22807] total_inactive_anon 0 [ 2674.374010][T22807] total_active_anon 0 [ 2674.378040][T22807] total_inactive_file 0 [ 2674.382196][T22807] total_active_file 4096 [ 2674.386462][T22807] total_unevictable 0 03:56:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 03:56:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x313b, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2674.390526][T22807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22807,uid=0 [ 2674.405759][T22807] Memory cgroup out of memory: Killed process 22807 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2674.499649][T22822] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x336, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x2) 03:56:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x3b31, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x3) 03:56:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2674.702813][T22830] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2675.240652][T22821] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2675.252158][T22821] CPU: 0 PID: 22821 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2675.262578][T22821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2675.272656][T22821] Call Trace: [ 2675.275932][T22821] [ 2675.278871][T22821] dump_stack_lvl+0xda/0x130 [ 2675.283573][T22821] dump_stack+0x15/0x20 [ 2675.287737][T22821] dump_header+0x82/0x2d0 [ 2675.292079][T22821] oom_kill_process+0x33a/0x4c0 [ 2675.297130][T22821] out_of_memory+0x9ca/0xbf0 [ 2675.301726][T22821] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2675.307898][T22821] mem_cgroup_out_of_memory+0x139/0x190 [ 2675.313466][T22821] try_charge_memcg+0x75c/0xd30 [ 2675.318336][T22821] ? __swap_duplicate+0x29b/0x2b0 [ 2675.323448][T22821] ? radix_tree_lookup+0xf9/0x150 [ 2675.328546][T22821] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2675.334620][T22821] __read_swap_cache_async+0x2f6/0x550 [ 2675.340187][T22821] swap_cluster_readahead+0x27c/0x4c0 [ 2675.345580][T22821] swapin_readahead+0xe9/0x7f0 [ 2675.350356][T22821] ? __filemap_get_folio+0x41a/0x5a0 [ 2675.355703][T22821] ? swap_cache_get_folio+0x6e/0x200 [ 2675.361003][T22821] do_swap_page+0x4a0/0x1670 [ 2675.365678][T22821] ? __rcu_read_lock+0x35/0x50 [ 2675.370510][T22821] ? pte_offset_map_nolock+0x124/0x1d0 [ 2675.375972][T22821] handle_mm_fault+0xa36/0x2dd0 [ 2675.380835][T22821] ? mt_find+0x1d9/0x310 [ 2675.385103][T22821] exc_page_fault+0x2f7/0x6c0 [ 2675.389780][T22821] asm_exc_page_fault+0x26/0x30 [ 2675.394648][T22821] RIP: 0010:__get_user_8+0x11/0x20 [ 2675.399828][T22821] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2675.419474][T22821] RSP: 0018:ffffc90000aa7e38 EFLAGS: 00050202 [ 2675.425704][T22821] RAX: 0000555557356da8 RBX: ffffc90000aa7e40 RCX: ffffffff81443e13 [ 2675.433677][T22821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881fca65b10 [ 2675.441650][T22821] RBP: ffffc90000aa7ef8 R08: 00018881fca65b17 R09: 0000000000000000 [ 2675.449666][T22821] R10: 0001ffffffffffff R11: 00018881fca657d0 R12: ffff8881fca65140 [ 2675.457637][T22821] R13: ffff8881fca65b10 R14: ffffc90000aa7f58 R15: ffffc90000aa7fd8 [ 2675.465616][T22821] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2675.471652][T22821] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2675.477430][T22821] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2675.483425][T22821] exit_to_user_mode_loop+0xcc/0xe0 [ 2675.488752][T22821] exit_to_user_mode_prepare+0x6c/0xb0 [ 2675.494237][T22821] irqentry_exit_to_user_mode+0x9/0x20 [ 2675.499717][T22821] irqentry_exit+0x12/0x40 [ 2675.504210][T22821] asm_exc_page_fault+0x26/0x30 [ 2675.509072][T22821] RIP: 0033:0x7f50c0fd2f63 [ 2675.513582][T22821] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 8e 4f 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 2675.533400][T22821] RSP: 002b:00007ffd61c03bc8 EFLAGS: 00010293 [ 2675.539470][T22821] RAX: 00000000fffffffa RBX: 00007f50c10c6f80 RCX: 0000000000000000 [ 2675.547438][T22821] RDX: 00007ffd61c03be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2675.555410][T22821] RBP: 00007f50c10c8980 R08: 0000000000000010 R09: 00007ffd61de10b0 [ 2675.563428][T22821] R10: 0000000000000000 R11: 000000000007ede8 R12: 000000000028d286 [ 2675.571386][T22821] R13: ffffffffffffffff R14: 00007f50c0b2b000 R15: 000000000028cf45 [ 2675.579348][T22821] [ 2675.582547][T22821] memory: usage 307192kB, limit 307200kB, failcnt 102652 [ 2675.589599][T22821] memory+swap: usage 309040kB, limit 9007199254740988kB, failcnt 0 [ 2675.597496][T22821] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 2675.604774][T22821] Memory cgroup stats for /syz3: [ 2675.647044][T22821] cache 16384 [ 2675.655279][T22821] rss 8192 [ 2675.658340][T22821] shmem 0 [ 2675.661351][T22821] mapped_file 0 [ 2675.664799][T22821] dirty 0 [ 2675.667754][T22821] writeback 4096 [ 2675.671285][T22821] workingset_refault_anon 76153 [ 2675.676116][T22821] workingset_refault_file 320 [ 2675.680848][T22821] swap 1892352 [ 2675.684265][T22821] swapcached 4096 [ 2675.688004][T22821] pgpgin 380243 [ 2675.691449][T22821] pgpgout 380236 [ 2675.694985][T22821] pgfault 569431 [ 2675.698548][T22821] pgmajfault 40202 [ 2675.702250][T22821] inactive_anon 0 [ 2675.705864][T22821] active_anon 0 [ 2675.709343][T22821] inactive_file 12288 [ 2675.713312][T22821] active_file 4096 [ 2675.717105][T22821] unevictable 0 [ 2675.720555][T22821] hierarchical_memory_limit 314572800 [ 2675.726050][T22821] hierarchical_memsw_limit 9223372036854771712 [ 2675.732212][T22821] total_cache 16384 [ 2675.736004][T22821] total_rss 8192 [ 2675.739578][T22821] total_shmem 0 [ 2675.743017][T22821] total_mapped_file 0 [ 2675.747008][T22821] total_dirty 0 [ 2675.750454][T22821] total_writeback 4096 [ 2675.754570][T22821] total_workingset_refault_anon 76153 [ 2675.760052][T22821] total_workingset_refault_file 320 [ 2675.765234][T22821] total_swap 1892352 [ 2675.769175][T22821] total_swapcached 4096 [ 2675.773314][T22821] total_pgpgin 380243 [ 2675.777339][T22821] total_pgpgout 380236 [ 2675.781394][T22821] total_pgfault 569431 [ 2675.785446][T22821] total_pgmajfault 40202 [ 2675.789707][T22821] total_inactive_anon 0 [ 2675.793855][T22821] total_active_anon 0 [ 2675.797853][T22821] total_inactive_file 12288 [ 2675.802336][T22821] total_active_file 4096 [ 2675.806590][T22821] total_unevictable 0 [ 2675.810579][T22821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22821,uid=0 [ 2675.825873][T22821] Memory cgroup out of memory: Killed process 22821 (syz-executor.3) total-vm:46432kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:56:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x4) 03:56:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x4363, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7d62}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x436, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x5) [ 2676.006980][T22852] validate_nla: 8 callbacks suppressed [ 2676.006994][T22852] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2676.022709][T22844] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2676.039054][T22846] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x6) 03:56:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x457e, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2676.103161][T22857] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2676.141060][T22860] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:56:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x4800, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8847}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2676.163895][T22862] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2676.217382][T22864] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2676.234414][T22866] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2676.809396][T22847] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2676.820753][T22847] CPU: 1 PID: 22847 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2676.831171][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2676.841231][T22847] Call Trace: [ 2676.844513][T22847] [ 2676.847441][T22847] dump_stack_lvl+0xda/0x130 [ 2676.852040][T22847] dump_stack+0x15/0x20 [ 2676.856352][T22847] dump_header+0x82/0x2d0 [ 2676.860701][T22847] oom_kill_process+0x33a/0x4c0 [ 2676.865662][T22847] out_of_memory+0x9ca/0xbf0 [ 2676.870268][T22847] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2676.876353][T22847] mem_cgroup_out_of_memory+0x139/0x190 [ 2676.881979][T22847] try_charge_memcg+0x75c/0xd30 [ 2676.886871][T22847] ? __swap_duplicate+0x29b/0x2b0 [ 2676.891898][T22847] ? radix_tree_lookup+0xf9/0x150 [ 2676.896946][T22847] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2676.903054][T22847] __read_swap_cache_async+0x2f6/0x550 [ 2676.908580][T22847] swap_cluster_readahead+0x27c/0x4c0 [ 2676.914030][T22847] swapin_readahead+0xe9/0x7f0 [ 2676.918794][T22847] ? __filemap_get_folio+0x41a/0x5a0 [ 2676.924176][T22847] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2676.929815][T22847] ? swap_cache_get_folio+0x6e/0x200 [ 2676.935117][T22847] do_swap_page+0x4a0/0x1670 [ 2676.939702][T22847] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2676.945020][T22847] ? __rcu_read_lock+0x35/0x50 [ 2676.949790][T22847] ? pte_offset_map_nolock+0x124/0x1d0 [ 2676.955251][T22847] handle_mm_fault+0xa36/0x2dd0 [ 2676.960191][T22847] exc_page_fault+0x3ff/0x6c0 [ 2676.964895][T22847] asm_exc_page_fault+0x26/0x30 [ 2676.969845][T22847] RIP: 0033:0x7ffbf06cebc4 [ 2676.974260][T22847] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2676.993889][T22847] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010206 [ 2677.000017][T22847] RAX: 0000000000000000 RBX: 00007ffbf0833f80 RCX: 0000000000000000 [ 2677.007969][T22847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555710b788 [ 2677.016015][T22847] RBP: 00007ffbf0835980 R08: 0000000000000000 R09: 00007ffc335ae0b0 [ 2677.024004][T22847] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028d85a [ 2677.031954][T22847] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 000000000028d519 [ 2677.039916][T22847] [ 2677.043130][T22847] memory: usage 307200kB, limit 307200kB, failcnt 56060 [ 2677.050170][T22847] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2677.058151][T22847] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2677.065520][T22847] Memory cgroup stats for /syz4: [ 2677.065712][T22847] cache 12288 [ 2677.074120][T22847] rss 8192 [ 2677.077250][T22847] shmem 0 [ 2677.080185][T22847] mapped_file 0 [ 2677.083691][T22847] dirty 0 [ 2677.086701][T22847] writeback 4096 [ 2677.090288][T22847] workingset_refault_anon 66206 [ 2677.095142][T22847] workingset_refault_file 309 [ 2677.099879][T22847] swap 4632576 [ 2677.103236][T22847] swapcached 8192 [ 2677.106967][T22847] pgpgin 893726 [ 2677.110416][T22847] pgpgout 893721 [ 2677.114001][T22847] pgfault 976184 [ 2677.117551][T22847] pgmajfault 34616 [ 2677.121259][T22847] inactive_anon 0 [ 2677.124882][T22847] active_anon 0 [ 2677.128345][T22847] inactive_file 12288 [ 2677.132396][T22847] active_file 0 [ 2677.135831][T22847] unevictable 0 [ 2677.139401][T22847] hierarchical_memory_limit 314572800 [ 2677.144768][T22847] hierarchical_memsw_limit 9223372036854771712 [ 2677.150950][T22847] total_cache 12288 [ 2677.154781][T22847] total_rss 8192 [ 2677.158433][T22847] total_shmem 0 [ 2677.161927][T22847] total_mapped_file 0 [ 2677.165937][T22847] total_dirty 0 [ 2677.169471][T22847] total_writeback 4096 [ 2677.173523][T22847] total_workingset_refault_anon 66206 [ 2677.178895][T22847] total_workingset_refault_file 309 [ 2677.184156][T22847] total_swap 4632576 [ 2677.188082][T22847] total_swapcached 8192 [ 2677.192224][T22847] total_pgpgin 893726 [ 2677.196180][T22847] total_pgpgout 893721 [ 2677.200268][T22847] total_pgfault 976184 [ 2677.204339][T22847] total_pgmajfault 34616 [ 2677.208575][T22847] total_inactive_anon 0 [ 2677.212715][T22847] total_active_anon 0 [ 2677.216749][T22847] total_inactive_file 12288 [ 2677.221243][T22847] total_active_file 0 [ 2677.225220][T22847] total_unevictable 0 [ 2677.229212][T22847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22847,uid=0 [ 2677.244522][T22847] Memory cgroup out of memory: Killed process 22847 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2677.261890][T22851] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2677.273361][T22851] CPU: 0 PID: 22851 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2677.283786][T22851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2677.293917][T22851] Call Trace: [ 2677.297274][T22851] [ 2677.300202][T22851] dump_stack_lvl+0xda/0x130 [ 2677.304884][T22851] dump_stack+0x15/0x20 [ 2677.309050][T22851] dump_header+0x82/0x2d0 [ 2677.313454][T22851] oom_kill_process+0x33a/0x4c0 [ 2677.318307][T22851] out_of_memory+0x9ca/0xbf0 [ 2677.322900][T22851] mem_cgroup_out_of_memory+0x139/0x190 [ 2677.328554][T22851] try_charge_memcg+0x75c/0xd30 [ 2677.333431][T22851] ? __swap_duplicate+0x29b/0x2b0 [ 2677.338525][T22851] ? radix_tree_lookup+0xf9/0x150 [ 2677.343555][T22851] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2677.349632][T22851] __read_swap_cache_async+0x2f6/0x550 [ 2677.355264][T22851] swap_cluster_readahead+0x27c/0x4c0 [ 2677.360750][T22851] swapin_readahead+0xe9/0x7f0 [ 2677.365521][T22851] ? __filemap_get_folio+0x41a/0x5a0 [ 2677.370917][T22851] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2677.376550][T22851] ? swap_cache_get_folio+0x6e/0x200 [ 2677.381912][T22851] do_swap_page+0x4a0/0x1670 [ 2677.386503][T22851] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2677.391889][T22851] ? __rcu_read_lock+0x35/0x50 [ 2677.396657][T22851] ? pte_offset_map_nolock+0x124/0x1d0 [ 2677.402132][T22851] handle_mm_fault+0xa36/0x2dd0 [ 2677.406982][T22851] exc_page_fault+0x3ff/0x6c0 [ 2677.411654][T22851] asm_exc_page_fault+0x26/0x30 [ 2677.416496][T22851] RIP: 0033:0x7f50c0f6387c [ 2677.420898][T22851] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 35 f8 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 2677.440519][T22851] RSP: 002b:00007ffd61c03b70 EFLAGS: 00010286 [ 2677.446690][T22851] RAX: 0000000000000000 RBX: 00007f50c10c7018 RCX: 0000000000000000 [ 2677.454725][T22851] RDX: ffffffff83b076b4 RSI: 00007f50c092b008 RDI: 00007f50c10c7018 [ 2677.462698][T22851] RBP: 0000000083b07000 R08: 0000001b2d420000 R09: 0000000000000000 [ 2677.470754][T22851] R10: 0000000000000001 R11: 000000000007eefa R12: 0000000000000000 [ 2677.478753][T22851] R13: 0000000000000001 R14: 00007f50c10bb000 R15: ffffffff83b076b4 [ 2677.486768][T22851] ? __x64_sys_setsockopt+0x14/0x80 [ 2677.491961][T22851] ? __x64_sys_setsockopt+0x14/0x80 [ 2677.497148][T22851] [ 2677.500304][T22851] memory: usage 307120kB, limit 307200kB, failcnt 102820 [ 2677.507428][T22851] memory+swap: usage 308972kB, limit 9007199254740988kB, failcnt 0 [ 2677.515317][T22851] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2677.522734][T22851] Memory cgroup stats for /syz3: [ 2677.524352][T22851] cache 16384 [ 2677.532626][T22851] rss 8192 [ 2677.535749][T22851] shmem 0 [ 2677.538723][T22851] mapped_file 0 [ 2677.542174][T22851] dirty 0 [ 2677.545113][T22851] writeback 0 [ 2677.548420][T22851] workingset_refault_anon 76199 [ 2677.553263][T22851] workingset_refault_file 320 [ 2677.557997][T22851] swap 1896448 [ 2677.561358][T22851] swapcached 0 [ 2677.564740][T22851] pgpgin 380312 [ 2677.568200][T22851] pgpgout 380306 [ 2677.571796][T22851] pgfault 569578 [ 2677.575397][T22851] pgmajfault 40226 [ 2677.579123][T22851] inactive_anon 8192 [ 2677.583004][T22851] active_anon 0 [ 2677.586475][T22851] inactive_file 12288 [ 2677.590470][T22851] active_file 4096 [ 2677.594270][T22851] unevictable 0 [ 2677.597966][T22851] hierarchical_memory_limit 314572800 [ 2677.603353][T22851] hierarchical_memsw_limit 9223372036854771712 [ 2677.609529][T22851] total_cache 16384 [ 2677.613333][T22851] total_rss 8192 [ 2677.616912][T22851] total_shmem 0 [ 2677.620362][T22851] total_mapped_file 0 [ 2677.624331][T22851] total_dirty 0 [ 2677.627806][T22851] total_writeback 0 [ 2677.631612][T22851] total_workingset_refault_anon 76199 [ 2677.637084][T22851] total_workingset_refault_file 320 [ 2677.642426][T22851] total_swap 1896448 [ 2677.646431][T22851] total_swapcached 0 [ 2677.650353][T22851] total_pgpgin 380312 [ 2677.654325][T22851] total_pgpgout 380306 [ 2677.658417][T22851] total_pgfault 569578 [ 2677.662474][T22851] total_pgmajfault 40226 [ 2677.666769][T22851] total_inactive_anon 8192 [ 2677.671224][T22851] total_active_anon 0 [ 2677.675242][T22851] total_inactive_file 12288 [ 2677.679783][T22851] total_active_file 4096 [ 2677.684094][T22851] total_unevictable 0 [ 2677.688097][T22851] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22851,uid=0 [ 2677.703440][T22851] Memory cgroup out of memory: Killed process 22851 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2677.726645][T22849] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2677.740193][T22849] CPU: 0 PID: 22849 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2677.750651][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2677.760713][T22849] Call Trace: [ 2677.764042][T22849] [ 2677.767012][T22849] dump_stack_lvl+0xda/0x130 [ 2677.771639][T22849] dump_stack+0x15/0x20 [ 2677.775921][T22849] dump_header+0x82/0x2d0 [ 2677.780321][T22849] oom_kill_process+0x33a/0x4c0 [ 2677.785230][T22849] out_of_memory+0x9ca/0xbf0 [ 2677.789952][T22849] mem_cgroup_out_of_memory+0x139/0x190 [ 2677.795543][T22849] try_charge_memcg+0x75c/0xd30 [ 2677.800394][T22849] obj_cgroup_charge_pages+0xab/0x130 [ 2677.805760][T22849] __memcg_kmem_charge_page+0x9c/0x170 [ 2677.811251][T22849] __alloc_pages+0x1bb/0x340 [ 2677.815832][T22849] alloc_pages_mpol+0xb1/0x1d0 [ 2677.820622][T22849] alloc_pages+0xe0/0x100 [ 2677.824991][T22849] __vmalloc_node_range+0x6d2/0xea0 [ 2677.830201][T22849] kvmalloc_node+0x121/0x160 [ 2677.834865][T22849] ? xt_alloc_table_info+0x3d/0x80 [ 2677.839968][T22849] xt_alloc_table_info+0x3d/0x80 [ 2677.844895][T22849] do_arpt_set_ctl+0x634/0x13b0 [ 2677.849781][T22849] ? __futex_wait+0x227/0x280 [ 2677.854452][T22849] ? __futex_wake_mark+0x70/0x70 [ 2677.859378][T22849] ? tcp_release_cb+0xfe/0x370 [ 2677.864135][T22849] ? _raw_spin_unlock_bh+0x36/0x40 [ 2677.869286][T22849] nf_setsockopt+0x18d/0x1b0 [ 2677.873926][T22849] ip_setsockopt+0xe6/0x100 [ 2677.878547][T22849] tcp_setsockopt+0x90/0xa0 [ 2677.883080][T22849] sock_common_setsockopt+0x61/0x70 [ 2677.888274][T22849] ? sock_common_recvmsg+0xe0/0xe0 [ 2677.893424][T22849] __sys_setsockopt+0x1d4/0x240 [ 2677.898273][T22849] __x64_sys_setsockopt+0x66/0x80 [ 2677.903334][T22849] do_syscall_64+0x44/0x110 [ 2677.907892][T22849] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2677.913825][T22849] RIP: 0033:0x7f07d1466ba9 [ 2677.918235][T22849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2677.938103][T22849] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2677.946506][T22849] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2677.954554][T22849] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2677.962533][T22849] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2677.970504][T22849] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2677.978473][T22849] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2677.986440][T22849] [ 2677.989561][T22849] memory: usage 307200kB, limit 307200kB, failcnt 204826 [ 2677.996694][T22849] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2678.004578][T22849] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2678.011913][T22849] Memory cgroup stats for /syz1: [ 2678.020472][T22849] cache 4096 [ 2678.028780][T22849] rss 8192 [ 2678.031853][T22849] shmem 0 [ 2678.034866][T22849] mapped_file 0 [ 2678.038361][T22849] dirty 0 [ 2678.041293][T22849] writeback 0 [ 2678.044627][T22849] workingset_refault_anon 91796 [ 2678.049526][T22849] workingset_refault_file 314 [ 2678.054228][T22849] swap 544768 [ 2678.057693][T22849] swapcached 8192 [ 2678.061321][T22849] pgpgin 2001788 [ 2678.064916][T22849] pgpgout 2001785 [ 2678.068556][T22849] pgfault 2102617 [ 2678.072254][T22849] pgmajfault 40526 [ 2678.076051][T22849] inactive_anon 8192 [ 2678.080058][T22849] active_anon 0 [ 2678.083535][T22849] inactive_file 4096 [ 2678.087452][T22849] active_file 0 [ 2678.090904][T22849] unevictable 0 [ 2678.094355][T22849] hierarchical_memory_limit 314572800 [ 2678.099826][T22849] hierarchical_memsw_limit 9223372036854771712 [ 2678.105977][T22849] total_cache 4096 [ 2678.109831][T22849] total_rss 8192 [ 2678.113380][T22849] total_shmem 0 [ 2678.116849][T22849] total_mapped_file 0 [ 2678.120824][T22849] total_dirty 0 [ 2678.124285][T22849] total_writeback 0 [ 2678.128109][T22849] total_workingset_refault_anon 91796 [ 2678.133475][T22849] total_workingset_refault_file 314 [ 2678.138844][T22849] total_swap 544768 [ 2678.142651][T22849] total_swapcached 8192 [ 2678.146854][T22849] total_pgpgin 2001788 [ 2678.150919][T22849] total_pgpgout 2001785 [ 2678.155164][T22849] total_pgfault 2102617 [ 2678.159341][T22849] total_pgmajfault 40526 [ 2678.163602][T22849] total_inactive_anon 8192 [ 2678.168036][T22849] total_active_anon 0 [ 2678.172018][T22849] total_inactive_file 4096 [ 2678.176452][T22849] total_active_file 0 [ 2678.180433][T22849] total_unevictable 0 [ 2678.184507][T22849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22845,uid=0 [ 2678.199891][T22849] Memory cgroup out of memory: Killed process 22845 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x7) 03:56:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x4c00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8848}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 2678.435010][T22872] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2678.443421][T22873] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x9) 03:56:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x34000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xb) 03:56:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6343, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2678.645951][T22881] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2678.654656][T22880] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2678.712628][T22889] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2678.722048][T22891] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xf) 03:56:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x679a, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) [ 2679.443542][T22896] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2679.458625][T22897] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2679.502216][T22883] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2679.513654][T22883] CPU: 1 PID: 22883 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2679.524073][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2679.534251][T22883] Call Trace: [ 2679.537604][T22883] [ 2679.540531][T22883] dump_stack_lvl+0xda/0x130 [ 2679.545186][T22883] dump_stack+0x15/0x20 [ 2679.549437][T22883] dump_header+0x82/0x2d0 [ 2679.553781][T22883] oom_kill_process+0x33a/0x4c0 [ 2679.558685][T22883] out_of_memory+0x9ca/0xbf0 [ 2679.563288][T22883] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2679.569403][T22883] mem_cgroup_out_of_memory+0x139/0x190 [ 2679.574976][T22883] try_charge_memcg+0x75c/0xd30 [ 2679.579908][T22883] ? __swap_duplicate+0x29b/0x2b0 [ 2679.584945][T22883] ? radix_tree_lookup+0xf9/0x150 [ 2679.590011][T22883] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2679.596104][T22883] __read_swap_cache_async+0x2f6/0x550 [ 2679.601609][T22883] swap_cluster_readahead+0x27c/0x4c0 [ 2679.607053][T22883] swapin_readahead+0xe9/0x7f0 [ 2679.611844][T22883] ? __filemap_get_folio+0x41a/0x5a0 [ 2679.617164][T22883] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2679.622911][T22883] ? swap_cache_get_folio+0x6e/0x200 [ 2679.628179][T22883] do_swap_page+0x4a0/0x1670 [ 2679.632764][T22883] ? __rcu_read_lock+0x35/0x50 [ 2679.637513][T22883] ? pte_offset_map_nolock+0x124/0x1d0 [ 2679.643057][T22883] handle_mm_fault+0xa36/0x2dd0 [ 2679.647890][T22883] ? mt_find+0x1d9/0x310 [ 2679.652115][T22883] exc_page_fault+0x2f7/0x6c0 [ 2679.656873][T22883] asm_exc_page_fault+0x26/0x30 [ 2679.661820][T22883] RIP: 0010:__get_user_8+0x11/0x20 [ 2679.667097][T22883] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2679.687675][T22883] RSP: 0018:ffffc90000abfdf8 EFLAGS: 00050202 [ 2679.693827][T22883] RAX: 000055555595bda8 RBX: ffffc90000abfe00 RCX: ffffffff81443e13 [ 2679.701792][T22883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888100dedb10 [ 2679.709827][T22883] RBP: ffffc90000abfec0 R08: 0001888100dedb17 R09: 0000000000000000 [ 2679.717798][T22883] R10: 0001ffffffffffff R11: 000000000000b6f4 R12: ffff888100ded140 [ 2679.725759][T22883] R13: ffff888100dedb10 R14: ffffc90000abff58 R15: ffffc90000abffd8 [ 2679.733779][T22883] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2679.739705][T22883] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2679.745576][T22883] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 2679.751543][T22883] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2679.757449][T22883] ? common_nsleep+0x68/0x80 [ 2679.762035][T22883] exit_to_user_mode_loop+0xcc/0xe0 [ 2679.767287][T22883] exit_to_user_mode_prepare+0x6c/0xb0 [ 2679.772753][T22883] syscall_exit_to_user_mode+0x26/0x140 [ 2679.778307][T22883] do_syscall_64+0x50/0x110 [ 2679.782893][T22883] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2679.788775][T22883] RIP: 0033:0x7f07d1491fb5 [ 2679.793170][T22883] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2679.812840][T22883] RSP: 002b:00007fffaf03b8a0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2679.821407][T22883] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 00007f07d1491fb5 [ 2679.829362][T22883] RDX: 00007fffaf03b8e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2679.837398][T22883] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2679.845368][T22883] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028e2c9 03:56:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x536, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x300) 03:56:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6800, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2679.853335][T22883] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000028df88 [ 2679.861292][T22883] [ 2679.864584][T22883] memory: usage 307200kB, limit 307200kB, failcnt 204962 [ 2679.871648][T22883] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2679.879705][T22883] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2679.887114][T22883] Memory cgroup stats for /syz1: [ 2679.887378][T22883] cache 4096 [ 2679.890830][T22903] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2679.892465][T22883] rss 8192 [ 2679.906786][T22883] shmem 0 [ 2679.909722][T22883] mapped_file 0 [ 2679.913289][T22883] dirty 0 [ 2679.916302][T22883] writeback 8192 [ 2679.919960][T22883] workingset_refault_anon 91827 [ 2679.924879][T22883] workingset_refault_file 314 [ 2679.929611][T22883] swap 544768 [ 2679.933013][T22883] swapcached 8192 [ 2679.936714][T22883] pgpgin 2001842 [ 2679.940278][T22883] pgpgout 2001839 [ 2679.943760][T22908] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2679.943944][T22883] pgfault 2102792 [ 2679.956876][T22883] pgmajfault 40540 [ 2679.960654][T22883] inactive_anon 0 [ 2679.964359][T22883] active_anon 0 [ 2679.967962][T22883] inactive_file 4096 [ 2679.971889][T22883] active_file 0 [ 2679.975418][T22883] unevictable 0 [ 2679.978892][T22883] hierarchical_memory_limit 314572800 [ 2679.984253][T22883] hierarchical_memsw_limit 9223372036854771712 [ 2679.990438][T22883] total_cache 4096 [ 2679.994150][T22883] total_rss 8192 [ 2679.997694][T22883] total_shmem 0 [ 2680.001148][T22883] total_mapped_file 0 [ 2680.005129][T22883] total_dirty 0 [ 2680.008619][T22883] total_writeback 8192 [ 2680.012729][T22883] total_workingset_refault_anon 91827 [ 2680.018136][T22883] total_workingset_refault_file 314 [ 2680.023329][T22883] total_swap 544768 [ 2680.027250][T22883] total_swapcached 8192 [ 2680.031536][T22883] total_pgpgin 2001842 [ 2680.035609][T22883] total_pgpgout 2001839 [ 2680.039881][T22883] total_pgfault 2102792 [ 2680.044043][T22883] total_pgmajfault 40540 [ 2680.048394][T22883] total_inactive_anon 0 [ 2680.052699][T22883] total_active_anon 0 [ 2680.056761][T22883] total_inactive_file 4096 [ 2680.061199][T22883] total_active_file 0 [ 2680.065173][T22883] total_unevictable 0 [ 2680.069199][T22883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22883,uid=0 [ 2680.084536][T22883] Memory cgroup out of memory: Killed process 22883 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:56:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6c00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x500) 03:56:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x600) 03:56:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7400, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2680.366734][T22914] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2680.424738][T22923] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x700) 03:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7a00, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7e45, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x900) [ 2681.050445][T22929] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2681.061982][T22932] validate_nla: 4 callbacks suppressed [ 2681.061993][T22932] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2681.075685][T22934] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2681.125271][T22938] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2681.136581][T22939] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2681.145499][T22940] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:56:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x22]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x9a67, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2681.397314][T22943] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2681.417854][T22944] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xb00) 03:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x34000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2681.595603][T22949] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2681.607700][T22951] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2681.621367][T22952] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x636, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xf00) 03:56:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x400300, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x1000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2682.074822][T22960] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2682.084246][T22958] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2682.098022][T22961] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2682.124864][T22965] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x2000) 03:56:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:56:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x2000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:56:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x45da) [ 2682.475386][T22969] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2682.483640][T22971] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:56:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xda45) 03:57:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x736, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x3000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x34000) 03:57:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x400300) 03:57:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x4000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2683.245784][T22972] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2683.257170][T22972] CPU: 0 PID: 22972 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2683.267637][T22972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2683.277721][T22972] Call Trace: [ 2683.281084][T22972] [ 2683.284099][T22972] dump_stack_lvl+0xda/0x130 [ 2683.288711][T22972] dump_stack+0x15/0x20 [ 2683.292879][T22972] dump_header+0x82/0x2d0 [ 2683.297231][T22972] oom_kill_process+0x33a/0x4c0 [ 2683.302086][T22972] out_of_memory+0x9ca/0xbf0 [ 2683.306687][T22972] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2683.312811][T22972] mem_cgroup_out_of_memory+0x139/0x190 [ 2683.318364][T22972] try_charge_memcg+0x75c/0xd30 [ 2683.323283][T22972] ? __swap_duplicate+0x29b/0x2b0 [ 2683.328344][T22972] ? radix_tree_lookup+0xf9/0x150 [ 2683.333412][T22972] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2683.339682][T22972] __read_swap_cache_async+0x2f6/0x550 [ 2683.345245][T22972] swap_cluster_readahead+0x27c/0x4c0 [ 2683.350700][T22972] swapin_readahead+0xe9/0x7f0 [ 2683.355478][T22972] ? __filemap_get_folio+0x41a/0x5a0 [ 2683.360820][T22972] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2683.366913][T22972] ? swap_cache_get_folio+0x6e/0x200 [ 2683.372280][T22972] do_swap_page+0x4a0/0x1670 [ 2683.376874][T22972] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2683.382224][T22972] ? __rcu_read_lock+0x35/0x50 [ 2683.387026][T22972] ? pte_offset_map_nolock+0x124/0x1d0 [ 2683.392496][T22972] handle_mm_fault+0xa36/0x2dd0 [ 2683.397363][T22972] exc_page_fault+0x3ff/0x6c0 [ 2683.402051][T22972] asm_exc_page_fault+0x26/0x30 [ 2683.406955][T22972] RIP: 0033:0x7f07d1420bc4 [ 2683.411390][T22972] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2683.431265][T22972] RSP: 002b:00007fffaf03b910 EFLAGS: 00010283 [ 2683.437366][T22972] RAX: 0000000000000000 RBX: 00007f07d1586050 RCX: 0000000000000000 [ 2683.445340][T22972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2683.453305][T22972] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2683.461268][T22972] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000028f1d5 [ 2683.469226][T22972] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 000000000028ee94 [ 2683.477206][T22972] [ 2683.480324][T22972] memory: usage 307200kB, limit 307200kB, failcnt 205199 [ 2683.487457][T22972] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 2683.495360][T22972] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 2683.502691][T22972] Memory cgroup stats for /syz1: [ 2683.502863][T22972] cache 4096 [ 2683.511023][T22972] rss 8192 [ 2683.514042][T22972] shmem 0 [ 2683.517099][T22972] mapped_file 0 [ 2683.520549][T22972] dirty 0 [ 2683.523479][T22972] writeback 0 [ 2683.526795][T22972] workingset_refault_anon 91942 [ 2683.531740][T22972] workingset_refault_file 314 [ 2683.536439][T22972] swap 540672 [ 2683.539748][T22972] swapcached 4096 [ 2683.543400][T22972] pgpgin 2002026 [ 2683.546984][T22972] pgpgout 2002022 [ 2683.550603][T22972] pgfault 2103368 [ 2683.554223][T22972] pgmajfault 40606 [ 2683.558037][T22972] inactive_anon 12288 [ 2683.562010][T22972] active_anon 0 [ 2683.565534][T22972] inactive_file 0 [ 2683.569196][T22972] active_file 4096 [ 2683.573024][T22972] unevictable 0 [ 2683.576488][T22972] hierarchical_memory_limit 314572800 [ 2683.581902][T22972] hierarchical_memsw_limit 9223372036854771712 [ 2683.588069][T22972] total_cache 4096 [ 2683.591780][T22972] total_rss 8192 [ 2683.595310][T22972] total_shmem 0 [ 2683.598789][T22972] total_mapped_file 0 [ 2683.602762][T22972] total_dirty 0 [ 2683.606202][T22972] total_writeback 0 [ 2683.610057][T22972] total_workingset_refault_anon 91942 [ 2683.615552][T22972] total_workingset_refault_file 314 [ 2683.620767][T22972] total_swap 540672 [ 2683.624567][T22972] total_swapcached 4096 [ 2683.628755][T22972] total_pgpgin 2002026 [ 2683.632810][T22972] total_pgpgout 2002022 [ 2683.636980][T22972] total_pgfault 2103368 [ 2683.641127][T22972] total_pgmajfault 40606 [ 2683.645369][T22972] total_inactive_anon 12288 [ 2683.649899][T22972] total_active_anon 0 [ 2683.653870][T22972] total_inactive_file 0 [ 2683.658083][T22972] total_active_file 4096 [ 2683.662310][T22972] total_unevictable 0 [ 2683.666599][T22972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22972,uid=0 [ 2683.681906][T22972] Memory cgroup out of memory: Killed process 22972 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:57:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x1000000) 03:57:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x5000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x2000000) 03:57:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x3000000) 03:57:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3e]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x836, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x4000000) 03:57:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x8000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x5000000) [ 2684.932278][ T4582] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2684.943407][ T4582] CPU: 0 PID: 4582 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2684.953883][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2684.963939][ T4582] Call Trace: [ 2684.967212][ T4582] [ 2684.970223][ T4582] dump_stack_lvl+0xda/0x130 [ 2684.974830][ T4582] dump_stack+0x15/0x20 03:57:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x9000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2684.979014][ T4582] dump_header+0x82/0x2d0 [ 2684.983404][ T4582] oom_kill_process+0x33a/0x4c0 [ 2684.988349][ T4582] out_of_memory+0x9ca/0xbf0 [ 2684.992975][ T4582] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2684.999073][ T4582] mem_cgroup_out_of_memory+0x139/0x190 [ 2685.004674][ T4582] try_charge_memcg+0x75c/0xd30 [ 2685.009542][ T4582] ? __swap_duplicate+0x29b/0x2b0 [ 2685.014778][ T4582] ? radix_tree_lookup+0xf9/0x150 [ 2685.019918][ T4582] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2685.026073][ T4582] __read_swap_cache_async+0x2f6/0x550 [ 2685.031560][ T4582] swap_cluster_readahead+0x27c/0x4c0 [ 2685.037093][ T4582] swapin_readahead+0xe9/0x7f0 [ 2685.041931][ T4582] ? __filemap_get_folio+0x41a/0x5a0 [ 2685.047225][ T4582] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2685.052870][ T4582] ? swap_cache_get_folio+0x6e/0x200 [ 2685.058240][ T4582] do_swap_page+0x4a0/0x1670 [ 2685.062891][ T4582] ? __rcu_read_lock+0x35/0x50 [ 2685.067675][ T4582] ? pte_offset_map_nolock+0x124/0x1d0 [ 2685.073231][ T4582] handle_mm_fault+0xa36/0x2dd0 [ 2685.078124][ T4582] ? mt_find+0x1d9/0x310 [ 2685.082375][ T4582] exc_page_fault+0x2f7/0x6c0 [ 2685.087081][ T4582] asm_exc_page_fault+0x26/0x30 [ 2685.091983][ T4582] RIP: 0010:__get_user_8+0x11/0x20 [ 2685.097174][ T4582] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2685.116812][ T4582] RSP: 0018:ffffc900006cbdf8 EFLAGS: 00050202 [ 2685.122970][ T4582] RAX: 000055555710bda8 RBX: ffffc900006cbe00 RCX: ffffffff81443e13 [ 2685.130950][ T4582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88813ad91a10 [ 2685.137618][T23032] __nla_validate_parse: 6 callbacks suppressed [ 2685.137632][T23032] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2685.138972][ T4582] RBP: ffffc900006cbec0 R08: 000188813ad91a17 R09: 0000000000000000 [ 2685.138989][ T4582] R10: 0001ffffffffffff R11: 0000000000009c0f R12: ffff88813ad91040 [ 2685.139000][ T4582] R13: ffff88813ad91a10 R14: ffffc900006cbf58 R15: ffffc900006cbfd8 [ 2685.139013][ T4582] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2685.184252][ T4582] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2685.190057][ T4582] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 2685.196152][ T4582] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2685.202038][ T4582] ? common_nsleep+0x68/0x80 [ 2685.206617][ T4582] exit_to_user_mode_loop+0xcc/0xe0 [ 2685.211828][ T4582] exit_to_user_mode_prepare+0x6c/0xb0 [ 2685.217278][ T4582] syscall_exit_to_user_mode+0x26/0x140 [ 2685.222870][ T4582] do_syscall_64+0x50/0x110 [ 2685.227444][ T4582] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2685.233325][ T4582] RIP: 0033:0x7ffbf073ff73 [ 2685.237724][ T4582] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 8e 4f 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 2685.257423][ T4582] RSP: 002b:00007ffc3358cc38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 2685.265931][ T4582] RAX: 0000000000000000 RBX: 00000000000036e6 RCX: 00007ffbf073ff73 [ 2685.273917][ T4582] RDX: 00007ffc3358cc50 RSI: 0000000000000000 RDI: 0000000000000000 [ 2685.281914][ T4582] RBP: 00007ffc3358ccdc R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2685.289896][ T4582] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2685.297885][ T4582] R13: 000000000028f4df R14: 000000000028f4da R15: 0000000000000001 [ 2685.305878][ T4582] [ 2685.309119][ T4582] memory: usage 307200kB, limit 307200kB, failcnt 56545 [ 2685.316114][ T4582] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 2685.324317][ T4582] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2685.331734][ T4582] Memory cgroup stats for /syz4: [ 2685.335548][ T4582] cache 12288 [ 2685.343807][ T4582] rss 0 [ 2685.346598][ T4582] shmem 0 [ 2685.349521][ T4582] mapped_file 0 [ 2685.352973][ T4582] dirty 0 [ 2685.355902][ T4582] writeback 0 [ 2685.359199][ T4582] workingset_refault_anon 66447 [ 2685.364055][ T4582] workingset_refault_file 309 [ 2685.368753][ T4582] swap 4640768 [ 2685.372117][ T4582] swapcached 0 [ 2685.375475][ T4582] pgpgin 894099 [ 2685.378953][ T4582] pgpgout 894096 [ 2685.382547][ T4582] pgfault 977067 [ 2685.386084][ T4582] pgmajfault 34728 [ 2685.389874][ T4582] inactive_anon 0 [ 2685.393499][ T4582] active_anon 0 [ 2685.397047][ T4582] inactive_file 8192 [ 2685.400938][ T4582] active_file 4096 [ 2685.404765][ T4582] unevictable 0 [ 2685.408378][ T4582] hierarchical_memory_limit 314572800 [ 2685.413821][ T4582] hierarchical_memsw_limit 9223372036854771712 [ 2685.420015][ T4582] total_cache 12288 [ 2685.423880][ T4582] total_rss 0 [ 2685.427187][ T4582] total_shmem 0 [ 2685.430632][ T4582] total_mapped_file 0 [ 2685.434773][ T4582] total_dirty 0 [ 2685.438247][ T4582] total_writeback 0 [ 2685.442100][ T4582] total_workingset_refault_anon 66447 [ 2685.447485][ T4582] total_workingset_refault_file 309 [ 2685.452676][ T4582] total_swap 4640768 [ 2685.456690][ T4582] total_swapcached 0 [ 2685.460591][ T4582] total_pgpgin 894099 [ 2685.464571][ T4582] total_pgpgout 894096 [ 2685.468734][ T4582] total_pgfault 977067 [ 2685.472836][ T4582] total_pgmajfault 34728 [ 2685.477099][ T4582] total_inactive_anon 0 [ 2685.481332][ T4582] total_active_anon 0 [ 2685.485381][ T4582] total_inactive_file 8192 [ 2685.489878][ T4582] total_active_file 4096 [ 2685.494192][ T4582] total_unevictable 0 [ 2685.498419][ T4582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23016,uid=0 [ 2685.513780][ T4582] Memory cgroup out of memory: Killed process 23016 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2685.532560][T23010] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2685.546114][T23010] CPU: 1 PID: 23010 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2685.556567][T23010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2685.566687][T23010] Call Trace: [ 2685.569983][T23010] [ 2685.572912][T23010] dump_stack_lvl+0xda/0x130 [ 2685.577516][T23010] dump_stack+0x15/0x20 [ 2685.581679][T23010] dump_header+0x82/0x2d0 [ 2685.586096][T23010] oom_kill_process+0x33a/0x4c0 [ 2685.591010][T23010] out_of_memory+0x9ca/0xbf0 [ 2685.595660][T23010] mem_cgroup_out_of_memory+0x139/0x190 [ 2685.601258][T23010] try_charge_memcg+0x75c/0xd30 [ 2685.606218][T23010] obj_cgroup_charge_pages+0xab/0x130 [ 2685.611599][T23010] __memcg_kmem_charge_page+0x9c/0x170 [ 2685.617141][T23010] __alloc_pages+0x1bb/0x340 [ 2685.621735][T23010] alloc_pages_mpol+0xb1/0x1d0 [ 2685.626511][T23010] alloc_pages+0xe0/0x100 [ 2685.630913][T23010] __vmalloc_node_range+0x6d2/0xea0 [ 2685.636262][T23010] kvmalloc_node+0x121/0x160 [ 2685.640856][T23010] ? xt_alloc_table_info+0x3d/0x80 [ 2685.646107][T23010] xt_alloc_table_info+0x3d/0x80 [ 2685.651037][T23010] do_arpt_set_ctl+0x634/0x13b0 [ 2685.656001][T23010] ? __futex_wait+0x227/0x280 [ 2685.660794][T23010] ? __futex_wake_mark+0x70/0x70 [ 2685.665803][T23010] ? tcp_release_cb+0xfe/0x370 [ 2685.670652][T23010] ? _raw_spin_unlock_bh+0x36/0x40 [ 2685.675805][T23010] nf_setsockopt+0x18d/0x1b0 [ 2685.680466][T23010] ip_setsockopt+0xe6/0x100 [ 2685.684996][T23010] tcp_setsockopt+0x90/0xa0 [ 2685.689493][T23010] sock_common_setsockopt+0x61/0x70 [ 2685.694735][T23010] ? sock_common_recvmsg+0xe0/0xe0 [ 2685.699850][T23010] __sys_setsockopt+0x1d4/0x240 [ 2685.704913][T23010] __x64_sys_setsockopt+0x66/0x80 [ 2685.709968][T23010] do_syscall_64+0x44/0x110 [ 2685.714475][T23010] ? syscall_exit_to_user_mode+0x38/0x140 [ 2685.720210][T23010] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2685.726109][T23010] RIP: 0033:0x7f07d1466ba9 [ 2685.730531][T23010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2685.750129][T23010] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2685.758664][T23010] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2685.766660][T23010] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2685.774634][T23010] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2685.782596][T23010] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2685.790639][T23010] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2685.798601][T23010] [ 2685.801769][T23010] memory: usage 307200kB, limit 307200kB, failcnt 205373 [ 2685.808824][T23010] memory+swap: usage 307720kB, limit 9007199254740988kB, failcnt 0 [ 2685.816875][T23010] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2685.824151][T23010] Memory cgroup stats for /syz1: [ 2685.831513][T23010] cache 4096 [ 2685.839769][T23010] rss 8192 [ 2685.842782][T23010] shmem 0 [ 2685.845711][T23010] mapped_file 0 [ 2685.849190][T23010] dirty 0 [ 2685.852119][T23010] writeback 0 [ 2685.855423][T23010] workingset_refault_anon 91972 [ 2685.860301][T23010] workingset_refault_file 314 [ 2685.864968][T23010] swap 544768 [ 2685.868326][T23010] swapcached 8192 [ 2685.871962][T23010] pgpgin 2002079 [ 2685.875499][T23010] pgpgout 2002076 [ 2685.879138][T23010] pgfault 2103581 [ 2685.882817][T23010] pgmajfault 40617 [ 2685.886557][T23010] inactive_anon 8192 [ 2685.890449][T23010] active_anon 0 [ 2685.893917][T23010] inactive_file 0 [ 2685.897581][T23010] active_file 4096 [ 2685.901297][T23010] unevictable 0 [ 2685.904818][T23010] hierarchical_memory_limit 314572800 [ 2685.910293][T23010] hierarchical_memsw_limit 9223372036854771712 [ 2685.916657][T23010] total_cache 4096 [ 2685.920468][T23010] total_rss 8192 [ 2685.924114][T23010] total_shmem 0 [ 2685.927655][T23010] total_mapped_file 0 [ 2685.931703][T23010] total_dirty 0 [ 2685.935156][T23010] total_writeback 0 [ 2685.938998][T23010] total_workingset_refault_anon 91972 [ 2685.944400][T23010] total_workingset_refault_file 314 [ 2685.949676][T23010] total_swap 544768 [ 2685.953477][T23010] total_swapcached 8192 [ 2685.957663][T23010] total_pgpgin 2002079 [ 2685.961752][T23010] total_pgpgout 2002076 [ 2685.965927][T23010] total_pgfault 2103581 [ 2685.970103][T23010] total_pgmajfault 40617 [ 2685.974408][T23010] total_inactive_anon 8192 [ 2685.978902][T23010] total_active_anon 0 [ 2685.982882][T23010] total_inactive_file 0 [ 2685.987059][T23010] total_active_file 4096 [ 2685.991327][T23010] total_unevictable 0 [ 2685.995423][T23010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23008,uid=0 [ 2686.010750][T23010] Memory cgroup out of memory: Killed process 23008 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:57:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x11000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x6000000) 03:57:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xa000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xb000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2686.193265][T23036] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2686.206379][T23035] validate_nla: 15 callbacks suppressed [ 2686.206391][T23035] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2686.233549][T23044] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:57:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x7000000) 03:57:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xc000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2686.253029][T23046] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2686.286936][T23050] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:57:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x9000000) [ 2686.295692][T23051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:57:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1a2c0000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xb000000) [ 2686.329642][T23055] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2686.337962][T23054] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2686.373361][T23058] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2686.383580][T23059] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2687.051410][ T3105] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2687.062523][ T3105] CPU: 0 PID: 3105 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2687.072855][ T3105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2687.082953][ T3105] Call Trace: [ 2687.086228][ T3105] [ 2687.089156][ T3105] dump_stack_lvl+0xda/0x130 [ 2687.093770][ T3105] dump_stack+0x15/0x20 [ 2687.097949][ T3105] dump_header+0x82/0x2d0 [ 2687.102283][ T3105] oom_kill_process+0x33a/0x4c0 [ 2687.107228][ T3105] out_of_memory+0x9ca/0xbf0 [ 2687.111954][ T3105] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2687.118030][ T3105] mem_cgroup_out_of_memory+0x139/0x190 [ 2687.123600][ T3105] try_charge_memcg+0x75c/0xd30 [ 2687.128460][ T3105] ? __swap_duplicate+0x29b/0x2b0 [ 2687.133567][ T3105] ? radix_tree_lookup+0xf9/0x150 [ 2687.138667][ T3105] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2687.144857][ T3105] __read_swap_cache_async+0x2f6/0x550 [ 2687.150328][ T3105] swap_cluster_readahead+0x27c/0x4c0 [ 2687.155720][ T3105] swapin_readahead+0xe9/0x7f0 [ 2687.160499][ T3105] ? __filemap_get_folio+0x41a/0x5a0 [ 2687.165847][ T3105] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2687.171489][ T3105] ? swap_cache_get_folio+0x6e/0x200 [ 2687.176802][ T3105] do_swap_page+0x4a0/0x1670 [ 2687.181521][ T3105] ? __rcu_read_lock+0x35/0x50 [ 2687.186310][ T3105] ? pte_offset_map_nolock+0x124/0x1d0 [ 2687.191780][ T3105] handle_mm_fault+0xa36/0x2dd0 [ 2687.196631][ T3105] ? mt_find+0x1d9/0x310 [ 2687.200924][ T3105] exc_page_fault+0x2f7/0x6c0 [ 2687.205622][ T3105] asm_exc_page_fault+0x26/0x30 [ 2687.210540][ T3105] RIP: 0010:__get_user_8+0x11/0x20 [ 2687.215728][ T3105] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2687.235357][ T3105] RSP: 0018:ffffc900006f3df8 EFLAGS: 00050202 [ 2687.241438][ T3105] RAX: 000055555595bda8 RBX: ffffc900006f3e00 RCX: ffffffff81443e13 [ 2687.249539][ T3105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103a989d0 [ 2687.257509][ T3105] RBP: ffffc900006f3ec0 R08: 0001888103a989d7 R09: 0000000000000000 [ 2687.265487][ T3105] R10: 0001ffffffffffff R11: 0000000000002560 R12: ffff888103a98000 [ 2687.273452][ T3105] R13: ffff888103a989d0 R14: ffffc900006f3f58 R15: ffffc900006f3fd8 [ 2687.281419][ T3105] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2687.287383][ T3105] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2687.293120][ T3105] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 2687.299118][ T3105] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2687.305017][ T3105] ? common_nsleep+0x68/0x80 [ 2687.309666][ T3105] exit_to_user_mode_loop+0xcc/0xe0 [ 2687.314932][ T3105] exit_to_user_mode_prepare+0x6c/0xb0 [ 2687.320394][ T3105] syscall_exit_to_user_mode+0x26/0x140 [ 2687.326009][ T3105] do_syscall_64+0x50/0x110 [ 2687.330524][ T3105] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2687.336499][ T3105] RIP: 0033:0x7f07d1491f73 [ 2687.340957][ T3105] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 8e 4f 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 2687.360567][ T3105] RSP: 002b:00007fffaf03baf8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 2687.368985][ T3105] RAX: 0000000000000000 RBX: 0000000000001ff7 RCX: 00007f07d1491f73 [ 2687.377041][ T3105] RDX: 00007fffaf03bb10 RSI: 0000000000000000 RDI: 0000000000000000 [ 2687.385058][ T3105] RBP: 00007fffaf03bb9c R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2687.393033][ T3105] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2687.401126][ T3105] R13: 000000000028fd12 R14: 000000000028fd08 R15: 0000000000000001 [ 2687.409104][ T3105] [ 2687.412376][ T3105] memory: usage 307200kB, limit 307200kB, failcnt 205503 [ 2687.419430][ T3105] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2687.427400][ T3105] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2687.434802][ T3105] Memory cgroup stats for /syz1: [ 2687.435052][ T3105] cache 4096 [ 2687.443175][ T3105] rss 0 [ 2687.445936][ T3105] shmem 0 [ 2687.448918][ T3105] mapped_file 0 [ 2687.452372][ T3105] dirty 0 [ 2687.455299][ T3105] writeback 0 [ 2687.458592][ T3105] workingset_refault_anon 92005 [ 2687.463494][ T3105] workingset_refault_file 314 [ 2687.468201][ T3105] swap 544768 [ 2687.471483][ T3105] swapcached 8192 [ 2687.475104][ T3105] pgpgin 2002135 [ 2687.478715][ T3105] pgpgout 2002132 [ 2687.482358][ T3105] pgfault 2103739 [ 2687.486404][ T3105] pgmajfault 40632 [ 2687.490146][ T3105] inactive_anon 8192 [ 2687.494088][ T3105] active_anon 0 [ 2687.497561][ T3105] inactive_file 4096 [ 2687.501860][ T3105] active_file 0 [ 2687.505297][ T3105] unevictable 0 [ 2687.508780][ T3105] hierarchical_memory_limit 314572800 [ 2687.514190][ T3105] hierarchical_memsw_limit 9223372036854771712 [ 2687.520434][ T3105] total_cache 4096 [ 2687.524224][ T3105] total_rss 0 [ 2687.527605][ T3105] total_shmem 0 [ 2687.531061][ T3105] total_mapped_file 0 [ 2687.535123][ T3105] total_dirty 0 [ 2687.538601][ T3105] total_writeback 0 [ 2687.542409][ T3105] total_workingset_refault_anon 92005 [ 2687.547817][ T3105] total_workingset_refault_file 314 [ 2687.552998][ T3105] total_swap 544768 [ 2687.556874][ T3105] total_swapcached 8192 [ 2687.561091][ T3105] total_pgpgin 2002135 [ 2687.565158][ T3105] total_pgpgout 2002132 [ 2687.569342][ T3105] total_pgfault 2103739 [ 2687.573488][ T3105] total_pgmajfault 40632 [ 2687.577733][ T3105] total_inactive_anon 8192 [ 2687.582142][ T3105] total_active_anon 0 [ 2687.586109][ T3105] total_inactive_file 4096 [ 2687.590586][ T3105] total_active_file 0 [ 2687.594548][ T3105] total_unevictable 0 [ 2687.598557][ T3105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23040,uid=0 [ 2687.613832][ T3105] Memory cgroup out of memory: Killed process 23040 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2687.651336][T23038] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2687.665274][T23038] CPU: 0 PID: 23038 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2687.676251][T23038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2687.686319][T23038] Call Trace: [ 2687.689675][T23038] [ 2687.692741][T23038] dump_stack_lvl+0xda/0x130 [ 2687.697498][T23038] dump_stack+0x15/0x20 [ 2687.701677][T23038] dump_header+0x82/0x2d0 [ 2687.706017][T23038] oom_kill_process+0x33a/0x4c0 [ 2687.710959][T23038] out_of_memory+0x9ca/0xbf0 [ 2687.715566][T23038] mem_cgroup_out_of_memory+0x139/0x190 [ 2687.721153][T23038] try_charge_memcg+0x75c/0xd30 [ 2687.726010][T23038] obj_cgroup_charge_pages+0xab/0x130 [ 2687.731424][T23038] __memcg_kmem_charge_page+0x9c/0x170 [ 2687.736945][T23038] __alloc_pages+0x1bb/0x340 [ 2687.741539][T23038] alloc_pages_mpol+0xb1/0x1d0 [ 2687.746307][T23038] alloc_pages+0xe0/0x100 03:57:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xd000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2687.750668][T23038] __vmalloc_node_range+0x6d2/0xea0 [ 2687.755881][T23038] kvmalloc_node+0x121/0x160 [ 2687.760587][T23038] ? xt_alloc_table_info+0x3d/0x80 [ 2687.765764][T23038] xt_alloc_table_info+0x3d/0x80 [ 2687.770749][T23038] do_arpt_set_ctl+0x634/0x13b0 [ 2687.775636][T23038] ? __futex_wait+0x227/0x280 [ 2687.780318][T23038] ? __futex_wake_mark+0x70/0x70 [ 2687.785343][T23038] ? tcp_release_cb+0xfe/0x370 [ 2687.790211][T23038] ? _raw_spin_unlock_bh+0x36/0x40 [ 2687.795364][T23038] nf_setsockopt+0x18d/0x1b0 [ 2687.799977][T23038] ip_setsockopt+0xe6/0x100 [ 2687.804710][T23038] tcp_setsockopt+0x90/0xa0 [ 2687.809265][T23038] sock_common_setsockopt+0x61/0x70 [ 2687.814470][T23038] ? sock_common_recvmsg+0xe0/0xe0 [ 2687.819819][T23038] __sys_setsockopt+0x1d4/0x240 [ 2687.824698][T23038] __x64_sys_setsockopt+0x66/0x80 [ 2687.829711][T23038] do_syscall_64+0x44/0x110 [ 2687.834262][T23038] ? syscall_exit_to_user_mode+0x38/0x140 [ 2687.840003][T23038] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2687.845889][T23038] RIP: 0033:0x7ffbf0714ba9 [ 2687.850335][T23038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2687.869990][T23038] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2687.878393][T23038] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2687.886356][T23038] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2687.894337][T23038] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2687.902294][T23038] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2687.910300][T23038] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2687.918264][T23038] [ 2687.921349][T23038] memory: usage 307196kB, limit 307200kB, failcnt 57261 [ 2687.928590][T23038] memory+swap: usage 311720kB, limit 9007199254740988kB, failcnt 0 [ 2687.936653][T23038] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2687.944024][T23038] Memory cgroup stats for /syz4: [ 2687.950260][T23064] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2687.967361][T23038] cache 12288 [ 2687.970675][T23038] rss 8192 [ 2687.973785][T23038] shmem 0 [ 2687.976820][T23038] mapped_file 0 [ 2687.980350][T23038] dirty 0 [ 2687.983293][T23038] writeback 8192 [ 2687.985568][T23065] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2687.986927][T23038] workingset_refault_anon 66631 [ 2688.001126][T23038] workingset_refault_file 309 [ 2688.005910][T23038] swap 4632576 [ 2688.009329][T23038] swapcached 8192 [ 2688.012964][T23038] pgpgin 894305 [ 2688.016455][T23038] pgpgout 894300 [ 2688.020058][T23038] pgfault 977772 [ 2688.023613][T23038] pgmajfault 34811 [ 2688.027477][T23038] inactive_anon 0 [ 2688.031176][T23038] active_anon 8192 [ 2688.034972][T23038] inactive_file 0 [ 2688.038646][T23038] active_file 0 [ 2688.042148][T23038] unevictable 0 [ 2688.045659][T23038] hierarchical_memory_limit 314572800 [ 2688.051212][T23038] hierarchical_memsw_limit 9223372036854771712 [ 2688.057401][T23038] total_cache 12288 [ 2688.061205][T23038] total_rss 8192 [ 2688.064763][T23038] total_shmem 0 [ 2688.068271][T23038] total_mapped_file 0 [ 2688.072290][T23038] total_dirty 0 [ 2688.075755][T23038] total_writeback 8192 [ 2688.079930][T23038] total_workingset_refault_anon 66631 [ 2688.085306][T23038] total_workingset_refault_file 309 [ 2688.090519][T23038] total_swap 4632576 [ 2688.094534][T23038] total_swapcached 8192 [ 2688.098743][T23038] total_pgpgin 894305 [ 2688.102751][T23038] total_pgpgout 894300 [ 2688.106842][T23038] total_pgfault 977772 [ 2688.110896][T23038] total_pgmajfault 34811 [ 2688.115127][T23038] total_inactive_anon 0 [ 2688.119397][T23038] total_active_anon 8192 [ 2688.123682][T23038] total_inactive_file 0 [ 2688.127857][T23038] total_active_file 0 [ 2688.131845][T23038] total_unevictable 0 [ 2688.135935][T23038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23037,uid=0 [ 2688.151302][T23038] Memory cgroup out of memory: Killed process 23037 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2688.178139][T23039] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2688.189556][T23039] CPU: 1 PID: 23039 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2688.200031][T23039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2688.210167][T23039] Call Trace: [ 2688.213456][T23039] [ 2688.216379][T23039] dump_stack_lvl+0xda/0x130 [ 2688.220969][T23039] dump_stack+0x15/0x20 [ 2688.225147][T23039] dump_header+0x82/0x2d0 [ 2688.229525][T23039] oom_kill_process+0x33a/0x4c0 [ 2688.234478][T23039] out_of_memory+0x9ca/0xbf0 [ 2688.239079][T23039] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2688.245159][T23039] mem_cgroup_out_of_memory+0x139/0x190 [ 2688.250775][T23039] try_charge_memcg+0x75c/0xd30 [ 2688.255649][T23039] ? __swap_duplicate+0x29b/0x2b0 [ 2688.260746][T23039] ? radix_tree_lookup+0xf9/0x150 [ 2688.265886][T23039] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2688.271992][T23039] __read_swap_cache_async+0x2f6/0x550 [ 2688.277452][T23039] swap_cluster_readahead+0x27c/0x4c0 [ 2688.282818][T23039] swapin_readahead+0xe9/0x7f0 [ 2688.287704][T23039] ? __filemap_get_folio+0x41a/0x5a0 [ 2688.292985][T23039] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2688.298613][T23039] ? swap_cache_get_folio+0x6e/0x200 [ 2688.303889][T23039] do_swap_page+0x4a0/0x1670 [ 2688.308480][T23039] ? __rcu_read_lock+0x35/0x50 [ 2688.313236][T23039] ? pte_offset_map_nolock+0x124/0x1d0 [ 2688.318687][T23039] handle_mm_fault+0xa36/0x2dd0 [ 2688.323539][T23039] ? mt_find+0x1d9/0x310 [ 2688.327771][T23039] exc_page_fault+0x2f7/0x6c0 [ 2688.332495][T23039] asm_exc_page_fault+0x26/0x30 [ 2688.337349][T23039] RIP: 0010:__get_user_8+0x11/0x20 [ 2688.342474][T23039] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 2688.362175][T23039] RSP: 0018:ffffc90000ebfe38 EFLAGS: 00050202 [ 2688.368232][T23039] RAX: 0000555557356da8 RBX: ffffc90000ebfe40 RCX: ffffffff81443e13 [ 2688.376247][T23039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881cbf92a50 [ 2688.384209][T23039] RBP: ffffc90000ebfef8 R08: 00018881cbf92a57 R09: 0000000000000000 [ 2688.392225][T23039] R10: 0001ffffffffffff R11: 0001c90000ebfec0 R12: ffff8881cbf92080 [ 2688.400225][T23039] R13: ffff8881cbf92a50 R14: ffffc90000ebff58 R15: ffffc90000ebffd8 [ 2688.408259][T23039] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 2688.414222][T23039] __rseq_handle_notify_resume+0xc7/0xbf0 [ 2688.419966][T23039] ? __rcu_read_unlock+0x4d/0x70 [ 2688.424900][T23039] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 2688.430839][T23039] exit_to_user_mode_loop+0xcc/0xe0 [ 2688.436067][T23039] exit_to_user_mode_prepare+0x6c/0xb0 [ 2688.441551][T23039] irqentry_exit_to_user_mode+0x9/0x20 [ 2688.447026][T23039] irqentry_exit+0x12/0x40 [ 2688.451433][T23039] asm_exc_page_fault+0x26/0x30 [ 2688.456288][T23039] RIP: 0033:0x7f50c0f52226 [ 2688.460698][T23039] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 2688.480300][T23039] RSP: 002b:00007ffd61c03b68 EFLAGS: 00010287 [ 2688.486364][T23039] RAX: 0000001b2d021000 RBX: 00007f50c10c7018 RCX: 0000001b2d020000 [ 2688.494396][T23039] RDX: 0000001b2d021004 RSI: 0000000080000000 RDI: 00000000814ba364 [ 2688.502389][T23039] RBP: 00000000814ba364 R08: 0000001b2d420000 R09: 0000000000000364 [ 2688.510385][T23039] R10: 00000000814ba368 R11: 000000000007f62a R12: 000000000000747c [ 2688.518343][T23039] R13: 0000000000000001 R14: 00007f50c10bb000 R15: ffffffff814ba9bb [ 2688.526344][T23039] ? list_lru_isolate_move+0x1b/0xe0 [ 2688.531714][T23039] [ 2688.534772][T23039] memory: usage 307200kB, limit 307200kB, failcnt 103290 [ 2688.541909][T23039] memory+swap: usage 309048kB, limit 9007199254740988kB, failcnt 0 [ 2688.549823][T23039] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 2688.557142][T23039] Memory cgroup stats for /syz3: [ 2688.672154][T23039] cache 20480 [ 2688.680444][T23039] rss 0 [ 2688.683284][T23039] shmem 4096 [ 2688.686508][T23039] mapped_file 0 [ 2688.690035][T23039] dirty 0 [ 2688.693032][T23039] writeback 8192 [ 2688.696601][T23039] workingset_refault_anon 76554 [ 2688.701505][T23039] workingset_refault_file 320 [ 2688.706329][T23039] swap 1892352 [ 2688.709685][T23039] swapcached 8192 [ 2688.713310][T23039] pgpgin 380853 [ 2688.716775][T23039] pgpgout 380846 [ 2688.720333][T23039] pgfault 570986 [ 2688.723867][T23039] pgmajfault 40403 [ 2688.727596][T23039] inactive_anon 0 [ 2688.731289][T23039] active_anon 0 [ 2688.734737][T23039] inactive_file 4096 [ 2688.738756][T23039] active_file 12288 [ 2688.742650][T23039] unevictable 0 [ 2688.746099][T23039] hierarchical_memory_limit 314572800 [ 2688.751559][T23039] hierarchical_memsw_limit 9223372036854771712 [ 2688.757746][T23039] total_cache 20480 [ 2688.761642][T23039] total_rss 0 [ 2688.764917][T23039] total_shmem 4096 [ 2688.768653][T23039] total_mapped_file 0 [ 2688.772630][T23039] total_dirty 0 [ 2688.776158][T23039] total_writeback 8192 [ 2688.780312][T23039] total_workingset_refault_anon 76554 [ 2688.785739][T23039] total_workingset_refault_file 320 [ 2688.791002][T23039] total_swap 1892352 [ 2688.794875][T23039] total_swapcached 8192 [ 2688.799104][T23039] total_pgpgin 380853 [ 2688.803072][T23039] total_pgpgout 380846 [ 2688.807144][T23039] total_pgfault 570986 [ 2688.811205][T23039] total_pgmajfault 40403 [ 2688.815444][T23039] total_inactive_anon 0 03:57:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xf000000) [ 2688.819668][T23039] total_active_anon 0 [ 2688.823633][T23039] total_inactive_file 4096 [ 2688.828088][T23039] total_active_file 12288 [ 2688.832472][T23039] total_unevictable 0 [ 2688.836459][T23039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23039,uid=0 [ 2688.851801][T23039] Memory cgroup out of memory: Killed process 23039 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2688.879463][T23067] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:57:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x25000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xe000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x936, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x20000000) 03:57:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x10000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x31410000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xda450000) 03:57:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x11000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2689.043239][T23070] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2689.059113][T23073] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2689.083132][T23080] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xeaffffff) 03:57:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x12000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2689.135716][T23088] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2689.206628][T23096] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2689.780776][T23076] ================================================================== [ 2689.788898][T23076] BUG: KCSAN: data-race in drain_all_stock / try_charge_memcg [ 2689.796372][T23076] [ 2689.798692][T23076] write to 0xffff888237c2a3c0 of 4 bytes by task 23071 on cpu 0: [ 2689.806415][T23076] try_charge_memcg+0xb49/0xd30 [ 2689.811275][T23076] obj_cgroup_charge_pages+0xab/0x130 [ 2689.816661][T23076] __memcg_kmem_charge_page+0x9c/0x170 [ 2689.822146][T23076] __alloc_pages+0x1bb/0x340 [ 2689.826736][T23076] alloc_pages_mpol+0xb1/0x1d0 [ 2689.831591][T23076] alloc_pages+0xe0/0x100 [ 2689.835926][T23076] __vmalloc_node_range+0x6d2/0xea0 [ 2689.841134][T23076] kvmalloc_node+0x121/0x160 [ 2689.845724][T23076] xt_alloc_table_info+0x3d/0x80 [ 2689.850754][T23076] do_arpt_set_ctl+0x634/0x13b0 [ 2689.855629][T23076] nf_setsockopt+0x18d/0x1b0 [ 2689.860225][T23076] ip_setsockopt+0xe6/0x100 [ 2689.864738][T23076] tcp_setsockopt+0x90/0xa0 [ 2689.869239][T23076] sock_common_setsockopt+0x61/0x70 [ 2689.874448][T23076] __sys_setsockopt+0x1d4/0x240 [ 2689.879384][T23076] __x64_sys_setsockopt+0x66/0x80 [ 2689.884422][T23076] do_syscall_64+0x44/0x110 [ 2689.888929][T23076] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2689.894831][T23076] [ 2689.897149][T23076] read to 0xffff888237c2a3c0 of 4 bytes by task 23076 on cpu 1: [ 2689.904777][T23076] drain_all_stock+0xd3/0x2d0 [ 2689.909470][T23076] try_charge_memcg+0x6c5/0xd30 [ 2689.914332][T23076] obj_cgroup_charge_pages+0xab/0x130 [ 2689.919711][T23076] __memcg_kmem_charge_page+0x9c/0x170 [ 2689.925172][T23076] __alloc_pages+0x1bb/0x340 [ 2689.929766][T23076] alloc_pages_mpol+0xb1/0x1d0 [ 2689.934538][T23076] alloc_pages+0xe0/0x100 [ 2689.938871][T23076] __vmalloc_node_range+0x6d2/0xea0 [ 2689.944079][T23076] kvmalloc_node+0x121/0x160 [ 2689.948673][T23076] xt_alloc_table_info+0x3d/0x80 [ 2689.953617][T23076] do_arpt_set_ctl+0x634/0x13b0 [ 2689.958489][T23076] nf_setsockopt+0x18d/0x1b0 [ 2689.963092][T23076] ip_setsockopt+0xe6/0x100 [ 2689.967608][T23076] tcp_setsockopt+0x90/0xa0 [ 2689.972114][T23076] sock_common_setsockopt+0x61/0x70 [ 2689.977512][T23076] __sys_setsockopt+0x1d4/0x240 [ 2689.982366][T23076] __x64_sys_setsockopt+0x66/0x80 [ 2689.987401][T23076] do_syscall_64+0x44/0x110 [ 2689.991929][T23076] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2689.997830][T23076] [ 2690.000149][T23076] value changed: 0x0000003b -> 0x00000023 [ 2690.005869][T23076] [ 2690.008222][T23076] Reported by Kernel Concurrency Sanitizer on: [ 2690.014366][T23076] CPU: 1 PID: 23076 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2690.024872][T23076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2690.034928][T23076] ================================================================== [ 2690.128538][T23076] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2690.142091][T23076] CPU: 1 PID: 23076 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2690.152510][T23076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2690.162612][T23076] Call Trace: [ 2690.165970][T23076] [ 2690.168894][T23076] dump_stack_lvl+0xda/0x130 [ 2690.173665][T23076] dump_stack+0x15/0x20 [ 2690.178004][T23076] dump_header+0x82/0x2d0 [ 2690.182354][T23076] oom_kill_process+0x33a/0x4c0 [ 2690.187275][T23076] out_of_memory+0x9ca/0xbf0 [ 2690.192037][T23076] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2690.198125][T23076] mem_cgroup_out_of_memory+0x139/0x190 [ 2690.203686][T23076] try_charge_memcg+0x75c/0xd30 [ 2690.208593][T23076] obj_cgroup_charge_pages+0xab/0x130 [ 2690.214065][T23076] __memcg_kmem_charge_page+0x9c/0x170 [ 2690.219605][T23076] __alloc_pages+0x1bb/0x340 [ 2690.224236][T23076] alloc_pages_mpol+0xb1/0x1d0 [ 2690.229011][T23076] alloc_pages+0xe0/0x100 [ 2690.233389][T23076] __vmalloc_node_range+0x6d2/0xea0 [ 2690.238682][T23076] kvmalloc_node+0x121/0x160 [ 2690.243280][T23076] ? xt_alloc_table_info+0x3d/0x80 [ 2690.248482][T23076] xt_alloc_table_info+0x3d/0x80 [ 2690.253480][T23076] do_arpt_set_ctl+0x634/0x13b0 [ 2690.258351][T23076] ? __futex_wait+0x227/0x280 [ 2690.263046][T23076] ? __futex_wake_mark+0x70/0x70 [ 2690.268168][T23076] ? tcp_release_cb+0xfe/0x370 [ 2690.272948][T23076] ? _raw_spin_unlock_bh+0x36/0x40 [ 2690.278139][T23076] nf_setsockopt+0x18d/0x1b0 [ 2690.282799][T23076] ip_setsockopt+0xe6/0x100 [ 2690.287450][T23076] tcp_setsockopt+0x90/0xa0 [ 2690.291967][T23076] sock_common_setsockopt+0x61/0x70 [ 2690.297231][T23076] ? sock_common_recvmsg+0xe0/0xe0 [ 2690.302388][T23076] __sys_setsockopt+0x1d4/0x240 [ 2690.307275][T23076] __x64_sys_setsockopt+0x66/0x80 [ 2690.312330][T23076] do_syscall_64+0x44/0x110 [ 2690.316859][T23076] ? syscall_exit_to_user_mode+0x38/0x140 [ 2690.322657][T23076] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2690.328553][T23076] RIP: 0033:0x7f07d1466ba9 [ 2690.333057][T23076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2690.352709][T23076] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2690.361135][T23076] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2690.369129][T23076] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 03:57:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xf0ffffff) [ 2690.377084][T23076] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2690.385051][T23076] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2690.393008][T23076] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2690.400974][T23076] [ 2690.404131][T23076] memory: usage 307200kB, limit 307200kB, failcnt 205804 [ 2690.411219][T23076] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2690.419155][T23076] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2690.426468][T23076] Memory cgroup stats for /syz1: [ 2690.426874][T23076] cache 4096 [ 2690.435077][T23076] rss 0 [ 2690.437882][T23076] shmem 0 [ 2690.440882][T23076] mapped_file 0 [ 2690.444426][T23076] dirty 0 [ 2690.447409][T23076] writeback 0 [ 2690.450738][T23076] workingset_refault_anon 92099 [ 2690.455640][T23076] workingset_refault_file 314 [ 2690.460368][T23076] swap 552960 [ 2690.463657][T23076] swapcached 0 [ 2690.467096][T23076] pgpgin 2002275 [ 2690.470692][T23076] pgpgout 2002274 [ 2690.474372][T23076] pgfault 2104058 [ 2690.478041][T23076] pgmajfault 40681 [ 2690.481772][T23076] inactive_anon 0 [ 2690.485454][T23076] active_anon 0 [ 2690.488936][T23076] inactive_file 0 [ 2690.492629][T23076] active_file 4096 [ 2690.496462][T23076] unevictable 0 [ 2690.499939][T23076] hierarchical_memory_limit 314572800 [ 2690.505360][T23076] hierarchical_memsw_limit 9223372036854771712 [ 2690.511557][T23076] total_cache 4096 [ 2690.515280][T23076] total_rss 0 [ 2690.518588][T23076] total_shmem 0 [ 2690.522065][T23076] total_mapped_file 0 [ 2690.526081][T23076] total_dirty 0 [ 2690.529571][T23076] total_writeback 0 [ 2690.533377][T23076] total_workingset_refault_anon 92099 [ 2690.538837][T23076] total_workingset_refault_file 314 [ 2690.544043][T23076] total_swap 552960 [ 2690.547955][T23076] total_swapcached 0 [ 2690.551908][T23076] total_pgpgin 2002275 [ 2690.556069][T23076] total_pgpgout 2002274 [ 2690.560312][T23076] total_pgfault 2104058 [ 2690.564453][T23076] total_pgmajfault 40681 [ 2690.568768][T23076] total_inactive_anon 0 [ 2690.573021][T23076] total_active_anon 0 [ 2690.577123][T23076] total_inactive_file 0 [ 2690.581404][T23076] total_active_file 4096 [ 2690.585825][T23076] total_unevictable 0 [ 2690.589865][T23076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23075,uid=0 [ 2690.605251][T23076] Memory cgroup out of memory: Killed process 23075 (syz-executor.1) total-vm:46300kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:57:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x20000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xfeffffff) 03:57:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xa36, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x627d0000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xffffff7f) 03:57:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xffffffea) 03:57:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2690.825183][T23213] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.426272][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 2691.432778][ C0] EXT4-fs (loop0): initial error at time 2147485925: ext4_validate_block_bitmap:441 [ 2691.442190][ C0] EXT4-fs (loop0): last error at time 2147485925: ext4_mb_clear_bb:6517 03:57:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xfffffff0) 03:57:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x25000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2691.505843][T23228] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.592024][T23210] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2691.603390][T23210] CPU: 0 PID: 23210 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2691.613818][T23210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2691.623953][T23210] Call Trace: [ 2691.627257][T23210] [ 2691.630210][T23210] dump_stack_lvl+0xda/0x130 [ 2691.634913][T23210] dump_stack+0x15/0x20 [ 2691.639097][T23210] dump_header+0x82/0x2d0 [ 2691.643432][T23210] oom_kill_process+0x33a/0x4c0 [ 2691.648277][T23210] out_of_memory+0x9ca/0xbf0 [ 2691.652878][T23210] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2691.658957][T23210] mem_cgroup_out_of_memory+0x139/0x190 [ 2691.664539][T23210] try_charge_memcg+0x75c/0xd30 [ 2691.669385][T23210] ? __swap_duplicate+0x29b/0x2b0 [ 2691.674516][T23210] ? radix_tree_lookup+0xf9/0x150 [ 2691.679587][T23210] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2691.685670][T23210] __read_swap_cache_async+0x2f6/0x550 [ 2691.691128][T23210] swap_cluster_readahead+0x27c/0x4c0 [ 2691.696654][T23210] swapin_readahead+0xe9/0x7f0 [ 2691.701482][T23210] ? __filemap_get_folio+0x41a/0x5a0 [ 2691.706810][T23210] ? _raw_spin_unlock+0x26/0x40 [ 2691.711658][T23210] ? swap_cache_get_folio+0x6e/0x200 [ 2691.717033][T23210] do_swap_page+0x4a0/0x1670 [ 2691.721667][T23210] ? __rcu_read_lock+0x35/0x50 [ 2691.726423][T23210] ? pte_offset_map_nolock+0x124/0x1d0 [ 2691.732024][T23210] handle_mm_fault+0xa36/0x2dd0 [ 2691.736872][T23210] exc_page_fault+0x3ff/0x6c0 [ 2691.741984][T23210] asm_exc_page_fault+0x26/0x30 [ 2691.747004][T23210] RIP: 0033:0x7f07d1420bc4 [ 2691.751413][T23210] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2691.771129][T23210] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2691.777187][T23210] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2691.785271][T23210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2691.793231][T23210] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2691.801190][T23210] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000029123b [ 2691.809152][T23210] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 0000000000290efa [ 2691.817152][T23210] [ 2691.820277][T23210] memory: usage 307200kB, limit 307200kB, failcnt 206061 [ 2691.827627][T23210] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2691.835621][T23210] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2691.842951][T23210] Memory cgroup stats for /syz1: [ 2691.843116][T23210] cache 4096 [ 2691.851268][T23210] rss 0 [ 2691.854026][T23210] shmem 0 [ 2691.857033][T23210] mapped_file 0 [ 2691.860479][T23210] dirty 0 [ 2691.863409][T23210] writeback 0 [ 2691.866699][T23210] workingset_refault_anon 92120 [ 2691.871606][T23210] workingset_refault_file 314 [ 2691.876351][T23210] swap 552960 [ 2691.879619][T23210] swapcached 0 [ 2691.882972][T23210] pgpgin 2002319 [ 2691.886527][T23210] pgpgout 2002318 [ 2691.890234][T23210] pgfault 2104203 [ 2691.893941][T23210] pgmajfault 40688 [ 2691.897675][T23210] inactive_anon 0 [ 2691.901408][T23210] active_anon 0 [ 2691.904857][T23210] inactive_file 0 [ 2691.908501][T23210] active_file 4096 [ 2691.912218][T23210] unevictable 0 [ 2691.915760][T23210] hierarchical_memory_limit 314572800 [ 2691.921158][T23210] hierarchical_memsw_limit 9223372036854771712 [ 2691.927326][T23210] total_cache 4096 [ 2691.931048][T23210] total_rss 0 [ 2691.934326][T23210] total_shmem 0 [ 2691.937866][T23210] total_mapped_file 0 [ 2691.941837][T23210] total_dirty 0 [ 2691.945318][T23210] total_writeback 0 [ 2691.949187][T23210] total_workingset_refault_anon 92120 [ 2691.954549][T23210] total_workingset_refault_file 314 [ 2691.959821][T23210] total_swap 552960 [ 2691.963656][T23210] total_swapcached 0 [ 2691.967682][T23210] total_pgpgin 2002319 [ 2691.971805][T23210] total_pgpgout 2002318 [ 2691.975951][T23210] total_pgfault 2104203 [ 2691.980158][T23210] total_pgmajfault 40688 [ 2691.984395][T23210] total_inactive_anon 0 [ 2691.988629][T23210] total_active_anon 0 [ 2691.992668][T23210] total_inactive_file 0 [ 2691.996853][T23210] total_active_file 4096 [ 2692.001099][T23210] total_unevictable 0 [ 2692.005096][T23210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23210,uid=0 [ 2692.020361][T23210] Memory cgroup out of memory: Killed process 23210 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2692.121209][T23208] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2692.134979][T23208] CPU: 1 PID: 23208 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2692.145402][T23208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2692.155466][T23208] Call Trace: [ 2692.158803][T23208] [ 2692.161735][T23208] dump_stack_lvl+0xda/0x130 [ 2692.166400][T23208] dump_stack+0x15/0x20 [ 2692.170601][T23208] dump_header+0x82/0x2d0 [ 2692.175089][T23208] oom_kill_process+0x33a/0x4c0 [ 2692.180010][T23208] out_of_memory+0x9ca/0xbf0 [ 2692.184604][T23208] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2692.190670][T23208] mem_cgroup_out_of_memory+0x139/0x190 [ 2692.196308][T23208] try_charge_memcg+0x75c/0xd30 [ 2692.201161][T23208] obj_cgroup_charge_pages+0xab/0x130 [ 2692.206543][T23208] __memcg_kmem_charge_page+0x9c/0x170 [ 2692.212016][T23208] __alloc_pages+0x1bb/0x340 [ 2692.216604][T23208] alloc_pages_mpol+0xb1/0x1d0 [ 2692.221431][T23208] alloc_pages+0xe0/0x100 [ 2692.225780][T23208] __vmalloc_node_range+0x6d2/0xea0 [ 2692.231043][T23208] kvmalloc_node+0x121/0x160 [ 2692.235626][T23208] ? xt_alloc_table_info+0x3d/0x80 [ 2692.240731][T23208] xt_alloc_table_info+0x3d/0x80 [ 2692.245706][T23208] do_arpt_set_ctl+0x634/0x13b0 [ 2692.250562][T23208] ? __futex_wait+0x227/0x280 [ 2692.255416][T23208] ? __futex_wake_mark+0x70/0x70 [ 2692.260364][T23208] ? tcp_release_cb+0xfe/0x370 [ 2692.265124][T23208] ? _raw_spin_unlock_bh+0x36/0x40 [ 2692.270307][T23208] nf_setsockopt+0x18d/0x1b0 [ 2692.274964][T23208] ip_setsockopt+0xe6/0x100 [ 2692.279465][T23208] tcp_setsockopt+0x90/0xa0 [ 2692.283962][T23208] sock_common_setsockopt+0x61/0x70 [ 2692.289413][T23208] ? sock_common_recvmsg+0xe0/0xe0 [ 2692.294555][T23208] __sys_setsockopt+0x1d4/0x240 [ 2692.299402][T23208] __x64_sys_setsockopt+0x66/0x80 [ 2692.304431][T23208] do_syscall_64+0x44/0x110 [ 2692.308947][T23208] ? syscall_exit_to_user_mode+0x38/0x140 [ 2692.314724][T23208] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2692.320646][T23208] RIP: 0033:0x7ffbf0714ba9 [ 2692.325054][T23208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2692.344814][T23208] RSP: 002b:00007ffbefa970c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2692.353221][T23208] RAX: ffffffffffffffda RBX: 00007ffbf0833f80 RCX: 00007ffbf0714ba9 [ 2692.361179][T23208] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2692.369313][T23208] RBP: 00007ffbf076047a R08: 0000000000000438 R09: 0000000000000000 [ 2692.377358][T23208] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2692.385321][T23208] R13: 000000000000000b R14: 00007ffbf0833f80 R15: 00007ffc3358c968 [ 2692.393316][T23208] [ 2692.396377][T23208] memory: usage 307200kB, limit 307200kB, failcnt 57412 [ 2692.403849][T23208] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2692.411825][T23208] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2692.419157][T23208] Memory cgroup stats for /syz4: [ 2692.528440][T23208] cache 12288 [ 2692.536738][T23208] rss 8192 [ 2692.539768][T23208] shmem 0 [ 2692.542705][T23208] mapped_file 0 [ 2692.546169][T23208] dirty 0 [ 2692.549144][T23208] writeback 0 [ 2692.552429][T23208] workingset_refault_anon 66703 [ 2692.557294][T23208] workingset_refault_file 309 [ 2692.561966][T23208] swap 4632576 [ 2692.565406][T23208] swapcached 4096 [ 2692.569069][T23208] pgpgin 894437 [ 2692.572541][T23208] pgpgout 894432 [ 2692.576077][T23208] pgfault 978168 [ 2692.579714][T23208] pgmajfault 34848 [ 2692.583447][T23208] inactive_anon 4096 [ 2692.587444][T23208] active_anon 4096 [ 2692.591164][T23208] inactive_file 0 [ 2692.594858][T23208] active_file 12288 [ 2692.598683][T23208] unevictable 0 [ 2692.602208][T23208] hierarchical_memory_limit 314572800 [ 2692.607743][T23208] hierarchical_memsw_limit 9223372036854771712 [ 2692.613895][T23208] total_cache 12288 [ 2692.617778][T23208] total_rss 8192 [ 2692.621315][T23208] total_shmem 0 [ 2692.624849][T23208] total_mapped_file 0 [ 2692.628868][T23208] total_dirty 0 [ 2692.632316][T23208] total_writeback 0 [ 2692.636180][T23208] total_workingset_refault_anon 66703 [ 2692.641704][T23208] total_workingset_refault_file 309 [ 2692.646918][T23208] total_swap 4632576 [ 2692.650876][T23208] total_swapcached 4096 [ 2692.655027][T23208] total_pgpgin 894437 [ 2692.659034][T23208] total_pgpgout 894432 [ 2692.663090][T23208] total_pgfault 978168 [ 2692.667197][T23208] total_pgmajfault 34848 [ 2692.671487][T23208] total_inactive_anon 4096 03:57:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xfffffffe) 03:57:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x313b0000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2692.676160][T23208] total_active_anon 4096 [ 2692.680430][T23208] total_inactive_file 0 [ 2692.684576][T23208] total_active_file 12288 [ 2692.688923][T23208] total_unevictable 0 [ 2692.692896][T23208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23207,uid=0 [ 2692.708275][T23208] Memory cgroup out of memory: Killed process 23207 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2692.745231][T23236] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2692.758403][T23235] validate_nla: 7 callbacks suppressed [ 2692.758416][T23235] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:57:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x40030000000000) 03:57:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x48000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x4c000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2693.111686][T23243] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2693.126802][T23245] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2693.135405][T23247] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:57:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x100000000000000) 03:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2693.169024][T23251] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2693.205141][T23254] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:57:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x60000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2693.225611][T23256] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2693.266704][T23259] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x200000000000000) 03:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2693.767937][T23261] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2693.782180][T23263] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x63430000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x300000000000000) 03:57:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xb36, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x400000000000000) 03:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x88470000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x679a0000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2694.256891][T23267] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2694.266167][T23273] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2694.275827][T23272] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:57:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x500000000000000) [ 2694.320878][T23280] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2694.344918][T23282] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2694.603341][T23265] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2694.616972][T23265] CPU: 0 PID: 23265 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2694.627399][T23265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2694.637460][T23265] Call Trace: [ 2694.641175][T23265] [ 2694.644108][T23265] dump_stack_lvl+0xda/0x130 [ 2694.648743][T23265] dump_stack+0x15/0x20 [ 2694.652915][T23265] dump_header+0x82/0x2d0 [ 2694.657325][T23265] oom_kill_process+0x33a/0x4c0 [ 2694.662276][T23265] out_of_memory+0x9ca/0xbf0 [ 2694.666911][T23265] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2694.674132][T23265] mem_cgroup_out_of_memory+0x139/0x190 [ 2694.679757][T23265] try_charge_memcg+0x75c/0xd30 [ 2694.684671][T23265] obj_cgroup_charge_pages+0xab/0x130 [ 2694.690080][T23265] __memcg_kmem_charge_page+0x9c/0x170 [ 2694.695628][T23265] __alloc_pages+0x1bb/0x340 [ 2694.700213][T23265] alloc_pages_mpol+0xb1/0x1d0 [ 2694.704987][T23265] alloc_pages+0xe0/0x100 [ 2694.709408][T23265] __vmalloc_node_range+0x6d2/0xea0 [ 2694.714638][T23265] kvmalloc_node+0x121/0x160 [ 2694.719230][T23265] ? xt_alloc_table_info+0x3d/0x80 [ 2694.724368][T23265] xt_alloc_table_info+0x3d/0x80 [ 2694.729350][T23265] do_arpt_set_ctl+0x634/0x13b0 [ 2694.734240][T23265] ? __futex_wait+0x227/0x280 [ 2694.739452][T23265] ? __futex_wake_mark+0x70/0x70 [ 2694.744438][T23265] ? tcp_release_cb+0xfe/0x370 [ 2694.749219][T23265] ? _raw_spin_unlock_bh+0x36/0x40 [ 2694.754494][T23265] nf_setsockopt+0x18d/0x1b0 [ 2694.759164][T23265] ip_setsockopt+0xe6/0x100 [ 2694.763747][T23265] tcp_setsockopt+0x90/0xa0 [ 2694.768308][T23265] sock_common_setsockopt+0x61/0x70 [ 2694.773540][T23265] ? sock_common_recvmsg+0xe0/0xe0 [ 2694.778670][T23265] __sys_setsockopt+0x1d4/0x240 [ 2694.783532][T23265] __x64_sys_setsockopt+0x66/0x80 [ 2694.788673][T23265] do_syscall_64+0x44/0x110 [ 2694.793282][T23265] ? syscall_exit_to_user_mode+0x38/0x140 [ 2694.798995][T23265] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2694.804882][T23265] RIP: 0033:0x7f07d1466ba9 [ 2694.809334][T23265] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2694.829000][T23265] RSP: 002b:00007f07d07e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2694.837404][T23265] RAX: ffffffffffffffda RBX: 00007f07d1585f80 RCX: 00007f07d1466ba9 [ 2694.845416][T23265] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2694.853385][T23265] RBP: 00007f07d14b247a R08: 0000000000000438 R09: 0000000000000000 [ 2694.861348][T23265] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2694.869312][T23265] R13: 000000000000000b R14: 00007f07d1585f80 R15: 00007fffaf03b828 [ 2694.877291][T23265] [ 2694.880481][T23265] memory: usage 307196kB, limit 307200kB, failcnt 206709 [ 2694.887824][T23265] memory+swap: usage 307708kB, limit 9007199254740988kB, failcnt 0 [ 2694.895739][T23265] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 2694.903112][T23265] Memory cgroup stats for /syz1: [ 2694.903316][T23265] cache 4096 [ 2694.911521][T23265] rss 28672 [ 2694.914678][T23265] shmem 0 [ 2694.917623][T23265] mapped_file 0 [ 2694.921082][T23265] dirty 0 [ 2694.924009][T23265] writeback 4096 [ 2694.927582][T23265] workingset_refault_anon 92205 [ 2694.932487][T23265] workingset_refault_file 314 [ 2694.937184][T23265] swap 520192 [ 2694.940457][T23265] swapcached 8192 [ 2694.944144][T23265] pgpgin 2002450 [ 2694.947736][T23265] pgpgout 2002441 [ 2694.951362][T23265] pgfault 2104516 [ 2694.955024][T23265] pgmajfault 40723 [ 2694.958767][T23265] inactive_anon 12288 [ 2694.962733][T23265] active_anon 20480 [ 2694.966586][T23265] inactive_file 0 [ 2694.970222][T23265] active_file 4096 [ 2694.973943][T23265] unevictable 0 [ 2694.977508][T23265] hierarchical_memory_limit 314572800 [ 2694.982960][T23265] hierarchical_memsw_limit 9223372036854771712 [ 2694.989140][T23265] total_cache 4096 [ 2694.992850][T23265] total_rss 28672 [ 2694.996497][T23265] total_shmem 0 [ 2695.000003][T23265] total_mapped_file 0 [ 2695.003973][T23265] total_dirty 0 [ 2695.007441][T23265] total_writeback 4096 [ 2695.011499][T23265] total_workingset_refault_anon 92205 [ 2695.016889][T23265] total_workingset_refault_file 314 [ 2695.022079][T23265] total_swap 520192 [ 2695.025943][T23265] total_swapcached 8192 [ 2695.030190][T23265] total_pgpgin 2002450 [ 2695.034254][T23265] total_pgpgout 2002441 [ 2695.038501][T23265] total_pgfault 2104516 [ 2695.042646][T23265] total_pgmajfault 40723 [ 2695.046947][T23265] total_inactive_anon 12288 [ 2695.051535][T23265] total_active_anon 20480 [ 2695.055855][T23265] total_inactive_file 0 [ 2695.060118][T23265] total_active_file 4096 [ 2695.064352][T23265] total_unevictable 0 [ 2695.068413][T23265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23264,uid=0 [ 2695.083724][T23265] Memory cgroup out of memory: Killed process 23264 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:57:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x600000000000000) 03:57:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x88480000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x68000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x700000000000000) 03:57:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x6c000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2695.350882][T23293] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x900000000000000) 03:57:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x74000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2695.417368][T23304] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2696.204797][T23286] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2696.216188][T23286] CPU: 1 PID: 23286 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2696.226605][T23286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2696.236659][T23286] Call Trace: [ 2696.239931][T23286] [ 2696.242882][T23286] dump_stack_lvl+0xda/0x130 [ 2696.247600][T23286] dump_stack+0x15/0x20 [ 2696.251798][T23286] dump_header+0x82/0x2d0 [ 2696.256179][T23286] oom_kill_process+0x33a/0x4c0 [ 2696.261031][T23286] out_of_memory+0x9ca/0xbf0 [ 2696.265626][T23286] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2696.271710][T23286] mem_cgroup_out_of_memory+0x139/0x190 [ 2696.277350][T23286] try_charge_memcg+0x75c/0xd30 [ 2696.282212][T23286] ? __swap_duplicate+0x29b/0x2b0 [ 2696.287305][T23286] ? radix_tree_lookup+0xf9/0x150 [ 2696.292331][T23286] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2696.298406][T23286] __read_swap_cache_async+0x2f6/0x550 [ 2696.303974][T23286] swap_cluster_readahead+0x27c/0x4c0 [ 2696.309426][T23286] shmem_swapin_folio+0x343/0x830 [ 2696.314586][T23286] shmem_get_folio_gfp+0x242/0xb40 [ 2696.319739][T23286] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 2696.326454][T23286] shmem_fault+0x100/0x250 [ 2696.330863][T23286] ? put_swap_device+0xb0/0xb0 [ 2696.335638][T23286] handle_mm_fault+0x17db/0x2dd0 [ 2696.340603][T23286] exc_page_fault+0x3ff/0x6c0 [ 2696.345370][T23286] asm_exc_page_fault+0x26/0x30 [ 2696.350437][T23286] RIP: 0033:0x7f50c0f52226 [ 2696.354862][T23286] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 2696.374523][T23286] RSP: 002b:00007ffd61c03b68 EFLAGS: 00010287 [ 2696.380695][T23286] RAX: 0000001b2d021000 RBX: 00007f50c10c7018 RCX: 0000001b2d020000 [ 2696.388715][T23286] RDX: 0000001b2d021004 RSI: 0000000080000000 RDI: 00000000814b9b58 [ 2696.396687][T23286] RBP: 00000000814b9b58 R08: 0000001b2d420000 R09: 0000000000001b58 [ 2696.404650][T23286] R10: 00000000814b9b5c R11: 000000000007fc7a R12: 00000000000075a4 [ 2696.412616][T23286] R13: 0000000000000001 R14: 00007f50c10bb000 R15: ffffffff814b91b0 [ 2696.420576][T23286] ? vma_interval_tree_iter_next+0x120/0x250 [ 2696.426656][T23286] [ 2696.429817][T23286] memory: usage 307200kB, limit 307200kB, failcnt 57631 [ 2696.436826][T23286] memory+swap: usage 311724kB, limit 9007199254740988kB, failcnt 0 [ 2696.444760][T23286] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2696.452070][T23286] Memory cgroup stats for /syz4: [ 2696.452342][T23286] cache 12288 [ 2696.460753][T23286] rss 8192 [ 2696.463818][T23286] shmem 0 [ 2696.466783][T23286] mapped_file 0 [ 2696.470280][T23286] dirty 0 [ 2696.473244][T23286] writeback 8192 [ 2696.476930][T23286] workingset_refault_anon 66820 [ 2696.481812][T23286] workingset_refault_file 309 [ 2696.486542][T23286] swap 4632576 [ 2696.490021][T23286] swapcached 8192 [ 2696.493782][T23286] pgpgin 894620 [ 2696.497299][T23286] pgpgout 894615 [ 2696.500850][T23286] pgfault 978702 [ 2696.504485][T23286] pgmajfault 34898 [ 2696.508220][T23286] inactive_anon 0 [ 2696.511832][T23286] active_anon 0 [ 2696.515268][T23286] inactive_file 12288 [ 2696.519298][T23286] active_file 0 [ 2696.522788][T23286] unevictable 0 [ 2696.526289][T23286] hierarchical_memory_limit 314572800 [ 2696.531711][T23286] hierarchical_memsw_limit 9223372036854771712 [ 2696.537894][T23286] total_cache 12288 [ 2696.541687][T23286] total_rss 8192 [ 2696.545249][T23286] total_shmem 0 [ 2696.548743][T23286] total_mapped_file 0 [ 2696.552724][T23286] total_dirty 0 [ 2696.556198][T23286] total_writeback 8192 [ 2696.560267][T23286] total_workingset_refault_anon 66820 [ 2696.565626][T23286] total_workingset_refault_file 309 [ 2696.570909][T23286] total_swap 4632576 [ 2696.574810][T23286] total_swapcached 8192 [ 2696.578976][T23286] total_pgpgin 894620 [ 2696.582979][T23286] total_pgpgout 894615 [ 2696.587050][T23286] total_pgfault 978702 [ 2696.591127][T23286] total_pgmajfault 34898 [ 2696.595441][T23286] total_inactive_anon 0 [ 2696.599612][T23286] total_active_anon 0 [ 2696.603633][T23286] total_inactive_file 12288 [ 2696.608207][T23286] total_active_file 0 [ 2696.612178][T23286] total_unevictable 0 [ 2696.616139][T23286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23288,uid=0 [ 2696.631520][T23286] Memory cgroup out of memory: Killed process 23288 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:9024kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2696.650483][T23298] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2696.661867][T23298] CPU: 1 PID: 23298 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2696.672286][T23298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2696.682341][T23298] Call Trace: [ 2696.685606][T23298] [ 2696.688546][T23298] dump_stack_lvl+0xda/0x130 [ 2696.693207][T23298] dump_stack+0x15/0x20 [ 2696.697376][T23298] dump_header+0x82/0x2d0 [ 2696.701780][T23298] oom_kill_process+0x33a/0x4c0 [ 2696.706632][T23298] out_of_memory+0x9ca/0xbf0 [ 2696.711225][T23298] mem_cgroup_out_of_memory+0x139/0x190 [ 2696.716761][T23298] try_charge_memcg+0x75c/0xd30 [ 2696.721699][T23298] ? __swap_duplicate+0x29b/0x2b0 [ 2696.726735][T23298] ? radix_tree_lookup+0xf9/0x150 [ 2696.731762][T23298] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2696.737858][T23298] __read_swap_cache_async+0x2f6/0x550 [ 2696.743320][T23298] swap_cluster_readahead+0x27c/0x4c0 [ 2696.748692][T23298] swapin_readahead+0xe9/0x7f0 [ 2696.753543][T23298] ? __filemap_get_folio+0x41a/0x5a0 [ 2696.758820][T23298] ? _raw_spin_unlock+0x26/0x40 [ 2696.763666][T23298] ? swap_cache_get_folio+0x6e/0x200 [ 2696.768948][T23298] do_swap_page+0x4a0/0x1670 [ 2696.773572][T23298] ? __rcu_read_lock+0x35/0x50 [ 2696.778330][T23298] ? pte_offset_map_nolock+0x124/0x1d0 [ 2696.783885][T23298] handle_mm_fault+0xa36/0x2dd0 [ 2696.788754][T23298] exc_page_fault+0x3ff/0x6c0 [ 2696.793515][T23298] asm_exc_page_fault+0x26/0x30 [ 2696.798470][T23298] RIP: 0033:0x7f07d1420d4b [ 2696.802874][T23298] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2696.822492][T23298] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2696.828654][T23298] RAX: 0000000000000001 RBX: 00007f07d1585f80 RCX: 0000000000292340 [ 2696.836613][T23298] RDX: 00000000000000de RSI: 00007fffaf03b8f0 RDI: 00007f07d1585f80 [ 2696.844597][T23298] RBP: 00007f07d1587980 R08: 0000000000000010 R09: 00007fffaf1110b0 [ 2696.852576][T23298] R10: 00007fffaf111080 R11: 000000000007fc84 R12: 000000000029241d [ 2696.860551][T23298] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 00000000002920dc [ 2696.868677][T23298] [ 2696.871795][T23298] memory: usage 307200kB, limit 307200kB, failcnt 206857 [ 2696.879034][T23298] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 2696.886991][T23298] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2696.894458][T23298] Memory cgroup stats for /syz1: [ 2696.894649][T23298] cache 4096 [ 2696.902910][T23298] rss 8192 [ 2696.905960][T23298] shmem 0 [ 2696.908958][T23298] mapped_file 0 [ 2696.912490][T23298] dirty 0 [ 2696.915552][T23298] writeback 0 [ 2696.918886][T23298] workingset_refault_anon 92255 [ 2696.923732][T23298] workingset_refault_file 314 [ 2696.928446][T23298] swap 544768 [ 2696.931756][T23298] swapcached 8192 [ 2696.935426][T23298] pgpgin 2002523 [ 2696.939079][T23298] pgpgout 2002520 [ 2696.942912][T23298] pgfault 2104729 [ 2696.946566][T23298] pgmajfault 40741 [ 2696.950312][T23298] inactive_anon 8192 [ 2696.954212][T23298] active_anon 0 [ 2696.957753][T23298] inactive_file 0 [ 2696.961439][T23298] active_file 4096 [ 2696.965151][T23298] unevictable 0 [ 2696.968626][T23298] hierarchical_memory_limit 314572800 [ 2696.973992][T23298] hierarchical_memsw_limit 9223372036854771712 [ 2696.980169][T23298] total_cache 4096 [ 2696.983884][T23298] total_rss 8192 [ 2696.987458][T23298] total_shmem 0 [ 2696.990915][T23298] total_mapped_file 0 [ 2696.994916][T23298] total_dirty 0 [ 2696.998394][T23298] total_writeback 0 [ 2697.002262][T23298] total_workingset_refault_anon 92255 [ 2697.007649][T23298] total_workingset_refault_file 314 [ 2697.012911][T23298] total_swap 544768 [ 2697.016747][T23298] total_swapcached 8192 [ 2697.020987][T23298] total_pgpgin 2002523 [ 2697.025084][T23298] total_pgpgout 2002520 [ 2697.029271][T23298] total_pgfault 2104729 [ 2697.033426][T23298] total_pgmajfault 40741 [ 2697.037703][T23298] total_inactive_anon 8192 [ 2697.042176][T23298] total_active_anon 0 [ 2697.046149][T23298] total_inactive_file 0 [ 2697.050342][T23298] total_active_file 4096 [ 2697.054631][T23298] total_unevictable 0 [ 2697.058632][T23298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23298,uid=0 [ 2697.073994][T23298] Memory cgroup out of memory: Killed process 23298 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2697.091378][T23291] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2697.105059][T23291] CPU: 0 PID: 23291 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2697.115481][T23291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2697.125594][T23291] Call Trace: [ 2697.128875][T23291] [ 2697.131811][T23291] dump_stack_lvl+0xda/0x130 [ 2697.136417][T23291] dump_stack+0x15/0x20 [ 2697.140589][T23291] dump_header+0x82/0x2d0 [ 2697.144956][T23291] oom_kill_process+0x33a/0x4c0 [ 2697.149822][T23291] out_of_memory+0x9ca/0xbf0 [ 2697.154442][T23291] mem_cgroup_out_of_memory+0x139/0x190 [ 2697.160094][T23291] try_charge_memcg+0x75c/0xd30 [ 2697.164951][T23291] obj_cgroup_charge_pages+0xab/0x130 [ 2697.170425][T23291] __memcg_kmem_charge_page+0x9c/0x170 [ 2697.175942][T23291] __alloc_pages+0x1bb/0x340 [ 2697.180650][T23291] alloc_pages_mpol+0xb1/0x1d0 [ 2697.185457][T23291] alloc_pages+0xe0/0x100 [ 2697.189818][T23291] __vmalloc_node_range+0x6d2/0xea0 [ 2697.195058][T23291] kvmalloc_node+0x121/0x160 [ 2697.199680][T23291] ? xt_alloc_table_info+0x3d/0x80 [ 2697.204820][T23291] xt_alloc_table_info+0x3d/0x80 [ 2697.209833][T23291] do_arpt_set_ctl+0x634/0x13b0 [ 2697.214690][T23291] ? __futex_wait+0x227/0x280 [ 2697.219363][T23291] ? __futex_wake_mark+0x70/0x70 [ 2697.224390][T23291] ? tcp_release_cb+0xfe/0x370 [ 2697.229155][T23291] ? _raw_spin_unlock_bh+0x36/0x40 [ 2697.234324][T23291] nf_setsockopt+0x18d/0x1b0 [ 2697.238957][T23291] ip_setsockopt+0xe6/0x100 [ 2697.243562][T23291] tcp_setsockopt+0x90/0xa0 [ 2697.248119][T23291] sock_common_setsockopt+0x61/0x70 [ 2697.254982][T23291] ? sock_common_recvmsg+0xe0/0xe0 [ 2697.260630][T23291] __sys_setsockopt+0x1d4/0x240 [ 2697.265609][T23291] __x64_sys_setsockopt+0x66/0x80 [ 2697.270854][T23291] do_syscall_64+0x44/0x110 [ 2697.275404][T23291] ? syscall_exit_to_user_mode+0x38/0x140 [ 2697.281163][T23291] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2697.287064][T23291] RIP: 0033:0x7f50c0fa7ba9 [ 2697.291556][T23291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2697.311426][T23291] RSP: 002b:00007f50c032a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2697.319834][T23291] RAX: ffffffffffffffda RBX: 00007f50c10c6f80 RCX: 00007f50c0fa7ba9 [ 2697.328069][T23291] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 2697.336303][T23291] RBP: 00007f50c0ff347a R08: 0000000000000438 R09: 0000000000000000 [ 2697.344305][T23291] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 2697.352600][T23291] R13: 000000000000000b R14: 00007f50c10c6f80 R15: 00007ffd61c03b28 [ 2697.360676][T23291] [ 2697.363985][T23291] memory: usage 307200kB, limit 307200kB, failcnt 103560 [ 2697.371076][T23291] memory+swap: usage 309052kB, limit 9007199254740988kB, failcnt 0 [ 2697.379007][T23291] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2697.386317][T23291] Memory cgroup stats for /syz3: [ 2697.389771][T23291] cache 16384 [ 2697.398217][T23291] rss 8192 [ 2697.401436][T23291] shmem 0 [ 2697.404387][T23291] mapped_file 0 [ 2697.407888][T23291] dirty 4096 [ 2697.411284][T23291] writeback 0 [ 2697.414704][T23291] workingset_refault_anon 76789 [ 2697.419673][T23291] workingset_refault_file 320 [ 2697.424436][T23291] swap 1896448 [ 2697.427836][T23291] swapcached 4096 [ 2697.431511][T23291] pgpgin 381227 [ 2697.434995][T23291] pgpgout 381221 [ 2697.438906][T23291] pgfault 572033 [ 2697.442446][T23291] pgmajfault 40516 [ 2697.446284][T23291] inactive_anon 8192 [ 2697.450265][T23291] active_anon 0 [ 2697.453733][T23291] inactive_file 4096 [ 2697.457699][T23291] active_file 12288 [ 2697.461501][T23291] unevictable 0 [ 2697.465045][T23291] hierarchical_memory_limit 314572800 [ 2697.470451][T23291] hierarchical_memsw_limit 9223372036854771712 [ 2697.476814][T23291] total_cache 16384 [ 2697.480682][T23291] total_rss 8192 [ 2697.484338][T23291] total_shmem 0 [ 2697.487861][T23291] total_mapped_file 0 [ 2697.491851][T23291] total_dirty 4096 [ 2697.495848][T23291] total_writeback 0 [ 2697.499741][T23291] total_workingset_refault_anon 76789 [ 2697.505327][T23291] total_workingset_refault_file 320 [ 2697.510604][T23291] total_swap 1896448 [ 2697.514522][T23291] total_swapcached 4096 [ 2697.518821][T23291] total_pgpgin 381227 [ 2697.522861][T23291] total_pgpgout 381221 [ 2697.526981][T23291] total_pgfault 572033 [ 2697.531128][T23291] total_pgmajfault 40516 [ 2697.535348][T23291] total_inactive_anon 8192 [ 2697.539826][T23291] total_active_anon 0 [ 2697.543804][T23291] total_inactive_file 4096 [ 2697.548501][T23291] total_active_file 12288 [ 2697.552869][T23291] total_unevictable 0 03:57:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xb00000000000000) 03:57:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) [ 2697.556876][T23291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23286,uid=0 [ 2697.572208][T23291] Memory cgroup out of memory: Killed process 23286 (syz-executor.3) total-vm:46432kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:57:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7a000000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xf00000000000000) 03:57:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x2000000000000000) [ 2697.823311][T23320] validate_nla: 11 callbacks suppressed [ 2697.823325][T23320] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2697.841972][T23323] __nla_validate_parse: 1 callbacks suppressed [ 2697.841984][T23323] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2697.858181][T23325] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:57:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0x7e450000, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xda45000000000000) [ 2697.941268][T23330] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2697.964254][T23335] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2697.974547][T23333] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2698.018568][T23337] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2698.502249][T23317] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2698.513686][T23317] CPU: 1 PID: 23317 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2698.524279][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2698.534339][T23317] Call Trace: [ 2698.537621][T23317] [ 2698.540552][T23317] dump_stack_lvl+0xda/0x130 [ 2698.545168][T23317] dump_stack+0x15/0x20 [ 2698.549332][T23317] dump_header+0x82/0x2d0 [ 2698.553710][T23317] oom_kill_process+0x33a/0x4c0 [ 2698.558618][T23317] out_of_memory+0x9ca/0xbf0 [ 2698.563355][T23317] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2698.569495][T23317] mem_cgroup_out_of_memory+0x139/0x190 [ 2698.575104][T23317] try_charge_memcg+0x75c/0xd30 [ 2698.580029][T23317] ? __swap_duplicate+0x29b/0x2b0 [ 2698.585115][T23317] ? radix_tree_lookup+0xf9/0x150 [ 2698.590228][T23317] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2698.596480][T23317] __read_swap_cache_async+0x2f6/0x550 [ 2698.601951][T23317] swap_cluster_readahead+0x27c/0x4c0 [ 2698.607598][T23317] swapin_readahead+0xe9/0x7f0 [ 2698.612495][T23317] ? __filemap_get_folio+0x41a/0x5a0 [ 2698.617800][T23317] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 2698.623582][T23317] ? swap_cache_get_folio+0x6e/0x200 [ 2698.628887][T23317] do_swap_page+0x4a0/0x1670 [ 2698.633799][T23317] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2698.639136][T23317] ? __rcu_read_lock+0x35/0x50 [ 2698.643955][T23317] ? pte_offset_map_nolock+0x124/0x1d0 [ 2698.649424][T23317] handle_mm_fault+0xa36/0x2dd0 [ 2698.654450][T23317] exc_page_fault+0x3ff/0x6c0 [ 2698.659131][T23317] asm_exc_page_fault+0x26/0x30 [ 2698.663989][T23317] RIP: 0033:0x7f07d1420bc4 [ 2698.668511][T23317] Code: 01 00 00 69 3d e9 ea c8 00 e8 03 00 00 48 8d 1d d2 53 16 00 e8 7d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 2698.688141][T23317] RSP: 002b:00007fffaf03b910 EFLAGS: 00010202 [ 2698.694279][T23317] RAX: 0000000000000000 RBX: 00007f07d1585f80 RCX: 0000000000000000 [ 2698.702375][T23317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555595b788 [ 2698.710365][T23317] RBP: 00007f07d1587980 R08: 0000000000000000 R09: 00007fffaf1110b0 [ 2698.718439][T23317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000292d02 [ 2698.726486][T23317] R13: ffffffffffffffff R14: 00007f07d0fea000 R15: 00000000002929c1 [ 2698.734484][T23317] [ 2698.737727][T23317] memory: usage 307200kB, limit 307200kB, failcnt 207096 [ 2698.745036][T23317] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2698.753453][T23317] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2698.760885][T23317] Memory cgroup stats for /syz1: [ 2698.763011][T23317] cache 4096 [ 2698.771622][T23317] rss 8192 [ 2698.774725][T23317] shmem 0 [ 2698.777748][T23317] mapped_file 0 [ 2698.781216][T23317] dirty 0 [ 2698.784152][T23317] writeback 16384 [ 2698.787837][T23317] workingset_refault_anon 92285 [ 2698.792721][T23317] workingset_refault_file 314 [ 2698.797421][T23317] swap 536576 [ 2698.800786][T23317] swapcached 16384 [ 2698.804585][T23317] pgpgin 2002576 [ 2698.808140][T23317] pgpgout 2002571 [ 2698.811765][T23317] pgfault 2104937 [ 2698.815423][T23317] pgmajfault 40752 [ 2698.819283][T23317] inactive_anon 0 [ 2698.822990][T23317] active_anon 0 [ 2698.826569][T23317] inactive_file 4096 [ 2698.830464][T23317] active_file 0 [ 2698.834065][T23317] unevictable 0 [ 2698.837598][T23317] hierarchical_memory_limit 314572800 [ 2698.843063][T23317] hierarchical_memsw_limit 9223372036854771712 [ 2698.849439][T23317] total_cache 4096 [ 2698.853181][T23317] total_rss 8192 [ 2698.856755][T23317] total_shmem 0 [ 2698.860233][T23317] total_mapped_file 0 [ 2698.864218][T23317] total_dirty 0 [ 2698.867696][T23317] total_writeback 16384 [ 2698.871858][T23317] total_workingset_refault_anon 92285 [ 2698.877243][T23317] total_workingset_refault_file 314 [ 2698.882436][T23317] total_swap 536576 [ 2698.886290][T23317] total_swapcached 16384 [ 2698.890525][T23317] total_pgpgin 2002576 [ 2698.894608][T23317] total_pgpgout 2002571 [ 2698.898825][T23317] total_pgfault 2104937 [ 2698.903063][T23317] total_pgmajfault 40752 [ 2698.907439][T23317] total_inactive_anon 0 [ 2698.911587][T23317] total_active_anon 0 [ 2698.915596][T23317] total_inactive_file 4096 [ 2698.920044][T23317] total_active_file 0 [ 2698.924014][T23317] total_unevictable 0 [ 2698.928042][T23317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23317,uid=0 [ 2698.943511][T23317] Memory cgroup out of memory: Killed process 23317 (syz-executor.1) total-vm:46300kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2698.961299][T23324] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2698.972648][T23324] CPU: 1 PID: 23324 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 2698.983064][T23324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2698.993145][T23324] Call Trace: [ 2698.996425][T23324] [ 2698.999437][T23324] dump_stack_lvl+0xda/0x130 [ 2699.004048][T23324] dump_stack+0x15/0x20 [ 2699.008289][T23324] dump_header+0x82/0x2d0 [ 2699.012613][T23324] oom_kill_process+0x33a/0x4c0 [ 2699.017499][T23324] out_of_memory+0x9ca/0xbf0 [ 2699.022176][T23324] mem_cgroup_out_of_memory+0x139/0x190 [ 2699.027803][T23324] try_charge_memcg+0x75c/0xd30 [ 2699.032689][T23324] ? __swap_duplicate+0x29b/0x2b0 [ 2699.037738][T23324] ? radix_tree_lookup+0xf9/0x150 [ 2699.042834][T23324] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 2699.048952][T23324] __read_swap_cache_async+0x2f6/0x550 [ 2699.054399][T23324] swap_cluster_readahead+0x27c/0x4c0 [ 2699.059782][T23324] swapin_readahead+0xe9/0x7f0 [ 2699.064541][T23324] ? __filemap_get_folio+0x41a/0x5a0 [ 2699.069850][T23324] ? _raw_spin_unlock+0x26/0x40 [ 2699.074740][T23324] ? swap_cache_get_folio+0x6e/0x200 [ 2699.080013][T23324] do_swap_page+0x4a0/0x1670 [ 2699.084621][T23324] ? __rcu_read_lock+0x35/0x50 [ 2699.089501][T23324] ? pte_offset_map_nolock+0x124/0x1d0 [ 2699.095028][T23324] handle_mm_fault+0xa36/0x2dd0 [ 2699.099875][T23324] exc_page_fault+0x3ff/0x6c0 [ 2699.104572][T23324] asm_exc_page_fault+0x26/0x30 [ 2699.109497][T23324] RIP: 0033:0x7ffbf06ced4b [ 2699.113923][T23324] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d be f3 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 2699.133581][T23324] RSP: 002b:00007ffc3358ca50 EFLAGS: 00010202 [ 2699.139630][T23324] RAX: 0000000000000001 RBX: 00007ffbf0833f80 RCX: 0000000000292b10 [ 2699.147637][T23324] RDX: 00000000000002c4 RSI: 00007ffc3358ca30 RDI: 00007ffbf0833f80 [ 2699.155630][T23324] RBP: 00007ffbf0835980 R08: 0000000000000010 R09: 00007ffc335ae0b0 [ 2699.163601][T23324] R10: 00007ffc335ae080 R11: 000000000007fe48 R12: 0000000000292dd3 [ 2699.171670][T23324] R13: ffffffffffffffff R14: 00007ffbf0298000 R15: 0000000000292a92 [ 2699.179646][T23324] [ 2699.182763][T23324] memory: usage 307188kB, limit 307200kB, failcnt 57774 [ 2699.189791][T23324] memory+swap: usage 311684kB, limit 9007199254740988kB, failcnt 0 [ 2699.197715][T23324] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 2699.205008][T23324] Memory cgroup stats for /syz4: [ 2699.205502][T23324] cache 12288 [ 2699.215341][T23324] rss 8192 [ 2699.218379][T23324] shmem 0 [ 2699.221306][T23324] mapped_file 0 [ 2699.224839][T23324] dirty 0 [ 2699.227820][T23324] writeback 0 [ 2699.231092][T23324] workingset_refault_anon 66858 [ 2699.235937][T23324] workingset_refault_file 309 [ 2699.240680][T23324] swap 4603904 [ 2699.244080][T23324] swapcached 32768 [ 2699.247844][T23324] pgpgin 894680 [ 2699.251289][T23324] pgpgout 894668 [ 2699.254885][T23324] pgfault 978964 [ 2699.258473][T23324] pgmajfault 34910 [ 2699.262184][T23324] inactive_anon 32768 [ 2699.266154][T23324] active_anon 4096 [ 2699.269907][T23324] inactive_file 8192 [ 2699.273904][T23324] active_file 4096 [ 2699.277643][T23324] unevictable 0 [ 2699.281206][T23324] hierarchical_memory_limit 314572800 [ 2699.286591][T23324] hierarchical_memsw_limit 9223372036854771712 [ 2699.292735][T23324] total_cache 12288 [ 2699.296566][T23324] total_rss 8192 [ 2699.300173][T23324] total_shmem 0 [ 2699.303729][T23324] total_mapped_file 0 [ 2699.307740][T23324] total_dirty 0 [ 2699.311198][T23324] total_writeback 0 [ 2699.315004][T23324] total_workingset_refault_anon 66858 [ 2699.320422][T23324] total_workingset_refault_file 309 [ 2699.325615][T23324] total_swap 4603904 [ 2699.329528][T23324] total_swapcached 32768 [ 2699.333766][T23324] total_pgpgin 894680 [ 2699.337780][T23324] total_pgpgout 894668 [ 2699.341842][T23324] total_pgfault 978964 [ 2699.345948][T23324] total_pgmajfault 34910 [ 2699.350216][T23324] total_inactive_anon 32768 03:57:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffea}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xeaffffff, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xeaffffff00000000) [ 2699.354799][T23324] total_active_anon 4096 [ 2699.359092][T23324] total_inactive_file 8192 [ 2699.363506][T23324] total_active_file 4096 [ 2699.367880][T23324] total_unevictable 0 [ 2699.371875][T23324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23324,uid=0 [ 2699.387240][T23324] Memory cgroup out of memory: Killed process 23324 (syz-executor.4) total-vm:46300kB, anon-rss:452kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2699.433419][T23340] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2699.443033][T23341] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2699.458383][T23345] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 03:57:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write(0xffffffffffffffff, &(0x7f00000000c0)='{', 0xfffffe1e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x1, 0x6, 0x8}, [], "", ['\x00']}, 0x140) 03:57:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xf0ffffff, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xf0ffffff00000000) 03:57:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2b, 0x18, 0x1, 0x0, 0xfeffffff, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 03:57:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x19, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0xfeffffff00000000) [ 2699.628447][T23352] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2699.651255][T23353] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2699.661847][T23351] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2699.696560][T23358] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2699.706024][T23361] netlink: 'syz-executor.5': attribute type 1 has an invalid length.