) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:18:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x36, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:18:57 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000000240)=@newtaction={0x14}, 0x14}}, 0x0) 02:18:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 02:18:57 executing program 2: r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 02:18:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)='}', 0x1}], 0x1, &(0x7f0000000880)=[{0x10}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 02:18:57 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') 02:18:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000100)=@framed={{}, [@func]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:18:57 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) 02:18:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x8001) [ 657.810292][T12286] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 657.823802][T12286] CPU: 0 PID: 12286 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 657.832508][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 657.842564][T12286] Call Trace: [ 657.845838][T12286] [ 657.848784][T12286] dump_stack_lvl+0xda/0x130 [ 657.853379][T12286] dump_stack+0x15/0x20 [ 657.857547][T12286] dump_header+0x95/0x3c0 [ 657.862013][T12286] oom_kill_process+0xe3/0x3e0 [ 657.866891][T12286] out_of_memory+0x9ca/0xc00 [ 657.871616][T12286] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 657.877681][T12286] mem_cgroup_out_of_memory+0x139/0x190 [ 657.883273][T12286] try_charge_memcg+0x75c/0xd20 [ 657.888164][T12286] obj_cgroup_charge_pages+0xab/0x130 [ 657.893624][T12286] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 657.899316][T12286] __alloc_pages+0x1bb/0x340 [ 657.904078][T12286] alloc_pages+0x3e1/0x4e0 [ 657.908522][T12286] __vmalloc_node_range+0x6d2/0xea0 [ 657.913727][T12286] kvmalloc_node+0x121/0x160 [ 657.918327][T12286] ? xt_alloc_table_info+0x3d/0x80 [ 657.923504][T12286] xt_alloc_table_info+0x3d/0x80 [ 657.928531][T12286] do_arpt_set_ctl+0x615/0x1390 [ 657.933390][T12286] ? futex_unqueue+0xba/0xe0 [ 657.937999][T12286] ? futex_wait+0x3c3/0x410 [ 657.942565][T12286] ? _raw_spin_unlock_bh+0x36/0x40 [ 657.947723][T12286] ? lock_sock_nested+0x10e/0x130 [ 657.952743][T12286] ? tcp_release_cb+0xfe/0x340 [ 657.957516][T12286] nf_setsockopt+0x18d/0x1b0 [ 657.962173][T12286] ip_setsockopt+0xe6/0x100 [ 657.966684][T12286] tcp_setsockopt+0x90/0xa0 [ 657.971711][T12286] sock_common_setsockopt+0x61/0x70 [ 657.976929][T12286] ? sock_common_recvmsg+0xe0/0xe0 [ 657.982094][T12286] __sys_setsockopt+0x1c9/0x230 [ 657.986971][T12286] __x64_sys_setsockopt+0x66/0x80 [ 657.992100][T12286] do_syscall_64+0x41/0xc0 [ 657.996516][T12286] ? syscall_exit_to_user_mode+0x26/0x140 [ 658.002377][T12286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 658.008270][T12286] RIP: 0033:0x7fb036ae7389 [ 658.012766][T12286] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 658.032781][T12286] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 658.041204][T12286] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 658.049205][T12286] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 658.057360][T12286] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 658.065435][T12286] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.073658][T12286] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 658.081683][T12286] [ 658.084776][T12286] memory: usage 307188kB, limit 307200kB, failcnt 56654 [ 658.091728][T12286] memory+swap: usage 307960kB, limit 9007199254740988kB, failcnt 0 [ 658.099674][T12286] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 658.107011][T12286] Memory cgroup stats for /syz1: [ 658.108138][T12286] cache 0 [ 658.116232][T12286] rss 12288 [ 658.119391][T12286] shmem 0 [ 658.122312][T12286] mapped_file 0 [ 658.125744][T12286] dirty 0 [ 658.128687][T12286] writeback 0 [ 658.132111][T12286] workingset_refault_anon 17522 [ 658.137035][T12286] workingset_refault_file 5389 [ 658.141809][T12286] swap 790528 [ 658.145083][T12286] pgpgin 105985 [ 658.148546][T12286] pgpgout 105982 [ 658.152092][T12286] pgfault 79979 [ 658.155527][T12286] pgmajfault 7866 [ 658.159164][T12286] inactive_anon 8192 [ 658.163096][T12286] active_anon 4096 [ 658.166830][T12286] inactive_file 0 [ 658.170459][T12286] active_file 0 [ 658.174015][T12286] unevictable 0 [ 658.177502][T12286] hierarchical_memory_limit 314572800 [ 658.182860][T12286] hierarchical_memsw_limit 9223372036854771712 [ 658.189013][T12286] total_cache 0 [ 658.192457][T12286] total_rss 12288 [ 658.196142][T12286] total_shmem 0 [ 658.199662][T12286] total_mapped_file 0 [ 658.203690][T12286] total_dirty 0 [ 658.207279][T12286] total_writeback 0 [ 658.211071][T12286] total_workingset_refault_anon 17522 [ 658.216463][T12286] total_workingset_refault_file 5389 [ 658.221750][T12286] total_swap 790528 [ 658.225545][T12286] total_pgpgin 105985 [ 658.229592][T12286] total_pgpgout 105982 [ 658.233687][T12286] total_pgfault 79979 [ 658.237719][T12286] total_pgmajfault 7866 [ 658.241866][T12286] total_inactive_anon 8192 [ 658.246310][T12286] total_active_anon 4096 [ 658.250557][T12286] total_inactive_file 0 [ 658.254706][T12286] total_active_file 0 [ 658.258694][T12286] total_unevictable 0 [ 658.262708][T12286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12283,uid=0 [ 658.278338][T12286] Memory cgroup out of memory: Killed process 12283 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:18:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x11}, 0x48) 02:18:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 02:18:58 executing program 2: syz_io_uring_setup(0x3179, &(0x7f0000000100)={0x0, 0x0, 0x26}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 02:18:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xcd22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:18:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x48) 02:18:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:18:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 02:18:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8924, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 02:18:58 executing program 2: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x40305829, 0x0) 02:18:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 02:18:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x0, 0xac}, 0x20) 02:18:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 02:18:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004cc0)=[{{&(0x7f0000004b00), 0x6e, 0x0}}], 0x1, 0x22, &(0x7f0000004d00)) [ 659.063405][T12317] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 659.076985][T12317] CPU: 0 PID: 12317 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 659.085682][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 659.095851][T12317] Call Trace: [ 659.099140][T12317] [ 659.102185][T12317] dump_stack_lvl+0xda/0x130 [ 659.106791][T12317] dump_stack+0x15/0x20 [ 659.110948][T12317] dump_header+0x95/0x3c0 [ 659.115296][T12317] oom_kill_process+0xe3/0x3e0 [ 659.120193][T12317] out_of_memory+0x9ca/0xc00 [ 659.124893][T12317] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 659.131046][T12317] mem_cgroup_out_of_memory+0x139/0x190 [ 659.136695][T12317] try_charge_memcg+0x75c/0xd20 [ 659.141655][T12317] obj_cgroup_charge_pages+0xab/0x130 [ 659.147053][T12317] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 659.152779][T12317] __alloc_pages+0x1bb/0x340 [ 659.157549][T12317] alloc_pages+0x3e1/0x4e0 [ 659.162009][T12317] __vmalloc_node_range+0x6d2/0xea0 [ 659.167274][T12317] kvmalloc_node+0x121/0x160 [ 659.171888][T12317] ? xt_alloc_table_info+0x3d/0x80 [ 659.177117][T12317] xt_alloc_table_info+0x3d/0x80 [ 659.182119][T12317] do_arpt_set_ctl+0x615/0x1390 [ 659.187136][T12317] ? futex_unqueue+0xba/0xe0 [ 659.191774][T12317] ? futex_wait+0x3c3/0x410 [ 659.196281][T12317] ? _raw_spin_unlock_bh+0x36/0x40 [ 659.201578][T12317] ? lock_sock_nested+0x10e/0x130 [ 659.206664][T12317] ? tcp_release_cb+0xfe/0x340 [ 659.211487][T12317] nf_setsockopt+0x18d/0x1b0 [ 659.216073][T12317] ip_setsockopt+0xe6/0x100 [ 659.220596][T12317] tcp_setsockopt+0x90/0xa0 [ 659.225159][T12317] sock_common_setsockopt+0x61/0x70 [ 659.230442][T12317] ? sock_common_recvmsg+0xe0/0xe0 [ 659.235692][T12317] __sys_setsockopt+0x1c9/0x230 [ 659.240549][T12317] __x64_sys_setsockopt+0x66/0x80 [ 659.245647][T12317] do_syscall_64+0x41/0xc0 [ 659.250167][T12317] ? syscall_exit_to_user_mode+0x26/0x140 [ 659.256033][T12317] entry_SYSCALL_64_after_hwframe+0x63/0xcd 02:18:59 executing program 5: r0 = socket(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8000) [ 659.262009][T12317] RIP: 0033:0x7fb036ae7389 [ 659.266417][T12317] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 659.286102][T12317] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 659.294523][T12317] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 659.302513][T12317] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 659.310549][T12317] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 659.318531][T12317] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.326518][T12317] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 659.334551][T12317] [ 659.337697][T12317] memory: usage 307188kB, limit 307200kB, failcnt 56842 [ 659.344638][T12317] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 659.352931][T12317] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 659.360327][T12317] Memory cgroup stats for /syz1: [ 659.363113][T12317] cache 0 [ 659.370982][T12317] rss 4096 [ 659.373987][T12317] shmem 0 [ 659.376937][T12317] mapped_file 0 [ 659.380434][T12317] dirty 0 [ 659.383362][T12317] writeback 0 [ 659.386658][T12317] workingset_refault_anon 17585 [ 659.391491][T12317] workingset_refault_file 5389 [ 659.396254][T12317] swap 733184 [ 659.399587][T12317] pgpgin 106074 [ 659.403040][T12317] pgpgout 106073 [ 659.406593][T12317] pgfault 80118 [ 659.410110][T12317] pgmajfault 7890 [ 659.413758][T12317] inactive_anon 4096 [ 659.417736][T12317] active_anon 0 [ 659.421241][T12317] inactive_file 0 [ 659.424876][T12317] active_file 0 [ 659.428361][T12317] unevictable 0 [ 659.431877][T12317] hierarchical_memory_limit 314572800 [ 659.437301][T12317] hierarchical_memsw_limit 9223372036854771712 [ 659.443440][T12317] total_cache 0 [ 659.446969][T12317] total_rss 4096 [ 659.450497][T12317] total_shmem 0 [ 659.453951][T12317] total_mapped_file 0 [ 659.457950][T12317] total_dirty 0 [ 659.461398][T12317] total_writeback 0 [ 659.465185][T12317] total_workingset_refault_anon 17585 [ 659.470564][T12317] total_workingset_refault_file 5389 [ 659.475836][T12317] total_swap 733184 [ 659.479686][T12317] total_pgpgin 106074 [ 659.483650][T12317] total_pgpgout 106073 [ 659.487718][T12317] total_pgfault 80118 [ 659.491686][T12317] total_pgmajfault 7890 [ 659.495814][T12317] total_inactive_anon 4096 [ 659.500230][T12317] total_active_anon 0 [ 659.504196][T12317] total_inactive_file 0 [ 659.508366][T12317] total_active_file 0 [ 659.512354][T12317] total_unevictable 0 [ 659.516308][T12317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12315,uid=0 [ 659.531699][T12317] Memory cgroup out of memory: Killed process 12315 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:18:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x0) 02:18:59 executing program 4: unshare(0x20000080) 02:18:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xce22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:18:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x62, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:18:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000140)=""/237, 0xac, 0xed}, 0x20) 02:18:59 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 02:18:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000006f80)={0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000000000)={0x10}, 0x10}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000006f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x40}, 0x0) 02:18:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x20) 02:18:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:18:59 executing program 4: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000000)={0x0, 0x0, 0xac}, 0x20) 02:18:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:18:59 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 659.716898][T12344] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 02:18:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4}, {0x9}, {0x6, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000014c0)=""/42, 0x43, 0x2a, 0x1}, 0x20) 02:18:59 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000b80)='./binderfs2/custom1\x00') [ 660.302318][T12353] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 660.313734][T12353] CPU: 1 PID: 12353 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 660.322472][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 660.332513][T12353] Call Trace: [ 660.335782][T12353] [ 660.338704][T12353] dump_stack_lvl+0xda/0x130 [ 660.343508][T12353] dump_stack+0x15/0x20 [ 660.347729][T12353] dump_header+0x95/0x3c0 [ 660.352128][T12353] oom_kill_process+0xe3/0x3e0 [ 660.356910][T12353] out_of_memory+0x9ca/0xc00 [ 660.361510][T12353] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 660.367571][T12353] mem_cgroup_out_of_memory+0x139/0x190 [ 660.373158][T12353] try_charge_memcg+0x75c/0xd20 [ 660.378010][T12353] ? __alloc_pages+0x193/0x340 [ 660.382904][T12353] charge_memcg+0x51/0x200 [ 660.387380][T12353] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 660.393349][T12353] __read_swap_cache_async+0x2fe/0x560 [ 660.398811][T12353] swap_cluster_readahead+0x2a3/0x4f0 [ 660.404180][T12353] swapin_readahead+0x8d/0x700 [ 660.409016][T12353] ? __filemap_get_folio+0x47c/0x500 [ 660.414357][T12353] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 660.419903][T12353] ? swap_cache_get_folio+0x6e/0x210 [ 660.425186][T12353] do_swap_page+0x4d7/0x1550 [ 660.429842][T12353] ? pte_offset_map_nolock+0x11f/0x1c0 [ 660.435290][T12353] handle_mm_fault+0x9ec/0x2c10 [ 660.440188][T12353] ? mt_find+0x1d1/0x300 [ 660.444427][T12353] exc_page_fault+0x24d/0x650 [ 660.449259][T12353] asm_exc_page_fault+0x26/0x30 [ 660.454150][T12353] RIP: 0033:0x7fb036a9283c [ 660.458563][T12353] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 660.478154][T12353] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 660.484204][T12353] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 660.492156][T12353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.500183][T12353] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 660.508141][T12353] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a1487 [ 660.516131][T12353] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 660.524089][T12353] [ 660.527232][T12353] memory: usage 307200kB, limit 307200kB, failcnt 57027 [ 660.534165][T12353] memory+swap: usage 307992kB, limit 9007199254740988kB, failcnt 0 [ 660.542072][T12353] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 660.549396][T12353] Memory cgroup stats for /syz1: [ 660.551110][T12353] cache 0 [ 660.559054][T12353] rss 12288 [ 660.562277][T12353] shmem 0 [ 660.565208][T12353] mapped_file 0 [ 660.568686][T12353] dirty 0 [ 660.571685][T12353] writeback 0 [ 660.575015][T12353] workingset_refault_anon 17622 [ 660.579862][T12353] workingset_refault_file 5389 [ 660.584611][T12353] swap 811008 [ 660.587903][T12353] pgpgin 106137 [ 660.591394][T12353] pgpgout 106134 [ 660.594941][T12353] pgfault 80227 [ 660.598476][T12353] pgmajfault 7907 [ 660.602097][T12353] inactive_anon 0 [ 660.605722][T12353] active_anon 12288 [ 660.609750][T12353] inactive_file 0 [ 660.613384][T12353] active_file 0 [ 660.616850][T12353] unevictable 0 [ 660.620291][T12353] hierarchical_memory_limit 314572800 [ 660.625809][T12353] hierarchical_memsw_limit 9223372036854771712 [ 660.631981][T12353] total_cache 0 [ 660.635423][T12353] total_rss 12288 [ 660.639059][T12353] total_shmem 0 [ 660.642507][T12353] total_mapped_file 0 [ 660.646573][T12353] total_dirty 0 [ 660.650024][T12353] total_writeback 0 [ 660.653807][T12353] total_workingset_refault_anon 17622 [ 660.659277][T12353] total_workingset_refault_file 5389 [ 660.664595][T12353] total_swap 811008 [ 660.668428][T12353] total_pgpgin 106137 [ 660.672394][T12353] total_pgpgout 106134 [ 660.676437][T12353] total_pgfault 80227 [ 660.680416][T12353] total_pgmajfault 7907 [ 660.684681][T12353] total_inactive_anon 0 [ 660.688933][T12353] total_active_anon 12288 [ 660.693293][T12353] total_inactive_file 0 [ 660.697460][T12353] total_active_file 0 02:19:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 660.701512][T12353] total_unevictable 0 [ 660.705530][T12353] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12353,uid=0 [ 660.720886][T12353] Memory cgroup out of memory: Killed process 12353 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xcf22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:00 executing program 2: keyctl$KEYCTL_WATCH_KEY(0x4, 0x0, 0xffffffffffffffff, 0x0) 02:19:00 executing program 5: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x294e2880e2ef76b2) 02:19:00 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 02:19:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x4, 0x3}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 02:19:00 executing program 4: quotactl$Q_SETQUOTA(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='/dmv/'], 0x0, 0x0) 02:19:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 02:19:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 02:19:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:19:00 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) getrusage(0x1, &(0x7f0000000000)) 02:19:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, 0x0) [ 661.594572][T12371] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 661.604817][T12371] CPU: 1 PID: 12371 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 661.613498][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 661.623549][T12371] Call Trace: [ 661.626830][T12371] [ 661.629757][T12371] dump_stack_lvl+0xda/0x130 [ 661.634363][T12371] dump_stack+0x15/0x20 [ 661.638520][T12371] dump_header+0x95/0x3c0 [ 661.642861][T12371] oom_kill_process+0xe3/0x3e0 [ 661.647659][T12371] out_of_memory+0x9ca/0xc00 [ 661.652265][T12371] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 661.658342][T12371] mem_cgroup_out_of_memory+0x139/0x190 [ 661.663911][T12371] try_charge_memcg+0x75c/0xd20 [ 661.668864][T12371] ? read_pages+0x320/0x560 [ 661.673376][T12371] charge_memcg+0x51/0x200 [ 661.677802][T12371] __mem_cgroup_charge+0x29/0xa0 [ 661.682743][T12371] __filemap_add_folio+0x454/0x730 [ 661.687869][T12371] ? workingset_activation+0x2e0/0x2e0 [ 661.693341][T12371] filemap_add_folio+0x6f/0x150 [ 661.698194][T12371] filemap_get_pages+0x5cf/0xea0 [ 661.703239][T12371] filemap_splice_read+0x23a/0x810 [ 661.708367][T12371] ext4_file_splice_read+0x95/0xb0 [ 661.713494][T12371] ? ext4_release_file+0x1c0/0x1c0 [ 661.718613][T12371] splice_direct_to_actor+0x28c/0x690 [ 661.724005][T12371] ? direct_file_splice_eof+0x70/0x70 [ 661.729390][T12371] do_splice_direct+0x10d/0x190 [ 661.734260][T12371] ? do_splice_direct+0x190/0x190 [ 661.739300][T12371] do_sendfile+0x3b6/0x9a0 [ 661.743726][T12371] __x64_sys_sendfile64+0x110/0x150 [ 661.748935][T12371] do_syscall_64+0x41/0xc0 [ 661.753355][T12371] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.759258][T12371] RIP: 0033:0x7f074fb53389 [ 661.763674][T12371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 661.783288][T12371] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 661.791707][T12371] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 661.799669][T12371] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 661.807668][T12371] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 661.815629][T12371] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 661.823583][T12371] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 661.831562][T12371] [ 661.834656][T12371] memory: usage 307200kB, limit 307200kB, failcnt 22050 [ 661.841660][T12371] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 661.849599][T12371] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 661.856978][T12371] Memory cgroup stats for /syz3: [ 661.857093][T12371] cache 32768 [ 661.865301][T12371] rss 0 [ 661.868088][T12371] shmem 0 [ 661.871010][T12371] mapped_file 0 [ 661.874446][T12371] dirty 4096 [ 661.877655][T12371] writeback 0 [ 661.880938][T12371] workingset_refault_anon 11383 [ 661.885857][T12371] workingset_refault_file 17433 [ 661.890728][T12371] swap 393216 [ 661.894040][T12371] pgpgin 678739 [ 661.897503][T12371] pgpgout 678731 [ 661.901035][T12371] pgfault 73818 [ 661.904471][T12371] pgmajfault 4820 [ 661.908111][T12371] inactive_anon 0 [ 661.911753][T12371] active_anon 0 [ 661.915197][T12371] inactive_file 32768 [ 661.919191][T12371] active_file 0 [ 661.922636][T12371] unevictable 0 [ 661.926075][T12371] hierarchical_memory_limit 314572800 [ 661.931452][T12371] hierarchical_memsw_limit 9223372036854771712 [ 661.937615][T12371] total_cache 32768 [ 661.941460][T12371] total_rss 0 [ 661.944725][T12371] total_shmem 0 [ 661.948209][T12371] total_mapped_file 0 [ 661.952265][T12371] total_dirty 4096 [ 661.955960][T12371] total_writeback 0 [ 661.960472][T12371] total_workingset_refault_anon 11383 [ 661.965916][T12371] total_workingset_refault_file 17433 [ 661.971291][T12371] total_swap 393216 [ 661.975094][T12371] total_pgpgin 678739 [ 661.979077][T12371] total_pgpgout 678731 [ 661.983134][T12371] total_pgfault 73818 [ 661.987138][T12371] total_pgmajfault 4820 [ 661.991278][T12371] total_inactive_anon 0 [ 661.995404][T12371] total_active_anon 0 [ 661.999422][T12371] total_inactive_file 32768 [ 662.003912][T12371] total_active_file 0 [ 662.008025][T12371] total_unevictable 0 [ 662.012436][T12371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12369,uid=0 [ 662.027688][T12371] Memory cgroup out of memory: Killed process 12369 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 662.048264][T12386] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 662.063118][T12386] CPU: 0 PID: 12386 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 662.071820][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 662.081888][T12386] Call Trace: [ 662.085175][T12386] [ 662.088157][T12386] dump_stack_lvl+0xda/0x130 [ 662.092760][T12386] dump_stack+0x15/0x20 [ 662.096925][T12386] dump_header+0x95/0x3c0 [ 662.101274][T12386] oom_kill_process+0xe3/0x3e0 [ 662.106062][T12386] out_of_memory+0x9ca/0xc00 [ 662.110662][T12386] mem_cgroup_out_of_memory+0x139/0x190 [ 662.116297][T12386] try_charge_memcg+0x75c/0xd20 [ 662.121150][T12386] obj_cgroup_charge_pages+0xab/0x130 [ 662.126579][T12386] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 662.132143][T12386] __alloc_pages+0x1bb/0x340 [ 662.136751][T12386] alloc_pages+0x3e1/0x4e0 [ 662.141216][T12386] __vmalloc_node_range+0x6d2/0xea0 [ 662.146412][T12386] kvmalloc_node+0x121/0x160 [ 662.151174][T12386] ? xt_alloc_table_info+0x3d/0x80 [ 662.156370][T12386] xt_alloc_table_info+0x3d/0x80 [ 662.161333][T12386] do_arpt_set_ctl+0x615/0x1390 [ 662.166184][T12386] ? futex_unqueue+0xba/0xe0 [ 662.170823][T12386] ? futex_wait+0x3c3/0x410 [ 662.175383][T12386] ? _raw_spin_unlock_bh+0x36/0x40 [ 662.180612][T12386] ? lock_sock_nested+0x10e/0x130 [ 662.185678][T12386] ? tcp_release_cb+0xfe/0x340 [ 662.190504][T12386] nf_setsockopt+0x18d/0x1b0 [ 662.195116][T12386] ip_setsockopt+0xe6/0x100 [ 662.199636][T12386] tcp_setsockopt+0x90/0xa0 [ 662.204237][T12386] sock_common_setsockopt+0x61/0x70 [ 662.209442][T12386] ? sock_common_recvmsg+0xe0/0xe0 [ 662.214650][T12386] __sys_setsockopt+0x1c9/0x230 [ 662.219502][T12386] __x64_sys_setsockopt+0x66/0x80 [ 662.224622][T12386] do_syscall_64+0x41/0xc0 [ 662.229033][T12386] ? syscall_exit_to_user_mode+0x26/0x140 [ 662.234774][T12386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 662.240732][T12386] RIP: 0033:0x7fb036ae7389 [ 662.245138][T12386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 662.264739][T12386] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 662.273199][T12386] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 662.281159][T12386] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 662.289122][T12386] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 662.297184][T12386] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.305145][T12386] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 662.313110][T12386] [ 662.316183][T12386] memory: usage 307200kB, limit 307200kB, failcnt 57133 [ 662.323223][T12386] memory+swap: usage 307924kB, limit 9007199254740988kB, failcnt 0 [ 662.331135][T12386] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 662.338803][T12386] Memory cgroup stats for /syz1: [ 662.340242][T12386] cache 0 [ 662.348178][T12386] rss 4096 [ 662.351229][T12386] shmem 0 [ 662.354155][T12386] mapped_file 0 [ 662.357661][T12386] dirty 0 [ 662.360590][T12386] writeback 0 [ 662.363910][T12386] workingset_refault_anon 17665 [ 662.368791][T12386] workingset_refault_file 5389 [ 662.373545][T12386] swap 741376 [ 662.376841][T12386] pgpgin 106206 [ 662.380516][T12386] pgpgout 106205 [ 662.384056][T12386] pgfault 80357 [ 662.387618][T12386] pgmajfault 7925 [ 662.391324][T12386] inactive_anon 4096 [ 662.395290][T12386] active_anon 0 [ 662.398762][T12386] inactive_file 0 [ 662.402396][T12386] active_file 0 [ 662.405863][T12386] unevictable 0 [ 662.409356][T12386] hierarchical_memory_limit 314572800 [ 662.414717][T12386] hierarchical_memsw_limit 9223372036854771712 [ 662.420934][T12386] total_cache 0 [ 662.424383][T12386] total_rss 4096 [ 662.427943][T12386] total_shmem 0 [ 662.431392][T12386] total_mapped_file 0 [ 662.435426][T12386] total_dirty 0 [ 662.438897][T12386] total_writeback 0 [ 662.442693][T12386] total_workingset_refault_anon 17665 [ 662.448081][T12386] total_workingset_refault_file 5389 [ 662.453409][T12386] total_swap 741376 [ 662.457228][T12386] total_pgpgin 106206 [ 662.461200][T12386] total_pgpgout 106205 [ 662.465271][T12386] total_pgfault 80357 [ 662.469302][T12386] total_pgmajfault 7925 [ 662.473567][T12386] total_inactive_anon 4096 [ 662.477992][T12386] total_active_anon 0 [ 662.481962][T12386] total_inactive_file 0 [ 662.486180][T12386] total_active_file 0 [ 662.490172][T12386] total_unevictable 0 02:19:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x3, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 662.494144][T12386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12385,uid=0 [ 662.509433][T12386] Memory cgroup out of memory: Killed process 12385 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f0000000000)=@raw=[@func, @btf_id], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x56, &(0x7f0000000100)=""/86, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:02 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x4020940d, 0x20000000) 02:19:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd022, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:02 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/42, 0x101000, 0x800}, 0x20) 02:19:02 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xa9f7367a}, 0x8) 02:19:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000005f5e0"], 0x0, 0xac}, 0x20) 02:19:02 executing program 4: socket(0x2c, 0x3, 0xffff) 02:19:02 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 02:19:02 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010218"], 0x0, 0xac, 0x0, 0x1}, 0x20) [ 662.737428][ T26] audit: type=1400 audit(1688955542.665:348): avc: denied { setopt } for pid=12405 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 02:19:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x401}, 0x14}}, 0x0) 02:19:02 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x30800, 0x0) [ 662.837076][ T26] audit: type=1400 audit(1688955542.765:349): avc: denied { read } for pid=12417 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 663.427299][T12399] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 663.440884][T12399] CPU: 0 PID: 12399 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 663.449571][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 663.459632][T12399] Call Trace: [ 663.462906][T12399] [ 663.465835][T12399] dump_stack_lvl+0xda/0x130 [ 663.470505][T12399] dump_stack+0x15/0x20 [ 663.474700][T12399] dump_header+0x95/0x3c0 [ 663.479087][T12399] oom_kill_process+0xe3/0x3e0 [ 663.483915][T12399] out_of_memory+0x9ca/0xc00 [ 663.488598][T12399] mem_cgroup_out_of_memory+0x139/0x190 [ 663.494164][T12399] try_charge_memcg+0x75c/0xd20 [ 663.499200][T12399] obj_cgroup_charge_pages+0xab/0x130 [ 663.504585][T12399] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 663.510152][T12399] __alloc_pages+0x1bb/0x340 [ 663.514798][T12399] alloc_pages+0x3e1/0x4e0 [ 663.519261][T12399] __vmalloc_node_range+0x6d2/0xea0 [ 663.524547][T12399] kvmalloc_node+0x121/0x160 [ 663.529160][T12399] ? xt_alloc_table_info+0x3d/0x80 [ 663.534356][T12399] xt_alloc_table_info+0x3d/0x80 [ 663.539359][T12399] do_arpt_set_ctl+0x615/0x1390 [ 663.544220][T12399] ? enqueue_task_fair+0x678/0x850 [ 663.549342][T12399] ? check_preempt_wakeup+0x187/0x320 [ 663.554727][T12399] ? _raw_spin_unlock_bh+0x36/0x40 [ 663.559875][T12399] ? lock_sock_nested+0x10e/0x130 [ 663.564938][T12399] ? tcp_release_cb+0xfe/0x340 [ 663.569713][T12399] nf_setsockopt+0x18d/0x1b0 [ 663.574444][T12399] ip_setsockopt+0xe6/0x100 [ 663.579043][T12399] tcp_setsockopt+0x90/0xa0 [ 663.583649][T12399] sock_common_setsockopt+0x61/0x70 [ 663.588935][T12399] ? sock_common_recvmsg+0xe0/0xe0 [ 663.594131][T12399] __sys_setsockopt+0x1c9/0x230 [ 663.599069][T12399] __x64_sys_setsockopt+0x66/0x80 [ 663.604339][T12399] do_syscall_64+0x41/0xc0 [ 663.608774][T12399] ? syscall_exit_to_user_mode+0x26/0x140 [ 663.614542][T12399] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 663.620571][T12399] RIP: 0033:0x7f074fb53389 [ 663.624991][T12399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 663.644666][T12399] RSP: 002b:00007f074eec6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 663.653181][T12399] RAX: ffffffffffffffda RBX: 00007f074fc72f80 RCX: 00007f074fb53389 [ 663.661204][T12399] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 663.669194][T12399] RBP: 00007f074fb9e493 R08: 0000000000000438 R09: 0000000000000000 [ 663.677178][T12399] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.685240][T12399] R13: 00007ffc045c9d1f R14: 00007f074eec6300 R15: 0000000000022000 [ 663.693224][T12399] [ 663.696371][T12399] memory: usage 307200kB, limit 307200kB, failcnt 23661 [ 663.703600][T12399] memory+swap: usage 307676kB, limit 9007199254740988kB, failcnt 0 [ 663.711590][T12399] kmem: usage 307112kB, limit 9007199254740988kB, failcnt 0 [ 663.718917][T12399] Memory cgroup stats for /syz3: [ 663.719110][T12399] cache 77824 [ 663.727320][T12399] rss 8192 [ 663.730370][T12399] shmem 0 [ 663.733296][T12399] mapped_file 0 [ 663.736768][T12399] dirty 4096 [ 663.739960][T12399] writeback 8192 [ 663.743503][T12399] workingset_refault_anon 11492 [ 663.748370][T12399] workingset_refault_file 17506 [ 663.753219][T12399] swap 487424 [ 663.756501][T12399] pgpgin 680670 [ 663.759996][T12399] pgpgout 680649 [ 663.763581][T12399] pgfault 74219 [ 663.767131][T12399] pgmajfault 4863 [ 663.770755][T12399] inactive_anon 8192 [ 663.774701][T12399] active_anon 0 [ 663.778161][T12399] inactive_file 73728 [ 663.782159][T12399] active_file 4096 [ 663.785890][T12399] unevictable 0 [ 663.789387][T12399] hierarchical_memory_limit 314572800 [ 663.794744][T12399] hierarchical_memsw_limit 9223372036854771712 [ 663.800918][T12399] total_cache 77824 [ 663.804711][T12399] total_rss 8192 [ 663.808254][T12399] total_shmem 0 [ 663.811702][T12399] total_mapped_file 0 [ 663.815655][T12399] total_dirty 4096 [ 663.819448][T12399] total_writeback 8192 [ 663.823523][T12399] total_workingset_refault_anon 11492 [ 663.828894][T12399] total_workingset_refault_file 17506 [ 663.834414][T12399] total_swap 487424 [ 663.838351][T12399] total_pgpgin 680670 [ 663.842388][T12399] total_pgpgout 680649 [ 663.846472][T12399] total_pgfault 74219 [ 663.850454][T12399] total_pgmajfault 4863 [ 663.854594][T12399] total_inactive_anon 8192 [ 663.859046][T12399] total_active_anon 0 [ 663.863011][T12399] total_inactive_file 73728 [ 663.867518][T12399] total_active_file 4096 [ 663.871767][T12399] total_unevictable 0 [ 663.875728][T12399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12398,uid=0 [ 663.891089][T12399] Memory cgroup out of memory: Killed process 12398 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 663.909014][T12411] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 663.920451][T12411] CPU: 1 PID: 12411 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 663.929174][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 663.939239][T12411] Call Trace: [ 663.942520][T12411] [ 663.945515][T12411] dump_stack_lvl+0xda/0x130 [ 663.950252][T12411] dump_stack+0x15/0x20 [ 663.954458][T12411] dump_header+0x95/0x3c0 [ 663.958802][T12411] oom_kill_process+0xe3/0x3e0 [ 663.963570][T12411] out_of_memory+0x9ca/0xc00 [ 663.968175][T12411] mem_cgroup_out_of_memory+0x139/0x190 [ 663.973734][T12411] try_charge_memcg+0x75c/0xd20 [ 663.978622][T12411] ? __alloc_pages+0x193/0x340 [ 663.983377][T12411] charge_memcg+0x51/0x200 [ 663.987859][T12411] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 663.993832][T12411] __read_swap_cache_async+0x2fe/0x560 [ 663.999347][T12411] swap_cluster_readahead+0x2a3/0x4f0 [ 664.004715][T12411] swapin_readahead+0x8d/0x700 [ 664.009483][T12411] ? __filemap_get_folio+0x47c/0x500 [ 664.014897][T12411] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 664.020466][T12411] ? swap_cache_get_folio+0x6e/0x210 [ 664.025743][T12411] do_swap_page+0x4d7/0x1550 [ 664.030361][T12411] ? pte_offset_map_nolock+0x11f/0x1c0 [ 664.035811][T12411] handle_mm_fault+0x9ec/0x2c10 [ 664.040747][T12411] ? mt_find+0x1d1/0x300 [ 664.045023][T12411] exc_page_fault+0x24d/0x650 [ 664.049770][T12411] asm_exc_page_fault+0x26/0x30 [ 664.054656][T12411] RIP: 0033:0x7fb036a9283c [ 664.059150][T12411] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 664.078839][T12411] RSP: 002b:00007ffec69faf60 EFLAGS: 00010206 [ 664.084950][T12411] RAX: 0000000000000000 RBX: 00007fb036c07050 RCX: 0000000000000000 [ 664.092911][T12411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.101021][T12411] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 664.108978][T12411] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a202f [ 664.117050][T12411] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 664.125032][T12411] [ 664.128155][T12411] memory: usage 307200kB, limit 307200kB, failcnt 57291 [ 664.135158][T12411] memory+swap: usage 308016kB, limit 9007199254740988kB, failcnt 0 [ 664.143138][T12411] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 664.150484][T12411] Memory cgroup stats for /syz1: [ 664.153766][T12411] cache 0 [ 664.161671][T12411] rss 4096 [ 664.164704][T12411] shmem 0 [ 664.167825][T12411] mapped_file 0 [ 664.171268][T12411] dirty 0 [ 664.174189][T12411] writeback 0 [ 664.177484][T12411] workingset_refault_anon 17710 [ 664.182326][T12411] workingset_refault_file 5389 [ 664.187135][T12411] swap 835584 [ 664.190410][T12411] pgpgin 106277 [ 664.193855][T12411] pgpgout 106276 [ 664.197419][T12411] pgfault 80498 [ 664.200933][T12411] pgmajfault 7945 [ 664.204565][T12411] inactive_anon 4096 [ 664.208463][T12411] active_anon 0 [ 664.211918][T12411] inactive_file 0 [ 664.215535][T12411] active_file 0 [ 664.219028][T12411] unevictable 0 [ 664.222477][T12411] hierarchical_memory_limit 314572800 [ 664.227860][T12411] hierarchical_memsw_limit 9223372036854771712 [ 664.233996][T12411] total_cache 0 [ 664.237468][T12411] total_rss 4096 [ 664.241110][T12411] total_shmem 0 [ 664.244557][T12411] total_mapped_file 0 [ 664.249159][T12411] total_dirty 0 [ 664.252603][T12411] total_writeback 0 [ 664.256428][T12411] total_workingset_refault_anon 17710 [ 664.261833][T12411] total_workingset_refault_file 5389 [ 664.267139][T12411] total_swap 835584 [ 664.270930][T12411] total_pgpgin 106277 [ 664.274902][T12411] total_pgpgout 106276 [ 664.278982][T12411] total_pgfault 80498 [ 664.282951][T12411] total_pgmajfault 7945 [ 664.287116][T12411] total_inactive_anon 4096 [ 664.291520][T12411] total_active_anon 0 [ 664.295505][T12411] total_inactive_file 0 [ 664.299748][T12411] total_active_file 0 [ 664.303730][T12411] total_unevictable 0 [ 664.307778][T12411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12411,uid=0 [ 664.323122][T12411] Memory cgroup out of memory: Killed process 12411 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 02:19:04 executing program 4: r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='rw\x00', 0x0, 0x0) 02:19:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd122, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, 0x0) 02:19:04 executing program 0: clock_gettime(0x5, &(0x7f00000001c0)) 02:19:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 02:19:04 executing program 4: setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0xffffffffffffff15) 02:19:04 executing program 5: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x200) 02:19:04 executing program 0: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x6, r2, r1, 0xbb) 02:19:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 02:19:04 executing program 4: clock_getres(0x0, &(0x7f0000001980)) 02:19:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5451, 0x0) 02:19:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/if_inet6\x00') bind$netlink(r0, 0x0, 0x0) [ 665.373579][T12445] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 665.385120][T12445] CPU: 0 PID: 12445 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 665.393886][T12445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 665.403962][T12445] Call Trace: [ 665.407292][T12445] [ 665.410222][T12445] dump_stack_lvl+0xda/0x130 [ 665.414879][T12445] dump_stack+0x15/0x20 [ 665.419085][T12445] dump_header+0x95/0x3c0 [ 665.423482][T12445] oom_kill_process+0xe3/0x3e0 [ 665.428264][T12445] out_of_memory+0x9ca/0xc00 [ 665.432867][T12445] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 665.439124][T12445] mem_cgroup_out_of_memory+0x139/0x190 [ 665.445914][T12445] try_charge_memcg+0x75c/0xd20 [ 665.450950][T12445] ? __alloc_pages+0x193/0x340 [ 665.455723][T12445] charge_memcg+0x51/0x200 [ 665.460196][T12445] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 665.466279][T12445] __read_swap_cache_async+0x2fe/0x560 [ 665.471756][T12445] swap_cluster_readahead+0x2a3/0x4f0 [ 665.477156][T12445] swapin_readahead+0x8d/0x700 [ 665.482014][T12445] ? __filemap_get_folio+0x47c/0x500 [ 665.487458][T12445] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 665.493099][T12445] ? swap_cache_get_folio+0x6e/0x210 [ 665.498446][T12445] do_swap_page+0x4d7/0x1550 [ 665.503045][T12445] ? pte_offset_map_nolock+0x11f/0x1c0 [ 665.508556][T12445] handle_mm_fault+0x9ec/0x2c10 [ 665.513525][T12445] ? mt_find+0x1d1/0x300 [ 665.517784][T12445] exc_page_fault+0x24d/0x650 [ 665.522636][T12445] asm_exc_page_fault+0x26/0x30 [ 665.527500][T12445] RIP: 0033:0x7fb036a9283c [ 665.531960][T12445] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 665.551584][T12445] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 665.557796][T12445] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 665.565753][T12445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.573790][T12445] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 665.581761][T12445] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a275a [ 665.589766][T12445] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 665.597866][T12445] [ 665.600906][T12445] memory: usage 307200kB, limit 307200kB, failcnt 57858 [ 665.607865][T12445] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 665.615733][T12445] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 665.623016][T12445] Memory cgroup stats for /syz1: [ 665.623358][T12445] cache 0 [ 665.631373][T12445] rss 12288 [ 665.634467][T12445] shmem 0 [ 665.637449][T12445] mapped_file 0 [ 665.640888][T12445] dirty 0 [ 665.645104][T12445] writeback 0 [ 665.648395][T12445] workingset_refault_anon 17770 [ 665.653239][T12445] workingset_refault_file 5389 [ 665.658006][T12445] swap 724992 [ 665.661274][T12445] pgpgin 106363 [ 665.664795][T12445] pgpgout 106360 [ 665.668361][T12445] pgfault 80632 [ 665.671856][T12445] pgmajfault 7974 [ 665.675523][T12445] inactive_anon 12288 [ 665.679520][T12445] active_anon 0 [ 665.682978][T12445] inactive_file 0 [ 665.686621][T12445] active_file 0 [ 665.690064][T12445] unevictable 0 [ 665.693497][T12445] hierarchical_memory_limit 314572800 [ 665.698869][T12445] hierarchical_memsw_limit 9223372036854771712 [ 665.705004][T12445] total_cache 0 [ 665.708470][T12445] total_rss 12288 [ 665.712088][T12445] total_shmem 0 [ 665.715583][T12445] total_mapped_file 0 [ 665.719564][T12445] total_dirty 0 [ 665.723065][T12445] total_writeback 0 [ 665.726872][T12445] total_workingset_refault_anon 17770 [ 665.732298][T12445] total_workingset_refault_file 5389 [ 665.737604][T12445] total_swap 724992 [ 665.741395][T12445] total_pgpgin 106363 [ 665.745353][T12445] total_pgpgout 106360 [ 665.749460][T12445] total_pgfault 80632 [ 665.753462][T12445] total_pgmajfault 7974 [ 665.757623][T12445] total_inactive_anon 12288 [ 665.762145][T12445] total_active_anon 0 [ 665.766128][T12445] total_inactive_file 0 [ 665.770293][T12445] total_active_file 0 [ 665.774259][T12445] total_unevictable 0 [ 665.778288][T12445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12445,uid=0 [ 665.793624][T12445] Memory cgroup out of memory: Killed process 12445 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 665.812161][T12432] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 665.823500][T12432] CPU: 1 PID: 12432 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 665.832174][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 665.842255][T12432] Call Trace: [ 665.845539][T12432] [ 665.848483][T12432] dump_stack_lvl+0xda/0x130 [ 665.853143][T12432] dump_stack+0x15/0x20 [ 665.857360][T12432] dump_header+0x95/0x3c0 [ 665.861709][T12432] oom_kill_process+0xe3/0x3e0 [ 665.866485][T12432] out_of_memory+0x9ca/0xc00 [ 665.871127][T12432] mem_cgroup_out_of_memory+0x139/0x190 [ 665.876671][T12432] try_charge_memcg+0x75c/0xd20 [ 665.881524][T12432] ? __alloc_pages+0x193/0x340 [ 665.886320][T12432] charge_memcg+0x51/0x200 [ 665.890723][T12432] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 665.896846][T12432] __read_swap_cache_async+0x2fe/0x560 [ 665.902305][T12432] swap_cluster_readahead+0x2a3/0x4f0 [ 665.907694][T12432] swapin_readahead+0x8d/0x700 [ 665.912456][T12432] ? __filemap_get_folio+0x47c/0x500 [ 665.917735][T12432] ? __list_add_valid+0x36/0xb0 [ 665.922589][T12432] ? _raw_spin_unlock+0x26/0x40 [ 665.927456][T12432] ? swap_cache_get_folio+0x6e/0x210 [ 665.932761][T12432] do_swap_page+0x4d7/0x1550 [ 665.937376][T12432] ? pte_offset_map_nolock+0x11f/0x1c0 [ 665.942817][T12432] handle_mm_fault+0x9ec/0x2c10 [ 665.947657][T12432] ? mt_find+0x1d1/0x300 [ 665.951898][T12432] exc_page_fault+0x24d/0x650 [ 665.956583][T12432] asm_exc_page_fault+0x26/0x30 [ 665.961474][T12432] RIP: 0033:0x7f074fafe83c [ 665.965950][T12432] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 665.985548][T12432] RSP: 002b:00007ffc045c9da0 EFLAGS: 00010202 [ 665.991659][T12432] RAX: 0000000000000000 RBX: 00007f074fc72f80 RCX: 0000000000000000 [ 665.999700][T12432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.007667][T12432] RBP: 00007f074fc74980 R08: 0000000000000000 R09: 00007ffc045f20b0 [ 666.015786][T12432] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a2724 [ 666.023764][T12432] R13: 00007ffc045c9e80 R14: 00007f074fc731f0 R15: 0000000000000032 [ 666.031726][T12432] [ 666.034853][T12432] memory: usage 307200kB, limit 307200kB, failcnt 25456 [ 666.041821][T12432] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 666.049759][T12432] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 666.057139][T12432] Memory cgroup stats for /syz3: [ 666.058182][T12432] cache 40960 [ 666.066376][T12432] rss 8192 [ 666.069491][T12432] shmem 0 [ 666.072448][T12432] mapped_file 0 [ 666.075941][T12432] dirty 4096 [ 666.079186][T12432] writeback 0 [ 666.082475][T12432] workingset_refault_anon 11557 [ 666.087347][T12432] workingset_refault_file 17777 [ 666.092219][T12432] swap 385024 [ 666.095494][T12432] pgpgin 682701 [ 666.098989][T12432] pgpgout 682689 [ 666.102697][T12432] pgfault 74856 [ 666.106153][T12432] pgmajfault 4893 [ 666.109813][T12432] inactive_anon 8192 [ 666.113697][T12432] active_anon 0 [ 666.117166][T12432] inactive_file 40960 [ 666.121137][T12432] active_file 0 [ 666.124591][T12432] unevictable 0 [ 666.128075][T12432] hierarchical_memory_limit 314572800 [ 666.133445][T12432] hierarchical_memsw_limit 9223372036854771712 [ 666.139635][T12432] total_cache 40960 [ 666.143435][T12432] total_rss 8192 [ 666.147015][T12432] total_shmem 0 [ 666.150483][T12432] total_mapped_file 0 [ 666.154519][T12432] total_dirty 4096 [ 666.158357][T12432] total_writeback 0 [ 666.162161][T12432] total_workingset_refault_anon 11557 [ 666.167573][T12432] total_workingset_refault_file 17777 [ 666.172936][T12432] total_swap 385024 [ 666.176755][T12432] total_pgpgin 682701 [ 666.180736][T12432] total_pgpgout 682689 [ 666.184792][T12432] total_pgfault 74856 [ 666.188810][T12432] total_pgmajfault 4893 [ 666.192954][T12432] total_inactive_anon 8192 [ 666.197539][T12432] total_active_anon 0 [ 666.201515][T12432] total_inactive_file 40960 [ 666.206075][T12432] total_active_file 0 [ 666.210089][T12432] total_unevictable 0 [ 666.214062][T12432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12432,uid=0 [ 666.229403][T12432] Memory cgroup out of memory: Killed process 12432 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:19:06 executing program 5: request_key(&(0x7f0000000f80)='rxrpc_s\x00', &(0x7f0000000fc0)={'syz', 0x1}, &(0x7f0000001000)='ip6gretap0\x00', 0xfffffffffffffffe) 02:19:06 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x5452, 0x0) 02:19:06 executing program 4: bpf$MAP_CREATE(0x5, &(0x7f0000000100)=@bloom_filter, 0x48) 02:19:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x1, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x9, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd222, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:06 executing program 4: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0xc0189436, 0x0) 02:19:06 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={0x0}}, 0x0) 02:19:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 02:19:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) 02:19:06 executing program 0: r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 02:19:06 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@dev, @multicast1, 0x0, "fedb4d073f257077e87b1caf24be4120ac069d6456d50710a29ac6640129d2e0"}, 0x3c) 02:19:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 02:19:06 executing program 0: socketpair(0x22, 0x0, 0x6, &(0x7f00000019c0)) 02:19:06 executing program 2: keyctl$KEYCTL_WATCH_KEY(0x11, 0x0, 0xffffffffffffffff, 0x0) 02:19:06 executing program 5: syz_open_procfs(0x0, &(0x7f0000003540)='net/mcfilter\x00') syz_genetlink_get_family_id$l2tp(&(0x7f00000035c0), 0xffffffffffffffff) [ 667.273892][T12462] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 667.285296][T12462] CPU: 0 PID: 12462 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 667.294037][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 667.304174][T12462] Call Trace: [ 667.307454][T12462] [ 667.310384][T12462] dump_stack_lvl+0xda/0x130 [ 667.314989][T12462] dump_stack+0x15/0x20 [ 667.319150][T12462] dump_header+0x95/0x3c0 [ 667.323499][T12462] oom_kill_process+0xe3/0x3e0 [ 667.328428][T12462] out_of_memory+0x9ca/0xc00 [ 667.333118][T12462] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 667.339272][T12462] mem_cgroup_out_of_memory+0x139/0x190 [ 667.344873][T12462] try_charge_memcg+0x75c/0xd20 [ 667.349753][T12462] ? __alloc_pages+0x193/0x340 [ 667.354581][T12462] charge_memcg+0x51/0x200 [ 667.359007][T12462] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 667.364999][T12462] __read_swap_cache_async+0x2fe/0x560 [ 667.370510][T12462] swap_cluster_readahead+0x2a3/0x4f0 [ 667.375972][T12462] swapin_readahead+0x8d/0x700 [ 667.380732][T12462] ? __filemap_get_folio+0x47c/0x500 [ 667.386064][T12462] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 667.391629][T12462] ? swap_cache_get_folio+0x6e/0x210 [ 667.396940][T12462] do_swap_page+0x4d7/0x1550 [ 667.401614][T12462] ? pte_offset_map_nolock+0x11f/0x1c0 [ 667.407095][T12462] handle_mm_fault+0x9ec/0x2c10 [ 667.412025][T12462] ? mt_find+0x1d1/0x300 [ 667.416284][T12462] exc_page_fault+0x24d/0x650 [ 667.420982][T12462] asm_exc_page_fault+0x26/0x30 [ 667.425874][T12462] RIP: 0033:0x7fb036ae7316 [ 667.430338][T12462] Code: 1f 44 00 00 53 31 d2 31 f6 b9 01 00 00 00 48 89 fb e8 1e b5 01 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 667.450052][T12462] RSP: 002b:00007ffec69faf30 EFLAGS: 00010246 [ 667.456193][T12462] RAX: 00000000000a2e63 RBX: 00007fb036c06f80 RCX: 00000000000a2d78 [ 667.464170][T12462] RDX: 00000000000000eb RSI: 0000000000000000 RDI: 00000000000003e8 [ 667.472496][T12462] RBP: 00007fb036c08980 R08: 0000000000000010 R09: 00007ffec6a550b0 [ 667.480502][T12462] R10: 00007ffec6a55080 R11: 000000000001bba6 R12: 00000000000a2e67 [ 667.488485][T12462] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 667.496599][T12462] [ 667.499701][T12462] memory: usage 307200kB, limit 307200kB, failcnt 58230 [ 667.506793][T12462] memory+swap: usage 307980kB, limit 9007199254740988kB, failcnt 0 [ 667.515472][T12462] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 667.522800][T12462] Memory cgroup stats for /syz1: [ 667.523581][T12462] cache 0 [ 667.531497][T12462] rss 4096 [ 667.534570][T12462] shmem 0 [ 667.537536][T12462] mapped_file 0 [ 667.541020][T12462] dirty 0 [ 667.543960][T12462] writeback 8192 [ 667.547512][T12462] workingset_refault_anon 17821 [ 667.552379][T12462] workingset_refault_file 5389 [ 667.557216][T12462] swap 798720 [ 667.560498][T12462] pgpgin 106440 [ 667.563934][T12462] pgpgout 106438 [ 667.567501][T12462] pgfault 80763 [ 667.570955][T12462] pgmajfault 7990 [ 667.574595][T12462] inactive_anon 0 [ 667.578305][T12462] active_anon 0 [ 667.581754][T12462] inactive_file 0 [ 667.585364][T12462] active_file 0 [ 667.588840][T12462] unevictable 0 [ 667.592287][T12462] hierarchical_memory_limit 314572800 [ 667.597736][T12462] hierarchical_memsw_limit 9223372036854771712 [ 667.603961][T12462] total_cache 0 [ 667.607690][T12462] total_rss 4096 [ 667.611311][T12462] total_shmem 0 [ 667.614843][T12462] total_mapped_file 0 [ 667.618832][T12462] total_dirty 0 [ 667.622346][T12462] total_writeback 8192 [ 667.626391][T12462] total_workingset_refault_anon 17821 [ 667.631799][T12462] total_workingset_refault_file 5389 [ 667.637089][T12462] total_swap 798720 [ 667.640880][T12462] total_pgpgin 106440 [ 667.644867][T12462] total_pgpgout 106438 [ 667.650530][T12462] total_pgfault 80763 [ 667.654517][T12462] total_pgmajfault 7990 [ 667.658693][T12462] total_inactive_anon 0 [ 667.662841][T12462] total_active_anon 0 [ 667.666825][T12462] total_inactive_file 0 [ 667.671244][T12462] total_active_file 0 [ 667.675206][T12462] total_unevictable 0 [ 667.679189][T12462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12462,uid=0 [ 667.694534][T12462] Memory cgroup out of memory: Killed process 12462 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 667.713478][T12485] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 667.723679][T12485] CPU: 1 PID: 12485 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 667.732353][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 667.742409][T12485] Call Trace: [ 667.745677][T12485] [ 667.748596][T12485] dump_stack_lvl+0xda/0x130 [ 667.753174][T12485] dump_stack+0x15/0x20 [ 667.757321][T12485] dump_header+0x95/0x3c0 [ 667.761693][T12485] oom_kill_process+0xe3/0x3e0 [ 667.766541][T12485] out_of_memory+0x9ca/0xc00 [ 667.771160][T12485] mem_cgroup_out_of_memory+0x139/0x190 [ 667.776703][T12485] try_charge_memcg+0x75c/0xd20 [ 667.781559][T12485] ? read_pages+0x320/0x560 [ 667.786047][T12485] charge_memcg+0x51/0x200 [ 667.790453][T12485] __mem_cgroup_charge+0x29/0xa0 [ 667.795397][T12485] __filemap_add_folio+0x454/0x730 [ 667.800492][T12485] ? workingset_activation+0x2e0/0x2e0 [ 667.805936][T12485] filemap_add_folio+0x6f/0x150 [ 667.810773][T12485] filemap_get_pages+0x5cf/0xea0 [ 667.815698][T12485] filemap_splice_read+0x23a/0x810 [ 667.820800][T12485] ext4_file_splice_read+0x95/0xb0 [ 667.825900][T12485] ? ext4_release_file+0x1c0/0x1c0 [ 667.831001][T12485] splice_direct_to_actor+0x28c/0x690 [ 667.836386][T12485] ? direct_file_splice_eof+0x70/0x70 [ 667.841774][T12485] do_splice_direct+0x10d/0x190 [ 667.846623][T12485] ? do_splice_direct+0x190/0x190 [ 667.851688][T12485] do_sendfile+0x3b6/0x9a0 [ 667.856093][T12485] __x64_sys_sendfile64+0x110/0x150 [ 667.861366][T12485] do_syscall_64+0x41/0xc0 [ 667.865784][T12485] ? syscall_exit_to_user_mode+0x26/0x140 [ 667.871490][T12485] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 667.877480][T12485] RIP: 0033:0x7f074fb53389 [ 667.881887][T12485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 667.901478][T12485] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 667.909888][T12485] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 667.917853][T12485] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 667.925810][T12485] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 667.933763][T12485] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 667.941714][T12485] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 667.949669][T12485] [ 667.952844][T12485] memory: usage 307200kB, limit 307200kB, failcnt 28213 [ 667.959835][T12485] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 667.967813][T12485] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 667.975102][T12485] Memory cgroup stats for /syz3: [ 667.978879][T12485] cache 65536 [ 667.987198][T12485] rss 8192 [ 667.990219][T12485] shmem 0 [ 667.993193][T12485] mapped_file 0 [ 667.996693][T12485] dirty 4096 [ 667.999886][T12485] writeback 8192 [ 668.003423][T12485] workingset_refault_anon 11620 [ 668.008313][T12485] workingset_refault_file 19276 [ 668.013161][T12485] swap 458752 [ 668.016442][T12485] pgpgin 686123 [ 668.019922][T12485] pgpgout 686103 [ 668.023463][T12485] pgfault 75209 [ 668.026957][T12485] pgmajfault 4912 [ 668.030609][T12485] inactive_anon 0 [ 668.034234][T12485] active_anon 0 [ 668.037696][T12485] inactive_file 69632 [ 668.041724][T12485] active_file 4096 [ 668.045468][T12485] unevictable 0 [ 668.048957][T12485] hierarchical_memory_limit 314572800 [ 668.054317][T12485] hierarchical_memsw_limit 9223372036854771712 [ 668.060564][T12485] total_cache 65536 [ 668.064420][T12485] total_rss 8192 [ 668.068006][T12485] total_shmem 0 [ 668.071457][T12485] total_mapped_file 0 [ 668.075428][T12485] total_dirty 4096 [ 668.079213][T12485] total_writeback 8192 [ 668.083319][T12485] total_workingset_refault_anon 11620 [ 668.088721][T12485] total_workingset_refault_file 19276 [ 668.094093][T12485] total_swap 458752 [ 668.097943][T12485] total_pgpgin 686123 [ 668.101919][T12485] total_pgpgout 686103 [ 668.105976][T12485] total_pgfault 75209 [ 668.109977][T12485] total_pgmajfault 4912 [ 668.114123][T12485] total_inactive_anon 0 [ 668.118289][T12485] total_active_anon 0 [ 668.122265][T12485] total_inactive_file 69632 [ 668.126787][T12485] total_active_file 4096 [ 668.131021][T12485] total_unevictable 0 [ 668.134992][T12485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12471,uid=0 [ 668.150460][T12485] Memory cgroup out of memory: Killed process 12471 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:10880kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:19:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000140)={0xec4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xd2, 0x0, 0x0, 0x0, @binary="e8a104f54125802726d48083b172013d67b7f877b5a56875d900468bab2e9f9dab58377324c924b81d34abf781dddb186b54aacb6c35bb4b8dae3a1246b24293632fea36a6f998f7d36fe51c0675237fa238c091298573fcf65dded28ef5ddfbbd1bd5fa6e15488728add2ce423a86f64ac1141e9acc62681f5f2d523edc9388a5f409fc473bd7f33907e75332c9b026be03f7f5d346c9a5ff2e2ae25d353507eaa3a0cd71894355159f5ab5eaff18192cf2d9af0c2161977a1ec359ab4450c525e13f26317992995174c7d9b633"}, @nested={0xddd, 0x0, 0x0, 0x1, [@generic="e7619317c21f60b72ce522abf803a9", @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x0, 0x0, 0x0, @str='&}{#%#$\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="ff408741fdaef826a671e4c1c47186ebb2f4645c07065b3bb6e71149bf5b571c9b9dbcad333d2cd2dde3b9", @generic="ed6d59c98b8c3fffea270a2d5a3c9a770774b5e9737742d15698237df99a4b680ba9978cd1ddebe4ceb4af57e61b51dea43cfb08ce8bf5c796f62f344c7ade23b6b1dbf2b6afa29f2952bebe0d618dd56132ce0bfd8815d9c8d2df6e791b56ec5686e11ceaee14cf4c2efdbd4d62edf28537147f85d0e19207638cb8add2ec08c85d885b3e166b6ef3acf99730b1859780e38c74c4386741a2ddedd73e71dd1580781e880174f5df", @generic="0eb3a2f6bd2d40aed31023489bcfea46e69fec54d70af398ca57d5a98ce731579e498716640c13933fa8e22b0e67851396a78e8ec820625bb7f99990ab2907102fb0ba0fa66e92f0bf107b58f881bee3edfa5ff48e43f82190dee22d5b64015260942c", @generic="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"]}]}, 0xec4}], 0x1}, 0x10) 02:19:08 executing program 4: io_uring_setup(0x9, &(0x7f0000000200)) 02:19:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x0, 0xac, 0x0, 0xa}, 0x20) 02:19:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000a008c0000008c"], 0x0, 0xac}, 0x20) 02:19:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xa, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd322, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:08 executing program 5: socketpair(0xa, 0x0, 0x1cb, &(0x7f0000000000)) 02:19:08 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x40086602, 0x20000000) 02:19:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="e84e1a2f5db1ab713072bab5eca573f5", 0x10}], 0x1, &(0x7f0000000340)=[{0x18, 0x0, 0x0, "94"}, {0x10}], 0x28}}, {{&(0x7f00000004c0)=@isdn, 0x80, 0x0}}], 0x2, 0x0) [ 668.354545][T12506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12506 comm=syz-executor.0 02:19:08 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0xfffffdef, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 02:19:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 02:19:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100a3000000000000008800000088000000030000000a"], 0x0, 0xa3}, 0x20) 02:19:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 02:19:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 02:19:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0}, 0x20) [ 669.124597][T12499] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 669.135968][T12499] CPU: 0 PID: 12499 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 669.144715][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 669.154767][T12499] Call Trace: [ 669.158065][T12499] [ 669.160992][T12499] dump_stack_lvl+0xda/0x130 [ 669.165620][T12499] dump_stack+0x15/0x20 [ 669.169793][T12499] dump_header+0x95/0x3c0 [ 669.174141][T12499] oom_kill_process+0xe3/0x3e0 [ 669.179214][T12499] out_of_memory+0x9ca/0xc00 [ 669.183816][T12499] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 669.189894][T12499] mem_cgroup_out_of_memory+0x139/0x190 [ 669.195452][T12499] try_charge_memcg+0x75c/0xd20 [ 669.200336][T12499] ? __alloc_pages+0x193/0x340 [ 669.205106][T12499] charge_memcg+0x51/0x200 [ 669.209564][T12499] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 669.215568][T12499] __read_swap_cache_async+0x2fe/0x560 [ 669.221045][T12499] swap_cluster_readahead+0x2a3/0x4f0 [ 669.226505][T12499] swapin_readahead+0x8d/0x700 [ 669.231283][T12499] ? __filemap_get_folio+0x47c/0x500 [ 669.236588][T12499] ? swap_cache_get_folio+0x6e/0x210 [ 669.241889][T12499] do_swap_page+0x4d7/0x1550 [ 669.246588][T12499] ? pte_offset_map_nolock+0x11f/0x1c0 [ 669.252061][T12499] handle_mm_fault+0x9ec/0x2c10 [ 669.256969][T12499] ? mt_find+0x1d1/0x300 [ 669.261280][T12499] exc_page_fault+0x24d/0x650 [ 669.265994][T12499] asm_exc_page_fault+0x26/0x30 [ 669.270944][T12499] RIP: 0033:0x7fb036a9283c [ 669.275365][T12499] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 669.295128][T12499] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 669.301197][T12499] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 669.309248][T12499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.317249][T12499] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 669.325394][T12499] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a35ee [ 669.333528][T12499] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 669.341495][T12499] [ 669.344620][T12499] memory: usage 307200kB, limit 307200kB, failcnt 58519 [ 669.351641][T12499] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 669.359651][T12499] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 669.366962][T12499] Memory cgroup stats for /syz1: [ 669.367927][T12499] cache 0 [ 669.375797][T12499] rss 4096 [ 669.378899][T12499] shmem 0 [ 669.381829][T12499] mapped_file 0 [ 669.385282][T12499] dirty 0 [ 669.388427][T12499] writeback 4096 [ 669.391967][T12499] workingset_refault_anon 17879 [ 669.396839][T12499] workingset_refault_file 5389 [ 669.401612][T12499] swap 765952 [ 669.404909][T12499] pgpgin 106524 [ 669.408488][T12499] pgpgout 106523 [ 669.412028][T12499] pgfault 80891 [ 669.415507][T12499] pgmajfault 8007 [ 669.419520][T12499] inactive_anon 0 [ 669.423320][T12499] active_anon 0 [ 669.426846][T12499] inactive_file 0 [ 669.430522][T12499] active_file 0 [ 669.433986][T12499] unevictable 0 [ 669.437549][T12499] hierarchical_memory_limit 314572800 [ 669.442933][T12499] hierarchical_memsw_limit 9223372036854771712 [ 669.449123][T12499] total_cache 0 [ 669.452650][T12499] total_rss 4096 [ 669.456279][T12499] total_shmem 0 [ 669.459764][T12499] total_mapped_file 0 [ 669.463738][T12499] total_dirty 0 [ 669.467236][T12499] total_writeback 4096 [ 669.471347][T12499] total_workingset_refault_anon 17879 [ 669.476754][T12499] total_workingset_refault_file 5389 [ 669.482024][T12499] total_swap 765952 [ 669.485820][T12499] total_pgpgin 106524 [ 669.489817][T12499] total_pgpgout 106523 [ 669.493871][T12499] total_pgfault 80891 [ 669.497886][T12499] total_pgmajfault 8007 [ 669.502076][T12499] total_inactive_anon 0 [ 669.506208][T12499] total_active_anon 0 [ 669.510236][T12499] total_inactive_file 0 [ 669.514395][T12499] total_active_file 0 [ 669.518420][T12499] total_unevictable 0 02:19:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xc, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 669.522449][T12499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12499,uid=0 [ 669.537853][T12499] Memory cgroup out of memory: Killed process 12499 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd422, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="06"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:09 executing program 0: syz_clone(0x10000600, 0x0, 0x0, 0x0, 0x0, 0x0) 02:19:09 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000040), 0xfecf) 02:19:09 executing program 2: socketpair(0xa, 0x3, 0x3a, &(0x7f00000001c0)) 02:19:09 executing program 4: syz_open_procfs(0x0, &(0x7f0000000200)='timers\x00') 02:19:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400040046cdcf2f3782664ab6da020a3ee7426cbd17643e852fc9ba2437a389"], 0x24}, 0x8}, 0x0) 02:19:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x3, 0x4) 02:19:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f00000032c0)={0x0, 0x0, 0x0}, 0x0) 02:19:09 executing program 2: pipe2$watch_queue(&(0x7f00000080c0), 0x80) [ 670.464469][T12535] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 670.475858][T12535] CPU: 1 PID: 12535 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 670.484648][T12535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 670.494889][T12535] Call Trace: [ 670.498181][T12535] [ 670.501160][T12535] dump_stack_lvl+0xda/0x130 [ 670.505822][T12535] dump_stack+0x15/0x20 [ 670.510051][T12535] dump_header+0x95/0x3c0 [ 670.514458][T12535] oom_kill_process+0xe3/0x3e0 [ 670.519265][T12535] out_of_memory+0x9ca/0xc00 [ 670.523950][T12535] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 670.530070][T12535] mem_cgroup_out_of_memory+0x139/0x190 [ 670.535630][T12535] try_charge_memcg+0x75c/0xd20 [ 670.540497][T12535] ? __alloc_pages+0x193/0x340 [ 670.545268][T12535] charge_memcg+0x51/0x200 [ 670.549692][T12535] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 670.555687][T12535] __read_swap_cache_async+0x2fe/0x560 [ 670.561167][T12535] swap_cluster_readahead+0x2a3/0x4f0 [ 670.566629][T12535] swapin_readahead+0x8d/0x700 [ 670.571460][T12535] ? __filemap_get_folio+0x47c/0x500 [ 670.576780][T12535] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 670.582332][T12535] ? swap_cache_get_folio+0x6e/0x210 [ 670.587725][T12535] do_swap_page+0x4d7/0x1550 [ 670.592326][T12535] ? file_update_time+0x1c3/0x200 [ 670.597354][T12535] ? pte_offset_map_nolock+0x11f/0x1c0 [ 670.603034][T12535] handle_mm_fault+0x9ec/0x2c10 [ 670.607895][T12535] ? mt_find+0x1d1/0x300 [ 670.612150][T12535] exc_page_fault+0x24d/0x650 [ 670.616875][T12535] asm_exc_page_fault+0x26/0x30 [ 670.621753][T12535] RIP: 0033:0x7f074faee988 [ 670.626180][T12535] Code: 66 90 48 8b 0d 69 dd ca 00 4c 63 05 52 dd ca 00 48 8b 05 53 dd ca 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 89 38 <48> 89 15 39 dd ca 00 c3 52 48 8d 35 b7 e7 0a 00 48 89 c2 48 8d 3d [ 670.645946][T12535] RSP: 002b:00007ffc045c9ce8 EFLAGS: 00010287 [ 670.652015][T12535] RAX: 0000001b2c22d000 RBX: 00000000817b5101 RCX: 0000001b2c220000 [ 670.660074][T12535] RDX: 0000001b2c22d004 RSI: 000000000000210e RDI: 00000000817b5101 [ 670.668092][T12535] RBP: 0000000000000001 R08: 0000001b2c620000 R09: 00000000817b5105 [ 670.676193][T12535] R10: 00007ffc045f2080 R11: 000000000001bd98 R12: 00007f074fc67000 [ 670.684161][T12535] R13: 000000000003ec43 R14: ffffffff817b5461 R15: 00007f074fc731b8 [ 670.692130][T12535] ? jbd2_complete_transaction+0xe1/0x110 [ 670.697839][T12535] [ 670.701000][T12535] memory: usage 307200kB, limit 307200kB, failcnt 29413 [ 670.707954][T12535] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 670.715837][T12535] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 670.723205][T12535] Memory cgroup stats for /syz3: [ 670.723435][T12535] cache 73728 [ 670.731687][T12535] rss 8192 [ 670.734692][T12535] shmem 0 [ 670.737627][T12535] mapped_file 0 [ 670.741133][T12535] dirty 4096 [ 670.744380][T12535] writeback 12288 [ 670.748017][T12535] workingset_refault_anon 11779 [ 670.752860][T12535] workingset_refault_file 19886 [ 670.757713][T12535] swap 401408 [ 670.761067][T12535] pgpgin 690119 [ 670.764506][T12535] pgpgout 690098 [ 670.768066][T12535] pgfault 75640 [ 670.771522][T12535] pgmajfault 4994 [ 670.775186][T12535] inactive_anon 0 [ 670.778861][T12535] active_anon 0 [ 670.782322][T12535] inactive_file 69632 [ 670.786345][T12535] active_file 4096 [ 670.790152][T12535] unevictable 0 [ 670.793602][T12535] hierarchical_memory_limit 314572800 [ 670.799043][T12535] hierarchical_memsw_limit 9223372036854771712 [ 670.805244][T12535] total_cache 73728 [ 670.809055][T12535] total_rss 8192 [ 670.812614][T12535] total_shmem 0 [ 670.816098][T12535] total_mapped_file 0 [ 670.820085][T12535] total_dirty 4096 [ 670.823786][T12535] total_writeback 12288 [ 670.827941][T12535] total_workingset_refault_anon 11779 [ 670.833364][T12535] total_workingset_refault_file 19886 [ 670.838829][T12535] total_swap 401408 [ 670.842652][T12535] total_pgpgin 690119 [ 670.846640][T12535] total_pgpgout 690098 [ 670.850695][T12535] total_pgfault 75640 [ 670.854707][T12535] total_pgmajfault 4994 [ 670.858888][T12535] total_inactive_anon 0 [ 670.863073][T12535] total_active_anon 0 [ 670.867154][T12535] total_inactive_file 69632 [ 670.871663][T12535] total_active_file 4096 [ 670.875914][T12535] total_unevictable 0 [ 670.879914][T12535] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12535,uid=0 [ 670.895342][T12535] Memory cgroup out of memory: Killed process 12535 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 670.922467][T12552] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 670.933920][T12552] CPU: 0 PID: 12552 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 670.942616][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 670.952685][T12552] Call Trace: [ 670.956011][T12552] [ 670.958937][T12552] dump_stack_lvl+0xda/0x130 [ 670.963581][T12552] dump_stack+0x15/0x20 [ 670.967784][T12552] dump_header+0x95/0x3c0 [ 670.972114][T12552] oom_kill_process+0xe3/0x3e0 [ 670.976884][T12552] out_of_memory+0x9ca/0xc00 [ 670.981470][T12552] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 670.987573][T12552] mem_cgroup_out_of_memory+0x139/0x190 [ 670.993192][T12552] try_charge_memcg+0x75c/0xd20 [ 670.998135][T12552] ? __alloc_pages+0x193/0x340 [ 671.002899][T12552] charge_memcg+0x51/0x200 [ 671.007404][T12552] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 671.013479][T12552] __read_swap_cache_async+0x2fe/0x560 [ 671.018936][T12552] swap_cluster_readahead+0x2a3/0x4f0 [ 671.024492][T12552] swapin_readahead+0x8d/0x700 [ 671.029296][T12552] ? __filemap_get_folio+0x47c/0x500 [ 671.034677][T12552] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 671.040217][T12552] ? swap_cache_get_folio+0x6e/0x210 [ 671.045500][T12552] do_swap_page+0x4d7/0x1550 [ 671.050144][T12552] ? pte_offset_map_nolock+0x11f/0x1c0 [ 671.055637][T12552] handle_mm_fault+0x9ec/0x2c10 [ 671.060485][T12552] ? mt_find+0x1d1/0x300 [ 671.064724][T12552] exc_page_fault+0x24d/0x650 [ 671.069394][T12552] asm_exc_page_fault+0x26/0x30 [ 671.074275][T12552] RIP: 0033:0x7fb036a929af [ 671.078742][T12552] Code: ff 48 81 c3 d0 00 00 00 48 39 eb 0f 84 02 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 2c e2 ff ff 84 c0 74 d7 80 3d 81 b7 14 00 00 <48> 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 00 00 eb bd 84 c9 74 [ 671.098438][T12552] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 671.104575][T12552] RAX: 0000000000000001 RBX: 00007fb036c06f80 RCX: 00000000000a3930 [ 671.112537][T12552] RDX: 00000000000002f4 RSI: 00007ffec69faf40 RDI: 00007fb036c06f80 [ 671.120592][T12552] RBP: 00007fb036c08980 R08: 0000000000000010 R09: 00007ffec6a550b0 [ 671.128578][T12552] R10: 00007ffec6a55080 R11: 000000000001bdda R12: 00000000000a3c23 [ 671.136649][T12552] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 671.144704][T12552] [ 671.147830][T12552] memory: usage 307200kB, limit 307200kB, failcnt 59309 [ 671.154847][T12552] memory+swap: usage 308004kB, limit 9007199254740988kB, failcnt 0 [ 671.162807][T12552] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 671.170105][T12552] Memory cgroup stats for /syz1: [ 671.172878][T12552] cache 0 [ 671.180869][T12552] rss 4096 [ 671.183880][T12552] shmem 0 [ 671.187030][T12552] mapped_file 0 [ 671.190540][T12552] dirty 0 [ 671.193473][T12552] writeback 4096 [ 671.197039][T12552] workingset_refault_anon 17916 [ 671.201923][T12552] workingset_refault_file 5389 [ 671.206744][T12552] swap 823296 [ 671.210019][T12552] pgpgin 106587 [ 671.213525][T12552] pgpgout 106585 [ 671.217162][T12552] pgfault 81017 [ 671.220666][T12552] pgmajfault 8026 [ 671.224293][T12552] inactive_anon 0 [ 671.227991][T12552] active_anon 0 [ 671.231441][T12552] inactive_file 0 [ 671.235066][T12552] active_file 0 [ 671.238537][T12552] unevictable 0 [ 671.242060][T12552] hierarchical_memory_limit 314572800 [ 671.247437][T12552] hierarchical_memsw_limit 9223372036854771712 [ 671.253577][T12552] total_cache 0 [ 671.257097][T12552] total_rss 4096 [ 671.260666][T12552] total_shmem 0 [ 671.264200][T12552] total_mapped_file 0 [ 671.268198][T12552] total_dirty 0 [ 671.271652][T12552] total_writeback 4096 [ 671.275757][T12552] total_workingset_refault_anon 17916 [ 671.281156][T12552] total_workingset_refault_file 5389 [ 671.286477][T12552] total_swap 823296 [ 671.290344][T12552] total_pgpgin 106587 [ 671.294373][T12552] total_pgpgout 106585 [ 671.298509][T12552] total_pgfault 81017 [ 671.302477][T12552] total_pgmajfault 8026 [ 671.306729][T12552] total_inactive_anon 0 [ 671.310881][T12552] total_active_anon 0 [ 671.314853][T12552] total_inactive_file 0 [ 671.319040][T12552] total_active_file 0 02:19:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x5, &(0x7f0000000080)=@framed={{}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 671.323004][T12552] total_unevictable 0 [ 671.327082][T12552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12552,uid=0 [ 671.342415][T12552] Memory cgroup out of memory: Killed process 12552 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:11 executing program 5: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000000)={0x0, 0x0, 0xac}, 0x20) 02:19:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd522, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:11 executing program 4: r0 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) 02:19:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc000000170a01"], 0xbc}}, 0x0) 02:19:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x0, 0x0, 0x3ff000}, 0x48) 02:19:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x15, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:11 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f40)='personality\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x2, 0x2}, 0x10}}, 0x0) ioctl$NS_GET_PARENT(r0, 0x40086602, 0x20000000) 02:19:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @enum]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 02:19:11 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@broadcast, @loopback, 0x0, "c5e006c59a4183dbfb7d88b723fae6ddbf1be8bdb526fe5bcb93c5226683d835"}, 0x3c) 02:19:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001540)=ANY=[], 0x33fe0}}, 0x0) 02:19:11 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) [ 671.540510][T12571] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 02:19:11 executing program 4: socketpair(0x28, 0x0, 0x0, &(0x7f0000000680)) [ 672.260566][T12581] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 672.274269][T12581] CPU: 1 PID: 12581 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 672.283072][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 672.293130][T12581] Call Trace: [ 672.296503][T12581] [ 672.299468][T12581] dump_stack_lvl+0xda/0x130 [ 672.304068][T12581] dump_stack+0x15/0x20 [ 672.308237][T12581] dump_header+0x95/0x3c0 [ 672.312594][T12581] oom_kill_process+0xe3/0x3e0 [ 672.317375][T12581] out_of_memory+0x9ca/0xc00 [ 672.322053][T12581] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 672.328134][T12581] mem_cgroup_out_of_memory+0x139/0x190 [ 672.333854][T12581] try_charge_memcg+0x75c/0xd20 [ 672.338728][T12581] obj_cgroup_charge_pages+0xab/0x130 [ 672.344143][T12581] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 672.349759][T12581] __alloc_pages+0x1bb/0x340 [ 672.354359][T12581] alloc_pages+0x3e1/0x4e0 [ 672.358869][T12581] __vmalloc_node_range+0x6d2/0xea0 [ 672.364167][T12581] kvmalloc_node+0x121/0x160 [ 672.368833][T12581] ? xt_alloc_table_info+0x3d/0x80 [ 672.373934][T12581] xt_alloc_table_info+0x3d/0x80 [ 672.378959][T12581] do_arpt_set_ctl+0x615/0x1390 [ 672.383793][T12581] ? futex_unqueue+0xba/0xe0 [ 672.388401][T12581] ? futex_wait+0x3c3/0x410 [ 672.392980][T12581] ? _raw_spin_unlock_bh+0x36/0x40 [ 672.398077][T12581] ? lock_sock_nested+0x10e/0x130 [ 672.403122][T12581] ? tcp_release_cb+0xfe/0x340 [ 672.407871][T12581] nf_setsockopt+0x18d/0x1b0 [ 672.412455][T12581] ip_setsockopt+0xe6/0x100 [ 672.416974][T12581] tcp_setsockopt+0x90/0xa0 [ 672.421513][T12581] sock_common_setsockopt+0x61/0x70 [ 672.426696][T12581] ? sock_common_recvmsg+0xe0/0xe0 [ 672.431801][T12581] __sys_setsockopt+0x1c9/0x230 [ 672.436650][T12581] __x64_sys_setsockopt+0x66/0x80 [ 672.441686][T12581] do_syscall_64+0x41/0xc0 [ 672.446086][T12581] ? syscall_exit_to_user_mode+0x26/0x140 [ 672.451849][T12581] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 672.457872][T12581] RIP: 0033:0x7fb036ae7389 [ 672.462291][T12581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 672.481891][T12581] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.490389][T12581] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 672.498356][T12581] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 672.506309][T12581] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 672.514266][T12581] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.522241][T12581] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 672.530241][T12581] [ 672.533460][T12581] memory: usage 307200kB, limit 307200kB, failcnt 59668 [ 672.540459][T12581] memory+swap: usage 308008kB, limit 9007199254740988kB, failcnt 0 [ 672.548417][T12581] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 672.555889][T12581] Memory cgroup stats for /syz1: [ 672.556074][T12581] cache 0 [ 672.564207][T12581] rss 4096 [ 672.567304][T12581] shmem 0 [ 672.570285][T12581] mapped_file 0 [ 672.573774][T12581] dirty 0 [ 672.576737][T12581] writeback 0 [ 672.580130][T12581] workingset_refault_anon 17947 [ 672.585040][T12581] workingset_refault_file 5389 [ 672.589849][T12581] swap 827392 [ 672.593216][T12581] pgpgin 106644 [ 672.596753][T12581] pgpgout 106643 [ 672.600338][T12581] pgfault 81154 [ 672.603793][T12581] pgmajfault 8037 [ 672.607445][T12581] inactive_anon 4096 [ 672.611404][T12581] active_anon 0 [ 672.614971][T12581] inactive_file 0 [ 672.618639][T12581] active_file 0 [ 672.622090][T12581] unevictable 0 [ 672.625611][T12581] hierarchical_memory_limit 314572800 [ 672.631088][T12581] hierarchical_memsw_limit 9223372036854771712 [ 672.637333][T12581] total_cache 0 [ 672.640779][T12581] total_rss 4096 [ 672.644608][T12581] total_shmem 0 [ 672.648087][T12581] total_mapped_file 0 [ 672.652137][T12581] total_dirty 0 [ 672.655703][T12581] total_writeback 4096 [ 672.659782][T12581] total_workingset_refault_anon 17947 [ 672.665159][T12581] total_workingset_refault_file 5389 [ 672.670461][T12581] total_swap 827392 [ 672.674427][T12581] total_pgpgin 106644 [ 672.678500][T12581] total_pgpgout 106643 [ 672.682559][T12581] total_pgfault 81154 [ 672.686641][T12581] total_pgmajfault 8037 [ 672.690790][T12581] total_inactive_anon 0 [ 672.694925][T12581] total_active_anon 0 [ 672.698990][T12581] total_inactive_file 0 [ 672.703144][T12581] total_active_file 0 [ 672.707131][T12581] total_unevictable 0 [ 672.711135][T12581] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12576,uid=0 [ 672.726403][T12581] Memory cgroup out of memory: Killed process 12576 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 672.743875][T12573] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 672.757467][T12573] CPU: 0 PID: 12573 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 672.766244][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 672.776399][T12573] Call Trace: [ 672.779775][T12573] [ 672.782795][T12573] dump_stack_lvl+0xda/0x130 [ 672.787484][T12573] dump_stack+0x15/0x20 [ 672.791794][T12573] dump_header+0x95/0x3c0 [ 672.796183][T12573] oom_kill_process+0xe3/0x3e0 [ 672.800967][T12573] out_of_memory+0x9ca/0xc00 [ 672.805569][T12573] mem_cgroup_out_of_memory+0x139/0x190 [ 672.811199][T12573] try_charge_memcg+0x75c/0xd20 [ 672.816067][T12573] obj_cgroup_charge_pages+0xab/0x130 [ 672.821476][T12573] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 672.827122][T12573] __alloc_pages+0x1bb/0x340 [ 672.831708][T12573] alloc_pages+0x3e1/0x4e0 [ 672.836248][T12573] __vmalloc_node_range+0x6d2/0xea0 [ 672.841442][T12573] kvmalloc_node+0x121/0x160 [ 672.846053][T12573] ? xt_alloc_table_info+0x3d/0x80 [ 672.851326][T12573] xt_alloc_table_info+0x3d/0x80 [ 672.856358][T12573] do_arpt_set_ctl+0x615/0x1390 [ 672.861204][T12573] ? enqueue_task_fair+0x678/0x850 [ 672.866324][T12573] ? check_preempt_wakeup+0x187/0x320 [ 672.871814][T12573] ? _raw_spin_unlock_bh+0x36/0x40 [ 672.876921][T12573] ? lock_sock_nested+0x10e/0x130 [ 672.881960][T12573] ? tcp_release_cb+0xfe/0x340 [ 672.886726][T12573] nf_setsockopt+0x18d/0x1b0 [ 672.891618][T12573] ip_setsockopt+0xe6/0x100 [ 672.896116][T12573] tcp_setsockopt+0x90/0xa0 [ 672.900794][T12573] sock_common_setsockopt+0x61/0x70 [ 672.906071][T12573] ? sock_common_recvmsg+0xe0/0xe0 [ 672.911240][T12573] __sys_setsockopt+0x1c9/0x230 [ 672.916087][T12573] __x64_sys_setsockopt+0x66/0x80 [ 672.921222][T12573] do_syscall_64+0x41/0xc0 [ 672.925684][T12573] ? syscall_exit_to_user_mode+0x26/0x140 [ 672.931415][T12573] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 672.937334][T12573] RIP: 0033:0x7f074fb53389 [ 672.941761][T12573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 672.961396][T12573] RSP: 002b:00007f074eec6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.969806][T12573] RAX: ffffffffffffffda RBX: 00007f074fc72f80 RCX: 00007f074fb53389 [ 672.977789][T12573] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 672.985752][T12573] RBP: 00007f074fb9e493 R08: 0000000000000438 R09: 0000000000000000 [ 672.993716][T12573] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.001681][T12573] R13: 00007ffc045c9d1f R14: 00007f074eec6300 R15: 0000000000022000 [ 673.009675][T12573] [ 673.012805][T12573] memory: usage 307068kB, limit 307200kB, failcnt 30835 [ 673.019792][T12573] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 673.027716][T12573] kmem: usage 306864kB, limit 9007199254740988kB, failcnt 0 [ 673.035074][T12573] Memory cgroup stats for /syz3: [ 673.036436][T12573] cache 249856 [ 673.044789][T12573] rss 8192 [ 673.047847][T12573] shmem 0 [ 673.050894][T12573] mapped_file 0 [ 673.054348][T12573] dirty 4096 [ 673.057630][T12573] writeback 0 [ 673.060952][T12573] workingset_refault_anon 11855 [ 673.065811][T12573] workingset_refault_file 19887 [ 673.070762][T12573] swap 323584 [ 673.074093][T12573] pgpgin 691500 [ 673.077589][T12573] pgpgout 691423 [ 673.081159][T12573] pgfault 75854 [ 673.084610][T12573] pgmajfault 5023 [ 673.088276][T12573] inactive_anon 65536 [ 673.092254][T12573] active_anon 0 [ 673.095704][T12573] inactive_file 245760 [ 673.100050][T12573] active_file 4096 [ 673.103765][T12573] unevictable 0 [ 673.107251][T12573] hierarchical_memory_limit 314572800 [ 673.112621][T12573] hierarchical_memsw_limit 9223372036854771712 [ 673.118918][T12573] total_cache 249856 [ 673.122871][T12573] total_rss 8192 [ 673.126415][T12573] total_shmem 0 [ 673.129910][T12573] total_mapped_file 0 [ 673.133884][T12573] total_dirty 4096 [ 673.137722][T12573] total_writeback 0 [ 673.141526][T12573] total_workingset_refault_anon 11855 [ 673.146925][T12573] total_workingset_refault_file 19887 [ 673.152350][T12573] total_swap 323584 [ 673.156146][T12573] total_pgpgin 691500 [ 673.160228][T12573] total_pgpgout 691423 [ 673.164323][T12573] total_pgfault 75854 [ 673.168356][T12573] total_pgmajfault 5023 [ 673.172524][T12573] total_inactive_anon 65536 [ 673.177052][T12573] total_active_anon 0 [ 673.181031][T12573] total_inactive_file 245760 [ 673.185622][T12573] total_active_file 4096 [ 673.189981][T12573] total_unevictable 0 [ 673.193959][T12573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12569,uid=0 02:19:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd622, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:13 executing program 2: add_key(&(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 02:19:13 executing program 5: socketpair(0xa, 0x0, 0x100, &(0x7f0000000000)) 02:19:13 executing program 4: epoll_create(0x400) 02:19:13 executing program 0: mount$9p_fd(0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000001a40)) [ 673.209485][T12573] Memory cgroup out of memory: Killed process 12569 (syz-executor.3) total-vm:46616kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:13 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2d, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:13 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00'}) 02:19:13 executing program 0: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000380)='[\x00', 0x0) 02:19:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001540)=ANY=[], 0x33fe0}, 0x1, 0xf0ffffffffffff}, 0x0) 02:19:13 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000011c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000000140)={0xec4, 0x3ed, 0x0, 0x0, 0x0, "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"}, 0xec4}}, 0x0) 02:19:13 executing program 5: uname(&(0x7f0000000800)=""/209) 02:19:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x4020940d, 0x0) [ 673.479663][ T26] audit: type=1400 audit(1688955553.385:350): avc: denied { audit_write } for pid=12608 comm="syz-executor.5" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 674.097972][T12604] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 674.109353][T12604] CPU: 0 PID: 12604 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 674.118060][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 674.128120][T12604] Call Trace: [ 674.131537][T12604] [ 674.134540][T12604] dump_stack_lvl+0xda/0x130 [ 674.139133][T12604] dump_stack+0x15/0x20 [ 674.143308][T12604] dump_header+0x95/0x3c0 [ 674.147721][T12604] oom_kill_process+0xe3/0x3e0 [ 674.152572][T12604] out_of_memory+0x9ca/0xc00 [ 674.157233][T12604] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 674.163371][T12604] mem_cgroup_out_of_memory+0x139/0x190 [ 674.168999][T12604] try_charge_memcg+0x75c/0xd20 [ 674.173874][T12604] ? __alloc_pages+0x193/0x340 [ 674.178697][T12604] charge_memcg+0x51/0x200 [ 674.183228][T12604] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 674.189331][T12604] __read_swap_cache_async+0x2fe/0x560 [ 674.194893][T12604] swap_cluster_readahead+0x2a3/0x4f0 [ 674.200366][T12604] swapin_readahead+0x8d/0x700 [ 674.205257][T12604] ? __filemap_get_folio+0x47c/0x500 [ 674.210552][T12604] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 674.216106][T12604] ? swap_cache_get_folio+0x6e/0x210 [ 674.221396][T12604] do_swap_page+0x4d7/0x1550 [ 674.226046][T12604] ? pte_offset_map_nolock+0x11f/0x1c0 [ 674.231587][T12604] handle_mm_fault+0x9ec/0x2c10 [ 674.236473][T12604] ? mt_find+0x1d1/0x300 [ 674.240727][T12604] exc_page_fault+0x24d/0x650 [ 674.245487][T12604] asm_exc_page_fault+0x26/0x30 [ 674.250454][T12604] RIP: 0033:0x7fb036a9283c [ 674.254892][T12604] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 674.274955][T12604] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 674.281083][T12604] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 674.289055][T12604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.297016][T12604] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 674.305010][T12604] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a495c [ 674.313058][T12604] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 674.321042][T12604] [ 674.324429][T12604] memory: usage 307200kB, limit 307200kB, failcnt 59911 [ 674.331542][T12604] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 674.339464][T12604] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 674.347055][T12604] Memory cgroup stats for /syz1: [ 674.347260][T12604] cache 0 [ 674.355113][T12604] rss 4096 [ 674.358158][T12604] shmem 0 [ 674.361161][T12604] mapped_file 0 [ 674.364606][T12604] dirty 0 [ 674.367559][T12604] writeback 0 [ 674.370863][T12604] workingset_refault_anon 17987 [ 674.375730][T12604] workingset_refault_file 5389 [ 674.380558][T12604] swap 724992 [ 674.383828][T12604] pgpgin 106710 [ 674.387332][T12604] pgpgout 106707 [ 674.390917][T12604] pgfault 81291 [ 674.394349][T12604] pgmajfault 8050 [ 674.397981][T12604] inactive_anon 0 [ 674.401599][T12604] active_anon 4096 [ 674.405398][T12604] inactive_file 0 [ 674.409038][T12604] active_file 0 [ 674.412541][T12604] unevictable 0 [ 674.416071][T12604] hierarchical_memory_limit 314572800 [ 674.421473][T12604] hierarchical_memsw_limit 9223372036854771712 [ 674.427816][T12604] total_cache 0 [ 674.431251][T12604] total_rss 4096 [ 674.434825][T12604] total_shmem 0 [ 674.438305][T12604] total_mapped_file 0 [ 674.442301][T12604] total_dirty 0 [ 674.445810][T12604] total_writeback 0 [ 674.449658][T12604] total_workingset_refault_anon 17987 [ 674.455024][T12604] total_workingset_refault_file 5389 [ 674.460315][T12604] total_swap 724992 [ 674.464194][T12604] total_pgpgin 106710 [ 674.468217][T12604] total_pgpgout 106707 [ 674.472269][T12604] total_pgfault 81291 [ 674.476294][T12604] total_pgmajfault 8050 [ 674.480472][T12604] total_inactive_anon 0 [ 674.484623][T12604] total_active_anon 4096 [ 674.489077][T12604] total_inactive_file 0 [ 674.493278][T12604] total_active_file 0 [ 674.497318][T12604] total_unevictable 0 [ 674.501358][T12604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12604,uid=0 [ 674.516791][T12604] Memory cgroup out of memory: Killed process 12604 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 674.535285][T12621] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 674.545510][T12621] CPU: 0 PID: 12621 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 674.554200][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 674.564268][T12621] Call Trace: [ 674.567549][T12621] [ 674.570482][T12621] dump_stack_lvl+0xda/0x130 [ 674.575072][T12621] dump_stack+0x15/0x20 [ 674.579238][T12621] dump_header+0x95/0x3c0 [ 674.583567][T12621] oom_kill_process+0xe3/0x3e0 [ 674.588333][T12621] out_of_memory+0x9ca/0xc00 [ 674.592937][T12621] mem_cgroup_out_of_memory+0x139/0x190 [ 674.598483][T12621] try_charge_memcg+0x75c/0xd20 [ 674.603333][T12621] ? read_pages+0x320/0x560 [ 674.607831][T12621] charge_memcg+0x51/0x200 [ 674.612243][T12621] __mem_cgroup_charge+0x29/0xa0 [ 674.617190][T12621] __filemap_add_folio+0x454/0x730 [ 674.622308][T12621] ? workingset_activation+0x2e0/0x2e0 [ 674.627767][T12621] filemap_add_folio+0x6f/0x150 [ 674.632613][T12621] filemap_get_pages+0x5cf/0xea0 [ 674.637549][T12621] filemap_splice_read+0x23a/0x810 [ 674.642657][T12621] ? pipe_unlock+0x3b/0x40 [ 674.647101][T12621] ext4_file_splice_read+0x95/0xb0 [ 674.652213][T12621] ? ext4_release_file+0x1c0/0x1c0 [ 674.657327][T12621] splice_direct_to_actor+0x28c/0x690 [ 674.662738][T12621] ? direct_file_splice_eof+0x70/0x70 [ 674.668143][T12621] do_splice_direct+0x10d/0x190 [ 674.673015][T12621] ? do_splice_direct+0x190/0x190 [ 674.678049][T12621] do_sendfile+0x3b6/0x9a0 [ 674.682461][T12621] __x64_sys_sendfile64+0x110/0x150 [ 674.687740][T12621] do_syscall_64+0x41/0xc0 [ 674.692150][T12621] ? syscall_exit_to_user_mode+0x26/0x140 [ 674.697868][T12621] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 674.703763][T12621] RIP: 0033:0x7f074fb53389 [ 674.708166][T12621] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 674.727815][T12621] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 674.736220][T12621] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 674.744187][T12621] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 674.752152][T12621] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 674.760114][T12621] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 674.768098][T12621] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 674.776064][T12621] [ 674.779191][T12621] memory: usage 307200kB, limit 307200kB, failcnt 32558 [ 674.786126][T12621] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 674.794054][T12621] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 674.801366][T12621] Memory cgroup stats for /syz3: [ 674.805008][T12621] cache 12288 [ 674.813269][T12621] rss 8192 [ 674.816283][T12621] shmem 0 [ 674.819242][T12621] mapped_file 0 [ 674.822710][T12621] dirty 0 [ 674.825645][T12621] writeback 0 [ 674.828948][T12621] workingset_refault_anon 11935 [ 674.833786][T12621] workingset_refault_file 20072 [ 674.838661][T12621] swap 385024 [ 674.841933][T12621] pgpgin 693585 [ 674.845375][T12621] pgpgout 693580 [ 674.848927][T12621] pgfault 76237 [ 674.852376][T12621] pgmajfault 5044 [ 674.855995][T12621] inactive_anon 8192 [ 674.859914][T12621] active_anon 0 [ 674.863367][T12621] inactive_file 8192 [ 674.867271][T12621] active_file 4096 [ 674.870982][T12621] unevictable 0 [ 674.874438][T12621] hierarchical_memory_limit 314572800 [ 674.879848][T12621] hierarchical_memsw_limit 9223372036854771712 [ 674.885995][T12621] total_cache 12288 [ 674.889811][T12621] total_rss 8192 [ 674.893349][T12621] total_shmem 0 [ 674.896815][T12621] total_mapped_file 0 [ 674.900788][T12621] total_dirty 0 [ 674.904230][T12621] total_writeback 0 [ 674.908056][T12621] total_workingset_refault_anon 11935 [ 674.913425][T12621] total_workingset_refault_file 20072 [ 674.918816][T12621] total_swap 385024 [ 674.922614][T12621] total_pgpgin 693585 [ 674.926615][T12621] total_pgpgout 693580 [ 674.930680][T12621] total_pgfault 76237 [ 674.934659][T12621] total_pgmajfault 5044 [ 674.938835][T12621] total_inactive_anon 8192 [ 674.943243][T12621] total_active_anon 0 02:19:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd722, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:14 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x204240, 0x0) 02:19:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7e}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) 02:19:14 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000080)=@raw=[@map_idx_val], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 02:19:14 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) [ 674.947242][T12621] total_inactive_file 8192 [ 674.951652][T12621] total_active_file 4096 [ 674.955882][T12621] total_unevictable 0 [ 674.959881][T12621] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12616,uid=0 [ 674.975163][T12621] Memory cgroup out of memory: Killed process 12616 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:19:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x500, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:15 executing program 0: bpf$PROG_LOAD_XDP(0x4, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000340)) 02:19:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002a00)={&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, &(0x7f0000002940)=[{&(0x7f0000000340)="dd82cde3687ad93ed5f0aa30416a1791097989a18dde9a73a5262f67902b8b86878a9350bf5717d5c2583604aaf4960f4e90b7be27cab9819c624ea2ce103e22a80779b723e5b2d505cb86b39382729f95b9634a8fa0d016fa7703fecb9b92c2ebac83ca59077de00800241ed41f957ebf46cc6b716e271c9637909013bc0d03f15af737214dd81d19d5ea148a934ac4ebecd24decbbaee8c1c58a05def8829bf343a1752783ae608c0542495815cb6278b909adfb4e164e49027a9198ec68cdaca168ac8ca9781d9be08628e196e15d08c0ff7363efe34eae", 0xd9}, {&(0x7f0000000440)="66e13ee8a641d114eeef233fde073272908b82c608050b320b47d4a736b5b4f1b7ebaf328fbeed695ef7a2e2042a2dbeca8732bad5e23f94bf2eb9c1950e4e70cd1d6d84bb3b769fdbb1d5a33cff58e080963085ba3270337db8c886a6cf04bca473a91a90ea7ca8cf722a2f0cc9738a3dee814d45354c7caba62bd7ea87849e067317ae5446cf0fc78cdb27e4406ff94865be0b6bf5912e4bea1c45f41c00d8281e40d56d86081b649f792ebab3cf37a09d60dd78434b3353e25ca21643cb971e1a9e86ad4c9dd7ac52e8ed50283ab5a1818aa72c3c6c6e2315ff73c7ead7dc6d747581796da90ea7f6c5cbd9058e86583f8fd2e8d71ae4ab39fce4ea1a6892382d357908ead397b28a200d2e004578a7d0ec62c38411dc11c0efeafc5af9045b81d04a8902bbda40450bb95618e291bd516530d83d08aeb38495df114138060c66685279cbd651e249854783110a3594aeb1a82d1fe3e56718ef156bd5c6393e475391a9ad5082d1c15907494c1c1474118ecb01360807921bf037584eacd6e684c75fcf1319b5f785e401c894b7c5081e052128dde75ded6200804e13a80025d4eb4696ff46518563c0de9e2b21abcdbe2d8f6625442fe61d20169109569d48dfbf09e5f2fb6f1806b7626d9df65e1a91ba333f11962c787c69e2655326065033447653b006c676a1f50774eb08abfc02f235c845d91b7cce135b026a95a2426542812ce00e3b32845715bad52ff32682f22065da37c0536173e1d2b8062370296cdfa564fa3860c0207cef3ea4521927e3490492b0b629569354bbd1aa7b7d251e12d240ea95582ca130bf9769199deec37013793f3a41c698347d068f7116d29658eaff33d2d58a57ce1d9d4756c4c00d5b96b4e05bcaa66890bcfd3ed3ff23441d8aefa067fe35fdf562850c765e183f9c410fa8d9e4b1467a0f170584e376a3c05d9e7dc30ec2063d7fa7f42996555aa6780632c3094ee967aea3e7c51f77d8bd7ae3ce13a1104d2ce00493938cca2c043e326fa61544dea2eaf23bfdd231400e7a0f205eb953a44d23d54d6e6b0f3faf6ce5de51b092e6ea2475c430ca3dd860bbd0613dbaf6fdcd0fd2a1363fa343bbc47813621d8f266d59856d4d0dc4099f6d03b2e3133b4fc3090d6da7a5fbd1981c12d31e4e5f34e766c61b12c68fa95db7ada057adee216d5a4a5703ba0df807e9ec2595cf54108c4b282aa247d267cb5be711f2c461d3c634c27e374103355addfcdb4592c475542916a1a3d8950b975e528f20a0d560bfa89f8efb2464541c5b939d53eb94140f369b8c19ddc66bb96818608a236af8c98c194d9a33941ed0e04084e4dcfed8721246e03270eae60353c8890484635633b3cab75bd7ad43daf482eb602f9248a67b8cdb79175329fc1858e7662cfa45a737a1b7441cd75368ec626c0ec1b9d3f361ccd572435755d5aeb23664b471718515462092eff7cc3f8600ff475bda0d8ed66570e915feac28aebfe72c69d5f1930a50e487dfc8f849b003302b607c1eb4173013bddbe971244823d849bf4467a8d36f721814b9c471a390c91d25c04924d7f0ec9a68fd8e24e7f8275719266aca627a1c51243af3cda692a864533743a67e3ae5ee61ade2dbbfd7353c05b3416593cd68bbcbbbde0f290e08b877342a1c90531a0c214377265d4528f6808dc5d4a6a0b42907a0377e32a752a150bb9e75cf1c8a646dcaed09d01312596f33cdf50f5a9da4f37d467db7342453abedf31230f19eb67f1bcbcdc994e9ea952d87aa2c8803399256f06b0bc031cc17727454bf3d269abbbf98b0076a267bd0c7f6539a55f56bc89dfdcddce17540b39ed82028fd0b4009c8b547235413a058a907ed936af8fcb34203eb5b1d66fc704778db85464eb7b91fd77258d162e97e05ca4289649f7fcc1a99de0a277489dca62f8c1e98a03c55ed19804104ce8314228d58f779262b3dacb8539dfb5a45e64093c450cfc82a162eda60d05976bba0a3fa4db4ebe28be93246ffed92f5839b399ba72bafe02e4a741996bdca66b5a699a28467e857d51a194a611382dbf74a901a10fdd142fcfc6f6c9266449a16032482d3384d53cc67a225ca05ac59a51ee488f60cb1fe7539ff14a4d04755c4280bac9cb2beecc31bd338266167e7d57eaa3cbe46b8a1e100fd1058846c4a5536103c016e0cd85a2fda9079f18c4e027aa939099a7a886555afa0519665e6f9a409d28cebdf59e3ed4ca2a9c90eb54233a04f827a6ee41050dd3e1b43428392f6b5efaf7d3d8b6a8e0c88c3d5c5df23a351f92b0e5ed7e2d622ef4890418c29fa4d2b45d23f2a8f34222ca080404c2a5e21b164be67623b2aead467128427c31ad8d39e143457a7f20e778a640084d738bf57117dc8a9bd755b578f22c5dcb5c703e26e179ec7f4e80fe6bc2786e88b76f0bd7a745382bfd2a83e32593ad9f51db55b7c8b19236736ef3d13250ea9ee4d46cb010d1d3cb47a4a7de4a13ae85e585f4a1bc4756dc930180e3eb3d8ffccf953283cf0cdcb0d0693fa956b895d6862437fe35efbe2a982377c4200d60e9b11d4860c1df97045241de3608c04e6be36479f4964371f7ce39c2d5885bab891e6971c027d8996d8feb91a6c3db3f84b70bb4b7b0b7ea8766740494adb750f9a056b0aaeeda4d8462a27bd8f2dfb41b0ea9aa5938003ca9f7fd4efcc2906813fc8d36e5442de7f3457e96950f594e1a4d3660f44ceb764167d2dd530857981970b92b359e462eb10c6c981d05bc6ea02dd0201e1761c4876d80e3961b6974eb85cf7900007b7db1de2029027c1f50afcae0449b5f39b7fc06b8bfbdb2db47fbf35b179ab4c5343399510500d6d9bca4991489380edf0a926e7c0496b7797bd8398f40775cba4a4b73e4aaecb09198ea6659cd78f2447a2e52751f40d174781a8f87c547db4a1f7de19eec9e3879aed11c093a7be5970c5d8e849e7e80ce6a904a3be3dacfa62ac597bf740fd9fda7fe19d9334cec16a4cb2ac36df7bd3258977f5ac799134ad5fa8747799cdb726ca45aa426c78bac5fe0820bba0ae1c7cfdbb5924a43f0e0968204f202585310f0025499a5f59339bc16d80fa92335faad7154522e98ab3b3c7b5f3bc491872080c784dfa42319770cd7a1d4e8d56953be98e54d62d10404dfe1f98c856caa243c14906883c633f31470f3f0fa210680e1f691e5f68071d56d6a9aa40f20e6055789a9809508ee0a3fb36470d9bb40ef1730308e85a104997ae1e813f4f6b30534c85877a631f1492998cc72407d652f1a5059723164ce3a707758d65844e47f13c9f5d54f9df97d7082ece5602eef230883a588c94b5dc96253f22662e8923f4440264edda0221672bdd728936f4d69fa77834c6d0249c8c785345a6cc4b05308debbb758fd88c1656e1dff1ba99a3c5c2db1a304e8a712b0a2325041c2db2023a3302f96d08762e854bbc7c78ab40eaa1e7bd659ddde2ca74c0269b66cfe757f547d0919ef4085b2a2ff53c07258e82a312e357a82fd570b6f8a2dadebb51d7ebd329fa69ae130aec7ef3889480d024828a1c74dc7e42be669ff8a95f97a449b3f3cf2ea437be816c54d77f707888e2ed832d4b6235f0ccb4c100c8ddf77af9f450050ac9d02d910d862cbba006027f0ca87d187a6ad6efaf7b8e574bc8cb5cee5309e0d809e8636772008940b202c7b17150d7004633da119d3f1f636f8abc7a1983eb0d82a685bc0d006bd1a520e178ddf66c63a5a7c51f692721553f0e65460c140c55f46b3e729fa539b3e39286d986680ff2447984f56fd0a9d4413490d7836fc2efa8fa3603f36c0cec29145c07def240a5686a22870043fd7a1785bfcb3f7af1345e482e7c20f706163af470cfebf34a22d2a168039ea78e0abe4b58c74e5450cf63f4d478d6b34388fa374f9245f8cd3a78b77c2b3b9e180ec690d04acb257ccd101a042ce79a8addbe427c5ef816b8b857ea853660112098e381945a3a7e6f7dfaa5be46d2108d1f733264874926331a091d2cb0a64f83854349c3c81330b97cba9c1efeef8a3068b3d6ebc50db371e7f560be0c11b3f398a1077b62497aa165e0ea2e1158abdad37261fdc08202ddfc561954a33d4c50d702f96c670057598b77384052e78d2ef7a831b36add302b59399c72b300042987fbd5ce2537da62ef891b81b2c4c6d297c772bccb2f100478cb3e2076265a9b95101e585e6bcbcd42c6d095fff98a7af150b62c38ff054a16d0ebc082c1c6c3511b6b815c8a608223afe9f849e3906128ad840e34e27fa3da418ffff79ddbd0713bfd7282943e65d5b0a63dc8e8b816c44fb031b80831c25ab0da8ec552820159c51638c32f89b4adc0b214b52c9d1845266624a73e91279e536a5bb6e9acef49704a1d38b04390e22e140aaba42fe3035668cc4ee5880d37be7902bef699eac80dfd89de943b57a9a577cc13e491246b2083f4ff8f95ddd656ac9ff0112188d24e6b554dc58dccae2ae826dbd0f9ed57da810615e419d2c46266e8bce03fd9f7c2041f0773bd0835419c03e5b48945db8ac38640760edaa923642d1ff2e32a422184ecd64f1b1d861e50fa2e77912b40b5f1973655d72e72e98cefff271ae0b900b5fd394d0b5a3f810f5d6027fb7aa7e4a14408c59a52c69c34df68198c65a35c3e5b92a4a46e4bd57893f364aac7f98597045175d4e3cd3fd32d3d0ce5322e490e7b7032f96620a2de56aebc59993b4e35e623b679ac874e28b5b35cbba7d6917f2e73fb8f618b9327e2326a2c35ea81bfdc62307d7d089aaa404649bd3eaa9427b2987362551d52c2a5e9588176a80a895c82f44df4ae932bae2d24052908ecb5dd2f7dfe12d77b14f371019f40fc04b2f39e74f9a7d6cb5699cd2b537f30a19e4a19469d958c608065d74711a78dcdaeca2dbae5a5fe9500a91599a722e7e30625cfba1773bb93527585caccb79ca31f446ed92c18749f73f3387ac7692d392258988daf63a6aa2aded78d551188ebb31fda69786593dbf4c35d655083767db3c77be2288adbe21ee7a42eec242c15190a8ba2a81d398af6eeb94dff40d817def66f1c4217aa9dd5d327c886d782e576477b767c0f370b6360187580aab4a6d0927084399c5c7147729943bee4555aa0b310f29e69a21a931e800d3a9e70e7f34271a195532eafd77328fe60818d5ac5dfbac935bc06f7e087f86b59da3bbf424d8b0ca9fab560a7e0dbca3c4a506e115c1cc1a59d6641d7cadd1df1e8b14622eaa4e204dbd5ebd6013dfd0f57d5996dec30a153d55306623f5c7131d9b58b578c5f69118e4a7661138da7bd13426ad805b46497edc968324287a7539f0508f86d0afba5db425cc64fc431671e43af3f383db16073c50c92e6bf16674cd48c0bba939872aea62fdfda77e7ab2c0e3903f33d8abdd1ae400f3ed987582e46b001ef59a7c02f3b8a8424664b783ff6c9af144b474bb501378dd5fa42a840d738e2b09487d0bc914768c38713ef288f56ebd8580bd700399050af8c25a8624094b63258b561ea3f1aad86832ad5332307eb45b84685639301dd15800d318fca9bd53611b430555ee44e8f445105952871a5660405b93049de165b3d967213dccf9c8457ab2230318d240a340952db697023851a22600d76802b1c4bfa3bb9ebfc4c055f92f7702716ab4c97dde8dae43fe7da81ac5dbf2276248f3792d1c6fff7480883b3776e69de5ca34426e84fa3b7fc97e103a37ca799f6947a17b198bfe1fa597eda47edd346716a2dd0bef41a82563874793d7143a6d9f4731f", 0x1000}, {&(0x7f0000001440)="145fd3ad54fe796500b59509a63ef5", 0xf}, {&(0x7f0000001480)="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", 0xdd9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 02:19:15 executing program 4: bpf$MAP_DELETE_BATCH(0x1b, 0xfffffffffffffffc, 0x0) 02:19:15 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:19:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x401c5820, &(0x7f0000000000)={'nr0\x00'}) [ 675.250693][ T26] audit: type=1400 audit(1688955555.175:351): avc: denied { cpu } for pid=12643 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 675.730797][T12633] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 675.742149][T12633] CPU: 0 PID: 12633 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 675.750842][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 675.760890][T12633] Call Trace: [ 675.764157][T12633] [ 675.767153][T12633] dump_stack_lvl+0xda/0x130 [ 675.772000][T12633] dump_stack+0x15/0x20 [ 675.776240][T12633] dump_header+0x95/0x3c0 [ 675.780581][T12633] oom_kill_process+0xe3/0x3e0 [ 675.785364][T12633] out_of_memory+0x9ca/0xc00 [ 675.789994][T12633] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 675.796106][T12633] mem_cgroup_out_of_memory+0x139/0x190 [ 675.801662][T12633] try_charge_memcg+0x75c/0xd20 [ 675.806511][T12633] ? __alloc_pages+0x193/0x340 [ 675.811272][T12633] charge_memcg+0x51/0x200 [ 675.815688][T12633] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 675.821664][T12633] __read_swap_cache_async+0x2fe/0x560 [ 675.827153][T12633] swap_cluster_readahead+0x2a3/0x4f0 [ 675.832525][T12633] swapin_readahead+0x8d/0x700 [ 675.837331][T12633] ? __filemap_get_folio+0x47c/0x500 [ 675.842618][T12633] ? swap_cache_get_folio+0x6e/0x210 [ 675.848035][T12633] do_swap_page+0x4d7/0x1550 [ 675.852652][T12633] ? pte_offset_map_nolock+0x11f/0x1c0 [ 675.858105][T12633] handle_mm_fault+0x9ec/0x2c10 [ 675.862950][T12633] ? mt_find+0x1d1/0x300 [ 675.867265][T12633] exc_page_fault+0x24d/0x650 [ 675.871945][T12633] asm_exc_page_fault+0x26/0x30 [ 675.876792][T12633] RIP: 0033:0x7fb036a9283c [ 675.881241][T12633] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 675.900907][T12633] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 675.906978][T12633] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 675.914942][T12633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.922902][T12633] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 675.930864][T12633] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a502b [ 675.938880][T12633] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 675.946923][T12633] [ 675.950106][T12633] memory: usage 307200kB, limit 307200kB, failcnt 60035 [ 675.957074][T12633] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 675.964971][T12633] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 675.972378][T12633] Memory cgroup stats for /syz1: [ 675.975151][T12633] cache 0 [ 675.983070][T12633] rss 4096 [ 675.986179][T12633] shmem 0 [ 675.989150][T12633] mapped_file 0 [ 675.992602][T12633] dirty 0 [ 675.995601][T12633] writeback 4096 [ 675.999152][T12633] workingset_refault_anon 18038 [ 676.004065][T12633] workingset_refault_file 5389 [ 676.008919][T12633] swap 724992 [ 676.012267][T12633] pgpgin 106787 [ 676.015721][T12633] pgpgout 106784 [ 676.019289][T12633] pgfault 81438 [ 676.022805][T12633] pgmajfault 8068 [ 676.026587][T12633] inactive_anon 0 [ 676.030212][T12633] active_anon 0 [ 676.033669][T12633] inactive_file 0 [ 676.037312][T12633] active_file 0 [ 676.040765][T12633] unevictable 0 [ 676.044239][T12633] hierarchical_memory_limit 314572800 [ 676.049645][T12633] hierarchical_memsw_limit 9223372036854771712 [ 676.055800][T12633] total_cache 0 [ 676.059285][T12633] total_rss 4096 [ 676.062840][T12633] total_shmem 0 [ 676.066285][T12633] total_mapped_file 0 [ 676.070328][T12633] total_dirty 0 [ 676.073778][T12633] total_writeback 4096 [ 676.077928][T12633] total_workingset_refault_anon 18038 [ 676.083316][T12633] total_workingset_refault_file 5389 [ 676.088636][T12633] total_swap 724992 [ 676.092441][T12633] total_pgpgin 106787 [ 676.096492][T12633] total_pgpgout 106784 [ 676.100654][T12633] total_pgfault 81438 [ 676.104644][T12633] total_pgmajfault 8068 [ 676.108886][T12633] total_inactive_anon 0 [ 676.113029][T12633] total_active_anon 0 [ 676.117029][T12633] total_inactive_file 0 [ 676.121299][T12633] total_active_file 0 [ 676.125280][T12633] total_unevictable 0 [ 676.129289][T12633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12633,uid=0 [ 676.144686][T12633] Memory cgroup out of memory: Killed process 12633 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd822, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'team_slave_0\x00', 0x2}) 02:19:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 02:19:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:19:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000040) 02:19:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x600, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:16 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:19:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 02:19:16 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x604402, 0x0) close(r0) 02:19:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 02:19:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x0, 0x29, 0x1}, 0x48) 02:19:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000094000000940000000c0000000a0000000800000604"], &(0x7f0000000140)=""/171, 0xb8, 0xab, 0x1}, 0x20) [ 677.063509][T12670] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 677.074881][T12670] CPU: 0 PID: 12670 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 677.083615][T12670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 677.093658][T12670] Call Trace: [ 677.096947][T12670] [ 677.099942][T12670] dump_stack_lvl+0xda/0x130 [ 677.104532][T12670] dump_stack+0x15/0x20 [ 677.108711][T12670] dump_header+0x95/0x3c0 [ 677.113072][T12670] oom_kill_process+0xe3/0x3e0 [ 677.117872][T12670] out_of_memory+0x9ca/0xc00 [ 677.122567][T12670] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 677.128724][T12670] mem_cgroup_out_of_memory+0x139/0x190 [ 677.134295][T12670] try_charge_memcg+0x75c/0xd20 [ 677.139171][T12670] ? __alloc_pages+0x193/0x340 [ 677.143955][T12670] charge_memcg+0x51/0x200 [ 677.148490][T12670] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 677.154614][T12670] __read_swap_cache_async+0x2fe/0x560 [ 677.160088][T12670] swap_cluster_readahead+0x2a3/0x4f0 [ 677.165465][T12670] swapin_readahead+0x8d/0x700 [ 677.170316][T12670] ? __filemap_get_folio+0x47c/0x500 [ 677.175696][T12670] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 677.181395][T12670] ? swap_cache_get_folio+0x6e/0x210 [ 677.186703][T12670] do_swap_page+0x4d7/0x1550 [ 677.191313][T12670] ? pte_offset_map_nolock+0x11f/0x1c0 [ 677.197110][T12670] handle_mm_fault+0x9ec/0x2c10 [ 677.202051][T12670] ? mt_find+0x1d1/0x300 [ 677.206309][T12670] exc_page_fault+0x24d/0x650 [ 677.210984][T12670] asm_exc_page_fault+0x26/0x30 [ 677.215830][T12670] RIP: 0033:0x7fb036a9283c [ 677.220231][T12670] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 677.239880][T12670] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 677.245934][T12670] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 677.254049][T12670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 677.262017][T12670] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 677.270034][T12670] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a5586 [ 677.277997][T12670] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 677.285967][T12670] [ 677.289061][T12670] memory: usage 307200kB, limit 307200kB, failcnt 60230 [ 677.295994][T12670] memory+swap: usage 307956kB, limit 9007199254740988kB, failcnt 0 [ 677.304164][T12670] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 677.311490][T12670] Memory cgroup stats for /syz1: [ 677.315731][T12670] cache 0 [ 677.323746][T12670] rss 0 [ 677.326494][T12670] shmem 0 [ 677.329443][T12670] mapped_file 0 [ 677.332902][T12670] dirty 0 [ 677.335822][T12670] writeback 0 [ 677.339111][T12670] workingset_refault_anon 18082 [ 677.343946][T12670] workingset_refault_file 5389 [ 677.348783][T12670] swap 782336 [ 677.352057][T12670] pgpgin 106857 [ 677.355539][T12670] pgpgout 106857 [ 677.359098][T12670] pgfault 81591 [ 677.362569][T12670] pgmajfault 8082 [ 677.366231][T12670] inactive_anon 0 [ 677.369869][T12670] active_anon 0 [ 677.373312][T12670] inactive_file 0 [ 677.377031][T12670] active_file 0 [ 677.380582][T12670] unevictable 0 [ 677.384091][T12670] hierarchical_memory_limit 314572800 [ 677.389472][T12670] hierarchical_memsw_limit 9223372036854771712 [ 677.395616][T12670] total_cache 0 [ 677.399157][T12670] total_rss 0 [ 677.402431][T12670] total_shmem 0 [ 677.405982][T12670] total_mapped_file 0 [ 677.409973][T12670] total_dirty 0 [ 677.413421][T12670] total_writeback 0 [ 677.417226][T12670] total_workingset_refault_anon 18082 [ 677.422584][T12670] total_workingset_refault_file 5389 [ 677.427932][T12670] total_swap 782336 [ 677.431729][T12670] total_pgpgin 106857 [ 677.435682][T12670] total_pgpgout 106857 [ 677.439788][T12670] total_pgfault 81591 [ 677.443757][T12670] total_pgmajfault 8082 [ 677.447941][T12670] total_inactive_anon 0 [ 677.452079][T12670] total_active_anon 0 [ 677.456052][T12670] total_inactive_file 0 [ 677.460282][T12670] total_active_file 0 [ 677.464263][T12670] total_unevictable 0 [ 677.468255][T12670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12670,uid=0 [ 677.483693][T12670] Memory cgroup out of memory: Killed process 12670 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:17 executing program 5: perf_event_open(&(0x7f0000003240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:19:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd922, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:17 executing program 4: socketpair(0xf, 0x0, 0x0, &(0x7f0000000240)) 02:19:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8}]}]}}, &(0x7f0000000140)=""/197, 0x32, 0xc5, 0x1}, 0x20) 02:19:17 executing program 0: r0 = perf_event_open(&(0x7f0000003240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0xc008240a, 0x0) 02:19:17 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xc00, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:17 executing program 4: perf_event_open(&(0x7f0000003240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 02:19:17 executing program 2: r0 = perf_event_open(&(0x7f0000003240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x40042409, 0x0) 02:19:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x90804, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:19:17 executing program 0: bpf$PROG_LOAD_XDP(0x2, 0x0, 0x700) [ 677.711593][ T26] audit: type=1400 audit(1688955557.635:352): avc: denied { write } for pid=12685 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 02:19:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000140)=""/197, 0x26, 0xc5, 0x1}, 0x20) 02:19:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 02:19:17 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="13", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001d40)=[{0x0}, {&(0x7f00000009c0)=""/210, 0xd2}], 0x2}, 0x0) 02:19:18 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000012c0)) 02:19:18 executing program 5: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000002d40)='syz1\x00', 0x1ff) 02:19:18 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1d, 0x6, 0x0, &(0x7f0000000000)) 02:19:18 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x2, &(0x7f0000001300)=@raw=[@cb_func], &(0x7f0000001340)='GPL\x00', 0x0, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0x400, 0xcdfa, 0x80000000}, 0x10}, 0x80) 02:19:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xda22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:18 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xdff, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:18 executing program 4: perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:19:18 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002d80)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 02:19:18 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006980)={0x6, 0x4, &(0x7f0000006700)=@framed={{}, [@func]}, &(0x7f0000006780)='GPL\x00', 0x7, 0x93, &(0x7f00000067c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:18 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002cc0)={&(0x7f0000001a80)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}], 0x20}, 0x0) 02:19:18 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005e80)=@bpf_lsm={0x1d, 0x3, &(0x7f0000004c80)=@framed, &(0x7f0000004d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:18 executing program 2: socketpair(0x6, 0x80000, 0x0, &(0x7f0000001100)) 02:19:18 executing program 0: socketpair(0x0, 0x80000, 0x0, &(0x7f0000001100)) [ 678.870023][T12721] can: request_module (can-proto-0) failed. 02:19:18 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 02:19:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000006200)={0x0, 0x1, &(0x7f0000005f80)=@raw=[@call], &(0x7f0000006040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:18 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 678.929971][ T26] audit: type=1400 audit(1688955558.855:353): avc: denied { create } for pid=12738 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 679.683397][T12732] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 679.697001][T12732] CPU: 1 PID: 12732 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 679.705735][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 679.715853][T12732] Call Trace: [ 679.719167][T12732] [ 679.722153][T12732] dump_stack_lvl+0xda/0x130 [ 679.726844][T12732] dump_stack+0x15/0x20 [ 679.731008][T12732] dump_header+0x95/0x3c0 [ 679.735364][T12732] oom_kill_process+0xe3/0x3e0 [ 679.740143][T12732] out_of_memory+0x9ca/0xc00 [ 679.744817][T12732] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 679.750886][T12732] mem_cgroup_out_of_memory+0x139/0x190 [ 679.756437][T12732] try_charge_memcg+0x75c/0xd20 [ 679.761366][T12732] obj_cgroup_charge_pages+0xab/0x130 [ 679.766742][T12732] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 679.772290][T12732] __alloc_pages+0x1bb/0x340 [ 679.776950][T12732] alloc_pages+0x3e1/0x4e0 [ 679.781362][T12732] __vmalloc_node_range+0x6d2/0xea0 [ 679.786555][T12732] kvmalloc_node+0x121/0x160 [ 679.791142][T12732] ? xt_alloc_table_info+0x3d/0x80 [ 679.796340][T12732] xt_alloc_table_info+0x3d/0x80 [ 679.801315][T12732] do_arpt_set_ctl+0x615/0x1390 [ 679.806160][T12732] ? futex_unqueue+0xba/0xe0 [ 679.810777][T12732] ? futex_wait+0x3c3/0x410 [ 679.815386][T12732] ? _raw_spin_unlock_bh+0x36/0x40 [ 679.820493][T12732] ? lock_sock_nested+0x10e/0x130 [ 679.825529][T12732] ? tcp_release_cb+0xfe/0x340 [ 679.830341][T12732] nf_setsockopt+0x18d/0x1b0 [ 679.834995][T12732] ip_setsockopt+0xe6/0x100 [ 679.839505][T12732] tcp_setsockopt+0x90/0xa0 [ 679.844010][T12732] sock_common_setsockopt+0x61/0x70 [ 679.849208][T12732] ? sock_common_recvmsg+0xe0/0xe0 [ 679.854392][T12732] __sys_setsockopt+0x1c9/0x230 [ 679.859242][T12732] __x64_sys_setsockopt+0x66/0x80 [ 679.864284][T12732] do_syscall_64+0x41/0xc0 [ 679.868744][T12732] ? syscall_exit_to_user_mode+0x26/0x140 [ 679.874576][T12732] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 679.880467][T12732] RIP: 0033:0x7fb036ae7389 [ 679.885014][T12732] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 679.904613][T12732] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 679.913141][T12732] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 679.921115][T12732] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 679.929162][T12732] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 679.937191][T12732] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.945192][T12732] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 679.953195][T12732] [ 679.956454][T12732] memory: usage 307200kB, limit 307200kB, failcnt 60853 [ 679.963489][T12732] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 679.971448][T12732] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 679.978866][T12732] Memory cgroup stats for /syz1: [ 679.981063][T12732] cache 0 [ 679.988980][T12732] rss 4096 [ 679.992026][T12732] shmem 0 [ 679.994959][T12732] mapped_file 0 [ 679.998438][T12732] dirty 0 [ 680.001436][T12732] writeback 0 [ 680.004710][T12732] workingset_refault_anon 18150 [ 680.009581][T12732] workingset_refault_file 5389 [ 680.014332][T12732] swap 729088 [ 680.017629][T12732] pgpgin 106977 [ 680.021119][T12732] pgpgout 106973 [ 680.024660][T12732] pgfault 81851 [ 680.028176][T12732] pgmajfault 8119 [ 680.031835][T12732] inactive_anon 8192 [ 680.035817][T12732] active_anon 8192 [ 680.039570][T12732] inactive_file 0 [ 680.043220][T12732] active_file 0 [ 680.046695][T12732] unevictable 0 [ 680.050251][T12732] hierarchical_memory_limit 314572800 [ 680.055626][T12732] hierarchical_memsw_limit 9223372036854771712 [ 680.061808][T12732] total_cache 0 [ 680.065314][T12732] total_rss 4096 [ 680.068884][T12732] total_shmem 0 [ 680.072337][T12732] total_mapped_file 0 [ 680.076314][T12732] total_dirty 0 [ 680.079846][T12732] total_writeback 0 [ 680.083820][T12732] total_workingset_refault_anon 18150 [ 680.089257][T12732] total_workingset_refault_file 5389 [ 680.094612][T12732] total_swap 729088 [ 680.098440][T12732] total_pgpgin 106977 [ 680.102446][T12732] total_pgpgout 106973 [ 680.106518][T12732] total_pgfault 81851 [ 680.110760][T12732] total_pgmajfault 8119 [ 680.114939][T12732] total_inactive_anon 8192 [ 680.119482][T12732] total_active_anon 8192 [ 680.123859][T12732] total_inactive_file 0 [ 680.128087][T12732] total_active_file 0 [ 680.132083][T12732] total_unevictable 0 [ 680.136054][T12732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12730,uid=0 [ 680.151373][T12732] Memory cgroup out of memory: Killed process 12730 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="13", 0x1}], 0x1}, 0x0) 02:19:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:19:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x10}, 0x80) 02:19:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xdb22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x5, &(0x7f0000000ac0)=@raw=[@ldst, @initr0, @ldst, @generic], &(0x7f0000000b00)='GPL\x00', 0x4, 0xa0, &(0x7f0000000b40)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:20 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7fffffe, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:20 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) 02:19:20 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) 02:19:20 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0), 0xc) 02:19:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001d80)=""/185, 0x1a, 0xb9, 0x1}, 0x20) 02:19:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000400)="0f", 0x1}], 0x3}, 0x0) 02:19:20 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 02:19:20 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) getsockname(r0, &(0x7f00000019c0), &(0x7f0000000000)=0xffc) 02:19:20 executing program 5: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 681.074056][T12765] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 681.085436][T12765] CPU: 0 PID: 12765 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 681.094159][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 681.104272][T12765] Call Trace: [ 681.107569][T12765] [ 681.110491][T12765] dump_stack_lvl+0xda/0x130 [ 681.115078][T12765] dump_stack+0x15/0x20 [ 681.119226][T12765] dump_header+0x95/0x3c0 [ 681.123618][T12765] oom_kill_process+0xe3/0x3e0 [ 681.128415][T12765] out_of_memory+0x9ca/0xc00 [ 681.134611][T12765] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 681.140755][T12765] mem_cgroup_out_of_memory+0x139/0x190 [ 681.146310][T12765] try_charge_memcg+0x75c/0xd20 [ 681.151160][T12765] ? __alloc_pages+0x193/0x340 [ 681.155921][T12765] charge_memcg+0x51/0x200 [ 681.160423][T12765] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 681.166464][T12765] __read_swap_cache_async+0x2fe/0x560 [ 681.171947][T12765] swap_cluster_readahead+0x2a3/0x4f0 [ 681.177317][T12765] swapin_readahead+0x8d/0x700 [ 681.182086][T12765] ? __filemap_get_folio+0x47c/0x500 [ 681.187539][T12765] ? swap_cache_get_folio+0x6e/0x210 [ 681.192852][T12765] do_swap_page+0x4d7/0x1550 [ 681.197448][T12765] ? pte_offset_map_nolock+0x11f/0x1c0 [ 681.203086][T12765] handle_mm_fault+0x9ec/0x2c10 [ 681.208005][T12765] ? mt_find+0x1d1/0x300 [ 681.212333][T12765] exc_page_fault+0x24d/0x650 [ 681.217194][T12765] asm_exc_page_fault+0x26/0x30 [ 681.222102][T12765] RIP: 0033:0x7fb036a9283c [ 681.226505][T12765] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 681.246195][T12765] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 681.252285][T12765] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 681.260246][T12765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.268209][T12765] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 681.276169][T12765] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a64f4 [ 681.284188][T12765] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 681.292154][T12765] [ 681.295243][T12765] memory: usage 307200kB, limit 307200kB, failcnt 60973 [ 681.302208][T12765] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 681.310125][T12765] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 681.317447][T12765] Memory cgroup stats for /syz1: [ 681.317692][T12765] cache 0 [ 681.325548][T12765] rss 0 [ 681.328332][T12765] shmem 0 [ 681.331262][T12765] mapped_file 0 [ 681.334712][T12765] dirty 0 [ 681.337658][T12765] writeback 0 [ 681.340934][T12765] workingset_refault_anon 18192 [ 681.345775][T12765] workingset_refault_file 5389 [ 681.350562][T12765] swap 733184 [ 681.353843][T12765] pgpgin 107045 [ 681.357320][T12765] pgpgout 107044 [ 681.360859][T12765] pgfault 81980 [ 681.364303][T12765] pgmajfault 8136 [ 681.367951][T12765] inactive_anon 0 [ 681.371575][T12765] active_anon 0 [ 681.375016][T12765] inactive_file 0 [ 681.378663][T12765] active_file 0 [ 681.382117][T12765] unevictable 0 [ 681.385586][T12765] hierarchical_memory_limit 314572800 [ 681.392102][T12765] hierarchical_memsw_limit 9223372036854771712 [ 681.398265][T12765] total_cache 0 [ 681.401715][T12765] total_rss 4096 [ 681.405337][T12765] total_shmem 0 [ 681.408817][T12765] total_mapped_file 0 [ 681.412794][T12765] total_dirty 0 [ 681.416242][T12765] total_writeback 0 [ 681.420100][T12765] total_workingset_refault_anon 18192 [ 681.425631][T12765] total_workingset_refault_file 5389 [ 681.430942][T12765] total_swap 733184 [ 681.434795][T12765] total_pgpgin 107045 [ 681.438800][T12765] total_pgpgout 107044 [ 681.442858][T12765] total_pgfault 81980 [ 681.446893][T12765] total_pgmajfault 8136 [ 681.451123][T12765] total_inactive_anon 4096 [ 681.455523][T12765] total_active_anon 0 [ 681.459580][T12765] total_inactive_file 0 [ 681.463730][T12765] total_active_file 0 [ 681.467734][T12765] total_unevictable 0 [ 681.471734][T12765] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12765,uid=0 [ 681.487160][T12765] Memory cgroup out of memory: Killed process 12765 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xdc22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000680), 0x10) 02:19:21 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000080)={@random="d350613ce900", @empty, @val, {@ipv4}}, 0x0) 02:19:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f00000001c0)=0x20, 0x4) 02:19:21 executing program 0: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 02:19:21 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x2, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:19:21 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000440)=""/243, 0xf3}, 0x1) 02:19:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000680)={0x0, 0x2}, 0x10) 02:19:21 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 02:19:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8905, &(0x7f0000000000)) 02:19:21 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="a9b79143850a33b54ec292ff", 0xc) [ 681.766501][ T26] audit: type=1400 audit(1688955561.685:354): avc: denied { read } for pid=12801 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 682.415105][T12804] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 682.426470][T12804] CPU: 0 PID: 12804 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 682.435243][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 682.445481][T12804] Call Trace: [ 682.448758][T12804] [ 682.451698][T12804] dump_stack_lvl+0xda/0x130 [ 682.456307][T12804] dump_stack+0x15/0x20 [ 682.460553][T12804] dump_header+0x95/0x3c0 [ 682.464923][T12804] oom_kill_process+0xe3/0x3e0 [ 682.469758][T12804] out_of_memory+0x9ca/0xc00 [ 682.474360][T12804] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 682.480505][T12804] mem_cgroup_out_of_memory+0x139/0x190 [ 682.486073][T12804] try_charge_memcg+0x75c/0xd20 [ 682.490982][T12804] ? __alloc_pages+0x193/0x340 [ 682.495762][T12804] charge_memcg+0x51/0x200 [ 682.500280][T12804] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 682.506313][T12804] __read_swap_cache_async+0x2fe/0x560 [ 682.511816][T12804] swap_cluster_readahead+0x2a3/0x4f0 [ 682.517221][T12804] swapin_readahead+0x8d/0x700 [ 682.522036][T12804] ? __filemap_get_folio+0x47c/0x500 [ 682.527378][T12804] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 682.532961][T12804] ? swap_cache_get_folio+0x6e/0x210 [ 682.538319][T12804] do_swap_page+0x4d7/0x1550 [ 682.543022][T12804] ? pte_offset_map_nolock+0x11f/0x1c0 [ 682.548521][T12804] handle_mm_fault+0x9ec/0x2c10 [ 682.553483][T12804] ? mt_find+0x1d1/0x300 [ 682.557825][T12804] exc_page_fault+0x24d/0x650 [ 682.562533][T12804] asm_exc_page_fault+0x26/0x30 [ 682.567420][T12804] RIP: 0033:0x7fb036a9283c [ 682.571849][T12804] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 682.591495][T12804] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 682.597629][T12804] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 682.605607][T12804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 682.613590][T12804] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 682.621551][T12804] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a6a64 [ 682.629511][T12804] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 682.637554][T12804] [ 682.640754][T12804] memory: usage 307200kB, limit 307200kB, failcnt 61755 [ 682.647780][T12804] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 682.655702][T12804] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 682.663270][T12804] Memory cgroup stats for /syz1: [ 682.666043][T12804] cache 0 [ 682.673934][T12804] rss 12288 [ 682.677059][T12804] shmem 0 [ 682.679997][T12804] mapped_file 0 [ 682.683444][T12804] dirty 0 [ 682.686367][T12804] writeback 0 [ 682.689750][T12804] workingset_refault_anon 18225 [ 682.694592][T12804] workingset_refault_file 5389 [ 682.699397][T12804] swap 724992 [ 682.702718][T12804] pgpgin 107105 [ 682.706168][T12804] pgpgout 107102 [ 682.709879][T12804] pgfault 82109 [ 682.713325][T12804] pgmajfault 8156 [ 682.717018][T12804] inactive_anon 8192 [ 682.720901][T12804] active_anon 4096 [ 682.724610][T12804] inactive_file 0 [ 682.728249][T12804] active_file 0 [ 682.731698][T12804] unevictable 0 [ 682.735215][T12804] hierarchical_memory_limit 314572800 [ 682.740585][T12804] hierarchical_memsw_limit 9223372036854771712 [ 682.746761][T12804] total_cache 0 [ 682.750339][T12804] total_rss 12288 [ 682.753962][T12804] total_shmem 0 [ 682.757498][T12804] total_mapped_file 0 [ 682.761471][T12804] total_dirty 0 [ 682.764916][T12804] total_writeback 0 [ 682.768739][T12804] total_workingset_refault_anon 18225 [ 682.774101][T12804] total_workingset_refault_file 5389 [ 682.779405][T12804] total_swap 724992 [ 682.783200][T12804] total_pgpgin 107105 [ 682.787194][T12804] total_pgpgout 107102 [ 682.791257][T12804] total_pgfault 82109 [ 682.795238][T12804] total_pgmajfault 8156 [ 682.799419][T12804] total_inactive_anon 8192 [ 682.803830][T12804] total_active_anon 4096 [ 682.808144][T12804] total_inactive_file 0 [ 682.812377][T12804] total_active_file 0 [ 682.816878][T12804] total_unevictable 0 [ 682.820949][T12804] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12804,uid=0 [ 682.836250][T12804] Memory cgroup out of memory: Killed process 12804 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:22 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @val, {@ipv6}}, 0x0) 02:19:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 02:19:22 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @val, {@ipv4}}, 0x0) 02:19:22 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x0) 02:19:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xdd22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:22 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x3, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x14, r1, 0x801}, 0x14}}, 0x0) 02:19:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0xc0189436, &(0x7f0000000040)={'ip6gretap0\x00', 0x400}) 02:19:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 02:19:23 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x60002, 0x0) 02:19:23 executing program 2: r0 = socket(0x23, 0x5, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 02:19:23 executing program 4: r0 = socket(0x11, 0xa, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) 02:19:23 executing program 5: getresgid(&(0x7f0000000540), &(0x7f0000000580), 0x0) 02:19:23 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x7ff}, 0x10) 02:19:23 executing program 4: r0 = msgget(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)) [ 683.153382][ T26] audit: type=1400 audit(1688955563.075:355): avc: denied { getopt } for pid=12837 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 683.218515][ T26] audit: type=1400 audit(1688955563.085:356): avc: denied { write } for pid=12839 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 683.915471][ T3081] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 683.926601][ T3081] CPU: 0 PID: 3081 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 683.935191][ T3081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 683.945320][ T3081] Call Trace: [ 683.948599][ T3081] [ 683.951521][ T3081] dump_stack_lvl+0xda/0x130 [ 683.956129][ T3081] dump_stack+0x15/0x20 [ 683.960306][ T3081] dump_header+0x95/0x3c0 [ 683.964742][ T3081] oom_kill_process+0xe3/0x3e0 [ 683.969573][ T3081] out_of_memory+0x9ca/0xc00 [ 683.974175][ T3081] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 683.980406][ T3081] mem_cgroup_out_of_memory+0x139/0x190 [ 683.986017][ T3081] try_charge_memcg+0x75c/0xd20 [ 683.990952][ T3081] ? __alloc_pages+0x193/0x340 [ 683.995769][ T3081] charge_memcg+0x51/0x200 [ 684.000248][ T3081] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 684.006216][ T3081] __read_swap_cache_async+0x2fe/0x560 [ 684.011671][ T3081] swap_cluster_readahead+0x2a3/0x4f0 [ 684.017120][ T3081] swapin_readahead+0x8d/0x700 [ 684.021996][ T3081] ? __filemap_get_folio+0x47c/0x500 [ 684.027347][ T3081] ? __list_add_valid+0x36/0xb0 [ 684.032275][ T3081] ? _raw_spin_unlock+0x26/0x40 [ 684.037162][ T3081] ? swap_cache_get_folio+0x6e/0x210 [ 684.042497][ T3081] do_swap_page+0x4d7/0x1550 [ 684.047078][ T3081] ? pte_offset_map_nolock+0x11f/0x1c0 [ 684.052664][ T3081] handle_mm_fault+0x9ec/0x2c10 [ 684.057527][ T3081] ? mt_find+0x1d1/0x300 [ 684.061782][ T3081] exc_page_fault+0x24d/0x650 [ 684.066556][ T3081] asm_exc_page_fault+0x26/0x30 [ 684.071404][ T3081] RIP: 0033:0x7fb036b0c06f [ 684.075808][ T3081] Code: 44 f8 64 8b 04 25 18 00 00 00 85 c0 75 2d b8 e6 00 00 00 0f 05 89 c2 f7 da 3d 00 f0 ff ff b8 00 00 00 00 0f 47 c2 48 83 c4 28 b8 16 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 48 89 54 24 10 [ 684.095439][ T3081] RSP: 002b:00007ffec69fb0f8 EFLAGS: 00010202 [ 684.101559][ T3081] RAX: 0000000000000000 RBX: 000000000000088b RCX: 00007fb036b0c05a [ 684.109516][ T3081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.117502][ T3081] RBP: 00007ffec69fb19c R08: 0000000000000010 R09: 00007ffec6a550b0 [ 684.125478][ T3081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 684.133455][ T3081] R13: 00000000000a6cca R14: 0000000000000009 R15: 00007ffec69fb200 [ 684.141461][ T3081] [ 684.144599][ T3081] memory: usage 307200kB, limit 307200kB, failcnt 62321 [ 684.151561][ T3081] memory+swap: usage 307952kB, limit 9007199254740988kB, failcnt 0 [ 684.159459][ T3081] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 684.166852][ T3081] Memory cgroup stats for /syz1: [ 684.166977][ T3081] cache 0 [ 684.174987][ T3081] rss 0 [ 684.177832][ T3081] shmem 0 [ 684.180760][ T3081] mapped_file 0 [ 684.184244][ T3081] dirty 0 [ 684.187197][ T3081] writeback 0 [ 684.190536][ T3081] workingset_refault_anon 18246 [ 684.195397][ T3081] workingset_refault_file 5389 [ 684.200165][ T3081] swap 770048 [ 684.203505][ T3081] pgpgin 107152 [ 684.206960][ T3081] pgpgout 107152 [ 684.210493][ T3081] pgfault 82247 [ 684.213989][ T3081] pgmajfault 8164 [ 684.217625][ T3081] inactive_anon 0 [ 684.221240][ T3081] active_anon 0 [ 684.224736][ T3081] inactive_file 0 [ 684.228378][ T3081] active_file 0 [ 684.231878][ T3081] unevictable 0 [ 684.235309][ T3081] hierarchical_memory_limit 314572800 [ 684.240745][ T3081] hierarchical_memsw_limit 9223372036854771712 [ 684.246976][ T3081] total_cache 0 [ 684.250409][ T3081] total_rss 0 [ 684.253677][ T3081] total_shmem 0 [ 684.257201][ T3081] total_mapped_file 0 [ 684.261161][ T3081] total_dirty 0 [ 684.264628][ T3081] total_writeback 0 [ 684.268549][ T3081] total_workingset_refault_anon 18246 [ 684.273907][ T3081] total_workingset_refault_file 5389 [ 684.279238][ T3081] total_swap 770048 [ 684.283126][ T3081] total_pgpgin 107152 [ 684.287105][ T3081] total_pgpgout 107152 [ 684.291172][ T3081] total_pgfault 82247 [ 684.295144][ T3081] total_pgmajfault 8164 [ 684.299308][ T3081] total_inactive_anon 0 [ 684.303448][ T3081] total_active_anon 0 [ 684.307426][ T3081] total_inactive_file 0 [ 684.311568][ T3081] total_active_file 0 [ 684.315561][ T3081] total_unevictable 0 [ 684.319570][ T3081] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12833,uid=0 [ 684.334888][ T3081] Memory cgroup out of memory: Killed process 12833 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 684.378055][T12819] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 684.389579][T12819] CPU: 0 PID: 12819 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 684.398540][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 684.408676][T12819] Call Trace: [ 684.411943][T12819] [ 684.414893][T12819] dump_stack_lvl+0xda/0x130 [ 684.419535][T12819] dump_stack+0x15/0x20 [ 684.423806][T12819] dump_header+0x95/0x3c0 [ 684.428132][T12819] oom_kill_process+0xe3/0x3e0 [ 684.432975][T12819] out_of_memory+0x9ca/0xc00 [ 684.437562][T12819] mem_cgroup_out_of_memory+0x139/0x190 [ 684.443168][T12819] try_charge_memcg+0x75c/0xd20 [ 684.448025][T12819] ? __alloc_pages+0x193/0x340 [ 684.452843][T12819] charge_memcg+0x51/0x200 [ 684.457254][T12819] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 684.463291][T12819] __read_swap_cache_async+0x2fe/0x560 [ 684.468785][T12819] swap_cluster_readahead+0x488/0x4f0 [ 684.474243][T12819] swapin_readahead+0x8d/0x700 [ 684.479051][T12819] ? __filemap_get_folio+0x47c/0x500 [ 684.484377][T12819] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 684.489975][T12819] ? swap_cache_get_folio+0x6e/0x210 [ 684.495343][T12819] do_swap_page+0x4d7/0x1550 [ 684.499950][T12819] ? pte_offset_map_nolock+0x11f/0x1c0 [ 684.505406][T12819] handle_mm_fault+0x9ec/0x2c10 [ 684.510259][T12819] ? mt_find+0x1d1/0x300 [ 684.514497][T12819] exc_page_fault+0x24d/0x650 [ 684.519167][T12819] asm_exc_page_fault+0x26/0x30 [ 684.524013][T12819] RIP: 0033:0x7f074fafe996 [ 684.528415][T12819] Code: 1a 00 00 7f 25 e9 22 fd ff ff 48 8b 00 89 83 9c 00 00 00 31 f6 e8 9a ea ff ff 48 81 c3 d0 00 00 00 48 39 eb 0f 84 02 fd ff ff <80> 7b 20 00 48 89 df 74 e7 e8 2c e2 ff ff 84 c0 74 d7 80 3d 81 b7 [ 684.548012][T12819] RSP: 002b:00007ffc045c9da0 EFLAGS: 00010206 [ 684.554066][T12819] RAX: 00000000000a6f81 RBX: 00007f074fc72f80 RCX: 00000000000a6bf8 [ 684.562024][T12819] RDX: 0000000000000389 RSI: 00007ffc045c9d80 RDI: 7fffffffffffffff [ 684.569981][T12819] RBP: 00007f074fc74980 R08: 0000000000000010 R09: 00007ffc045f20b0 [ 684.578036][T12819] R10: 00007ffc045f2080 R11: 000000000001c60e R12: 00000000000a6f72 [ 684.585993][T12819] R13: 00007ffc045c9e80 R14: 00007f074fc731f0 R15: 0000000000000032 [ 684.593972][T12819] [ 684.597193][T12819] memory: usage 307200kB, limit 307200kB, failcnt 34426 [ 684.604134][T12819] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 684.612185][T12819] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 684.619495][T12819] Memory cgroup stats for /syz3: [ 684.627023][T12819] cache 61440 [ 684.635321][T12819] rss 8192 [ 684.638452][T12819] shmem 0 [ 684.641384][T12819] mapped_file 0 [ 684.644835][T12819] dirty 0 [ 684.647786][T12819] writeback 0 [ 684.651060][T12819] workingset_refault_anon 12409 [ 684.655890][T12819] workingset_refault_file 20938 [ 684.660805][T12819] swap 385024 [ 684.664083][T12819] pgpgin 705913 [ 684.667564][T12819] pgpgout 705896 [ 684.671097][T12819] pgfault 77541 [ 684.674605][T12819] pgmajfault 5234 [ 684.678315][T12819] inactive_anon 8192 [ 684.682194][T12819] active_anon 0 [ 684.685642][T12819] inactive_file 61440 [ 684.689745][T12819] active_file 0 [ 684.693201][T12819] unevictable 0 [ 684.696666][T12819] hierarchical_memory_limit 314572800 [ 684.702045][T12819] hierarchical_memsw_limit 9223372036854771712 [ 684.708231][T12819] total_cache 61440 [ 684.712069][T12819] total_rss 8192 [ 684.715599][T12819] total_shmem 0 [ 684.719137][T12819] total_mapped_file 0 [ 684.723205][T12819] total_dirty 0 [ 684.726679][T12819] total_writeback 0 [ 684.730478][T12819] total_workingset_refault_anon 12409 [ 684.735904][T12819] total_workingset_refault_file 20938 [ 684.741282][T12819] total_swap 385024 [ 684.745075][T12819] total_pgpgin 705913 [ 684.749103][T12819] total_pgpgout 705896 [ 684.753161][T12819] total_pgfault 77541 [ 684.757212][T12819] total_pgmajfault 5234 [ 684.761359][T12819] total_inactive_anon 8192 [ 684.765795][T12819] total_active_anon 0 [ 684.769778][T12819] total_inactive_file 61440 [ 684.774313][T12819] total_active_file 0 02:19:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xde22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000140), 0x8) [ 684.778310][T12819] total_unevictable 0 [ 684.782296][T12819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12819,uid=0 [ 684.797661][T12819] Memory cgroup out of memory: Killed process 12819 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:19:24 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x7, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, 0x0, 0x0) 02:19:24 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x7f8}, 0x0) 02:19:24 executing program 4: getresgid(0x0, 0x0, &(0x7f00000005c0)) 02:19:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, 0x0, 0x0) 02:19:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 02:19:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 02:19:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=[@prinfo={0x14}, @dstaddrv4={0x10, 0x84, 0x9}], 0x24}, 0x0) 02:19:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x14) 02:19:25 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) listen(r0, 0x2) [ 685.045189][ T26] audit: type=1400 audit(1688955564.965:357): avc: denied { write } for pid=12866 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 02:19:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xdf22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:25 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 02:19:25 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x9, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:25 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 02:19:25 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000180)=0x98) 02:19:25 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080)={0x3a}, 0x10) 02:19:25 executing program 4: r0 = socket(0x1c, 0x10000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x1c, 0x1c}, 0x1c) 02:19:25 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8) 02:19:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), 0x14) 02:19:26 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, &(0x7f0000000180)="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", 0xff1, 0x0, &(0x7f0000001180)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 02:19:26 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x6, 0x0) 02:19:26 executing program 2: execve(0x0, &(0x7f0000000240)=[&(0x7f0000000100)='v^\x00'], &(0x7f0000000340)) [ 686.574297][T12885] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 686.587885][T12885] CPU: 0 PID: 12885 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 686.596564][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 686.606640][T12885] Call Trace: [ 686.609906][T12885] [ 686.612827][T12885] dump_stack_lvl+0xda/0x130 [ 686.617467][T12885] dump_stack+0x15/0x20 [ 686.621614][T12885] dump_header+0x95/0x3c0 [ 686.625948][T12885] oom_kill_process+0xe3/0x3e0 [ 686.630849][T12885] out_of_memory+0x9ca/0xc00 [ 686.635440][T12885] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 686.641611][T12885] mem_cgroup_out_of_memory+0x139/0x190 [ 686.647161][T12885] try_charge_memcg+0x75c/0xd20 [ 686.652188][T12885] obj_cgroup_charge_pages+0xab/0x130 [ 686.657664][T12885] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 686.663325][T12885] __alloc_pages+0x1bb/0x340 [ 686.667964][T12885] alloc_pages+0x3e1/0x4e0 [ 686.672421][T12885] __vmalloc_node_range+0x6d2/0xea0 [ 686.677614][T12885] kvmalloc_node+0x121/0x160 [ 686.682294][T12885] ? xt_alloc_table_info+0x3d/0x80 [ 686.687472][T12885] xt_alloc_table_info+0x3d/0x80 [ 686.692491][T12885] do_arpt_set_ctl+0x615/0x1390 [ 686.697337][T12885] ? futex_unqueue+0xba/0xe0 [ 686.702006][T12885] ? futex_wait+0x3c3/0x410 [ 686.706600][T12885] ? _raw_spin_unlock_bh+0x36/0x40 [ 686.711790][T12885] ? lock_sock_nested+0x10e/0x130 [ 686.716851][T12885] ? tcp_release_cb+0xfe/0x340 [ 686.721631][T12885] nf_setsockopt+0x18d/0x1b0 [ 686.726247][T12885] ip_setsockopt+0xe6/0x100 [ 686.730821][T12885] tcp_setsockopt+0x90/0xa0 [ 686.735325][T12885] sock_common_setsockopt+0x61/0x70 [ 686.740516][T12885] ? sock_common_recvmsg+0xe0/0xe0 [ 686.745701][T12885] __sys_setsockopt+0x1c9/0x230 [ 686.750615][T12885] __x64_sys_setsockopt+0x66/0x80 [ 686.755647][T12885] do_syscall_64+0x41/0xc0 [ 686.760059][T12885] ? syscall_exit_to_user_mode+0x26/0x140 [ 686.765860][T12885] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 686.771817][T12885] RIP: 0033:0x7fb036ae7389 [ 686.776238][T12885] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 686.795882][T12885] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 686.804285][T12885] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 686.812263][T12885] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 686.820401][T12885] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 686.828361][T12885] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.836361][T12885] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 686.844587][T12885] [ 686.847793][T12885] memory: usage 307192kB, limit 307200kB, failcnt 62622 [ 686.854728][T12885] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 686.862700][T12885] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 686.870006][T12885] Memory cgroup stats for /syz1: [ 686.881110][T12885] cache 0 [ 686.889146][T12885] rss 4096 [ 686.892180][T12885] shmem 0 [ 686.895107][T12885] mapped_file 0 [ 686.898657][T12885] dirty 0 [ 686.901682][T12885] writeback 4096 [ 686.905225][T12885] workingset_refault_anon 18348 [ 686.910097][T12885] workingset_refault_file 5389 [ 686.914853][T12885] swap 729088 [ 686.918214][T12885] pgpgin 107306 [ 686.921665][T12885] pgpgout 107304 [ 686.925197][T12885] pgfault 82540 [ 686.928668][T12885] pgmajfault 8212 [ 686.932289][T12885] inactive_anon 8192 [ 686.936179][T12885] active_anon 0 [ 686.939652][T12885] inactive_file 0 [ 686.943328][T12885] active_file 0 [ 686.946854][T12885] unevictable 0 [ 686.950354][T12885] hierarchical_memory_limit 314572800 [ 686.955711][T12885] hierarchical_memsw_limit 9223372036854771712 [ 686.961948][T12885] total_cache 0 [ 686.965434][T12885] total_rss 4096 [ 686.969018][T12885] total_shmem 0 [ 686.972559][T12885] total_mapped_file 0 [ 686.976590][T12885] total_dirty 0 [ 686.980060][T12885] total_writeback 4096 [ 686.984180][T12885] total_workingset_refault_anon 18348 [ 686.989580][T12885] total_workingset_refault_file 5389 [ 686.994944][T12885] total_swap 729088 [ 686.998754][T12885] total_pgpgin 107306 [ 687.002727][T12885] total_pgpgout 107304 [ 687.006880][T12885] total_pgfault 82540 [ 687.011203][T12885] total_pgmajfault 8212 [ 687.015430][T12885] total_inactive_anon 8192 [ 687.019869][T12885] total_active_anon 0 [ 687.023942][T12885] total_inactive_file 0 [ 687.028211][T12885] total_active_file 0 [ 687.032246][T12885] total_unevictable 0 [ 687.036219][T12885] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12884,uid=0 [ 687.051582][T12885] Memory cgroup out of memory: Killed process 12884 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:27 executing program 2: syz_clone(0x40102000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)) 02:19:27 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000002c0)={0x0, 0x0, 0x7f}, 0x8) 02:19:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1, 0x0, &(0x7f0000000240)) 02:19:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe022, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 02:19:27 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0xa, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:27 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 02:19:27 executing program 0: r0 = socket(0x1c, 0x10000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1c, 0x1c, 0x2}, 0x1c) 02:19:27 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 02:19:27 executing program 4: r0 = epoll_create(0x9) fdatasync(r0) 02:19:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0, 0xfffffffffffffc6d}, 0x0) 02:19:27 executing program 4: pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0xffffffad) 02:19:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000b00), 0x1, 0xa47, &(0x7f0000000b40)="$eJzs3U9vHOUdB/DvbOziGgQBUhpFQDahAQOus3ZKqMWljnftLLW9le1IRD00lIQqilUqaCVAPaRS1VNRe6h6aG8ce0LiwqnKq+ihF94C6ik3VzNrJw54vcZ1vMH9fKzx/PvN8/xmZ3Ye7b95wjfZ+vp6Nexx/tI/DjJZHjwXmp9//MlH5fC7m/lWjuSV4rNkJEk9GUpyPBmebS53FvsUdCO5kuRWUiR5KN3xrlxJ8ac8cnf+Voq/l/Vy/63zf23Q5x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyIitlmozFZZKG9dOmNem9VF+A7rN8sr1Mr/9c6fetNinLIyMhmV9/Hj91d/VT573Se7s49XXVInpF8+PBTR197cqi2uf0OCR2I9z748Maba2vX3h10IgMy31pqr3TaizPzrXp7pVOfPn++cfbi3Ep9rr3QWrm8stparM8ut2ZWO8v1sdkX65PT0+fqrYnLnUtL882Zhdbmwle/P9VonK+/PvGT1szySmfp7OsTK7MX2wsL7aX5KqZcXca8Wp6IP26v1ldbM4v1+tvX166d65dkGTS5m6CpfkFTjampycmpqcnzr0y/8mqjMfSVBY0vyVciBn/SMlj7fg2HvapttP9ZSDtLuZQ3Ut/2bzbNLKeTxR7rN2y2/2fOtnasd2v7v9nKH7+7+kSq9v/Z7tyzvdr/Hrkc3N97+SAf5kbezFrWci3vDjyjg/2bTytLaWclnbSzmJlqSX1jST3TOZ/zaeRnuZi5rKSeubSzkFZWcjkrWU2rOqNms5xWZrKaTpZTz1hm82Lqmcx0pnMu9bQykcvp5FKWMp9mZqpS3s716nE/t0OOd4ImdxM0tUOQ9p//3f24jMOerG+2/wAAAMChVVTvvpev/4fzTDU1115oNQadFgAAALCPqk/+ny5Hw+XUMym8/gcAAIDDpqh+Y1ckGc3J7tTmL6G8CQAAAACHRPX5/7PlaLScOpnC638AAAA4bPrfY79vRDG+efvf+tXu+OpGxMZ9fkfn2gutidnOwmuTeb66y0D1S4NtSxuufn7wUk51o06Ndsej95Y4UkZNTrw2mZdyemNHxp4rR8+NbRM51Y18oRv5wg6R58pIADjsTvdpj3fT/r+U8W7E+ImyMc3QiW1a1oaWFQAeFP372OkbUfygz+v/J+58pWAib+WdrOVqxqtfG1TfONi21NEtX0MY7/NuwOiWHl7G+7wfMLqlo5fxPu8IjG7pXgYADpPTfdrh3bT/431e/4/6SiEAPFDu9GB/HycGvY8AwL200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD/DuL+/yZMmPimTQz6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBBKJIj2y2vJQ8laSQ5e/BZ3T83B53AgBW3czvv59FB5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNhs3P+/lu744e6iDNWSM0muJPnpoHPcT7cHncCAbbn/f3nMs15kqHvYUwzPNpc7i+Xhr/p+qH3+8ScflcNe6ikLKGu4p3OJjRp6b/V4tdVo89p7N379zq/qzQtVkhdW5xaai/PLP7ob+FTxaVJPd9i0me9vz/zzz9vs+aflnu6u3rmq3uZX6/3udlvvXO9Orq9dmyprWm29sfqbX15/f8uqJ3IqeW4sGbu3pl+UQ4+aTmV4p9qKL4o/FI/mr7lSHf/y0SjWi/IQPVbt/7ffvr52beKtd9au9sjpaE4muZqM7D6nk9X1ZFvVWVcbLmttVEHlv2N9ytvRlhIne+zD49UpM/q19qHeex8qfR73jYzO9cjoyTz/tY/0831q3FbxRfHv4mL+ld9v6f+jVh7/M9nNs7OMqSK3nCk9I2vdyGrPp3Yss+ezkvvgj/l5fnjn+Ne2XP83jtXBXI+21HhAz4uqRTr2pRZp4+rTa5uNPI91o3rk+Z28nAyd+FpXlJf7XFHu1/P/b8VY/pOb+v8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAefEVyZLvlteRMkqNJHivn68n6ftRXGy32o5g9uznQ2gevuJ3beT+PDjoPAAAAAAAAAPbHhebnH3/yUTlUn8cfyfeKz5KR7if9Q0mOFn8Znm0udxb7FDScXElyaw85lNvlkbvzt8q543soCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQ+u/AQAA//+LhmVP") 02:19:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe9a}, 0x0) [ 687.586162][T12944] loop2: detected capacity change from 0 to 2364 [ 687.604685][ T26] audit: type=1400 audit(1688955567.525:358): avc: denied { mount } for pid=12943 comm="syz-executor.2" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 687.647444][ T26] audit: type=1400 audit(1688955567.575:359): avc: denied { unmount } for pid=3116 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 02:19:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe122, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:28 executing program 0: setxattr$security_capability(&(0x7f0000003600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004600), 0x0, 0x0, 0x0) 02:19:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) 02:19:28 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340), 0x1, 0x295, &(0x7f0000000380)="$eJzs3b1qFF0cwOGTj/eNRBK2ErTxoI02Q5LaIkESCC4omhVUECZkosuOu2Fni51gkd5CL8DWRiztBPEGchd2aUKqVEZ0QmJEq5hssc/T7J/9zcA5HBimm51bb1601otkPe2F0fmRMD4fwuj+SKiF0TAWKlvh5rvXb189ePT4zkK9vng/xqWFldm5GOP01c9PXn649qV38eHH6U8TYbv2dGd37uv2pe3LO99WnjeL2Cxiu9OLaVztdHrpap7FtWbRSmK8l2dpkcVmu8i6J/p63tnYKGPaXpua3OhmRRHTdhlbWRl7ndjrljF9ljbbMUmSODUZOI3G+/2Dg7B7UBn0ajh/zn+4Of/h5vyH2y8vdRdC2NvqN/qN6rfqS8v1xZn4U+34rr1+vzF21GerHk/2/8LkYZ/7Y/8/3Lhe9R/t9t36b30irJ399gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhSSTxSO/53r99vjFU9+VuvpqXl+uLM4QUn+3i4Mn5u2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUynKzVaa51nXYDAYjoZBP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/B1/9HvQKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCQinKzleZ51j3DYdB7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH/lewAAAP//oZeFFw==") 02:19:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) fcntl$setown(r0, 0x8, 0x0) 02:19:28 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0xc, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:28 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3cfc}) 02:19:28 executing program 0: openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 02:19:28 executing program 4: syz_io_uring_setup(0x728, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 02:19:28 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x100008}, 0x20) 02:19:28 executing program 0: syz_read_part_table(0x5ad, &(0x7f0000001b80)="$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") [ 688.515649][T12953] loop5: detected capacity change from 0 to 512 02:19:28 executing program 4: clock_gettime(0x0, &(0x7f0000000340)={0x0}) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x2}, 0x0, &(0x7f0000000380)={r0}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) [ 688.548369][ T26] audit: type=1400 audit(1688955568.475:360): avc: denied { mount } for pid=12951 comm="syz-executor.5" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 688.641781][ T26] audit: type=1400 audit(1688955568.495:361): avc: denied { unmount } for pid=3085 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 689.310763][T12969] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 689.321015][T12969] CPU: 0 PID: 12969 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 689.329697][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 689.339755][T12969] Call Trace: [ 689.343033][T12969] [ 689.345959][T12969] dump_stack_lvl+0xda/0x130 [ 689.350820][T12969] dump_stack+0x15/0x20 [ 689.354988][T12969] dump_header+0x95/0x3c0 [ 689.359414][T12969] oom_kill_process+0xe3/0x3e0 [ 689.364284][T12969] out_of_memory+0x9ca/0xc00 [ 689.368899][T12969] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 689.374969][T12969] mem_cgroup_out_of_memory+0x139/0x190 [ 689.380561][T12969] try_charge_memcg+0x75c/0xd20 [ 689.385426][T12969] ? read_pages+0x320/0x560 [ 689.389944][T12969] charge_memcg+0x51/0x200 [ 689.394389][T12969] __mem_cgroup_charge+0x29/0xa0 [ 689.399346][T12969] __filemap_add_folio+0x454/0x730 [ 689.404478][T12969] ? workingset_activation+0x2e0/0x2e0 [ 689.409939][T12969] filemap_add_folio+0x6f/0x150 [ 689.414799][T12969] filemap_get_pages+0x5cf/0xea0 [ 689.419744][T12969] filemap_splice_read+0x23a/0x810 [ 689.424859][T12969] ext4_file_splice_read+0x95/0xb0 [ 689.429981][T12969] ? ext4_release_file+0x1c0/0x1c0 [ 689.435088][T12969] splice_direct_to_actor+0x28c/0x690 [ 689.440449][T12969] ? direct_file_splice_eof+0x70/0x70 [ 689.445809][T12969] do_splice_direct+0x10d/0x190 [ 689.450651][T12969] ? do_splice_direct+0x190/0x190 [ 689.455679][T12969] do_sendfile+0x3b6/0x9a0 [ 689.460091][T12969] __x64_sys_sendfile64+0x110/0x150 [ 689.465283][T12969] do_syscall_64+0x41/0xc0 [ 689.469708][T12969] ? syscall_exit_to_user_mode+0x26/0x140 [ 689.475424][T12969] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 689.481407][T12969] RIP: 0033:0x7f074fb53389 [ 689.485804][T12969] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 689.505394][T12969] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 689.514569][T12969] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 689.522552][T12969] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 689.530681][T12969] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 689.538634][T12969] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 689.546592][T12969] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 689.554549][T12969] [ 689.557723][T12969] memory: usage 307200kB, limit 307200kB, failcnt 35569 [ 689.564884][T12969] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 689.572827][T12969] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 689.580130][T12969] Memory cgroup stats for /syz3: [ 689.580903][T12969] cache 20480 [ 689.589190][T12969] rss 8192 [ 689.592200][T12969] shmem 0 [ 689.595132][T12969] mapped_file 0 [ 689.598646][T12969] dirty 0 [ 689.601577][T12969] writeback 0 [ 689.604861][T12969] workingset_refault_anon 12647 [ 689.609719][T12969] workingset_refault_file 21836 [ 689.614565][T12969] swap 389120 [ 689.617873][T12969] pgpgin 713367 [ 689.621322][T12969] pgpgout 713360 [ 689.624859][T12969] pgfault 78402 [ 689.628340][T12969] pgmajfault 5340 [ 689.631965][T12969] inactive_anon 8192 [ 689.635848][T12969] active_anon 0 [ 689.639318][T12969] inactive_file 20480 [ 689.643289][T12969] active_file 0 [ 689.646762][T12969] unevictable 0 [ 689.650216][T12969] hierarchical_memory_limit 314572800 [ 689.655573][T12969] hierarchical_memsw_limit 9223372036854771712 [ 689.661733][T12969] total_cache 20480 [ 689.665540][T12969] total_rss 8192 [ 689.669125][T12969] total_shmem 0 [ 689.672577][T12969] total_mapped_file 0 [ 689.676565][T12969] total_dirty 0 [ 689.680013][T12969] total_writeback 0 [ 689.683800][T12969] total_workingset_refault_anon 12647 [ 689.689177][T12969] total_workingset_refault_file 21836 [ 689.694539][T12969] total_swap 389120 [ 689.698357][T12969] total_pgpgin 713367 [ 689.702329][T12969] total_pgpgout 713360 [ 689.706381][T12969] total_pgfault 78402 [ 689.710373][T12969] total_pgmajfault 5340 [ 689.714512][T12969] total_inactive_anon 8192 [ 689.718928][T12969] total_active_anon 0 [ 689.722903][T12969] total_inactive_file 20480 [ 689.727406][T12969] total_active_file 0 [ 689.731397][T12969] total_unevictable 0 [ 689.735352][T12969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12957,uid=0 [ 689.750596][T12969] Memory cgroup out of memory: Killed process 12957 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 689.768074][T12964] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 689.781659][T12964] CPU: 1 PID: 12964 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 689.790440][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 689.800521][T12964] Call Trace: [ 689.803876][T12964] [ 689.806821][T12964] dump_stack_lvl+0xda/0x130 [ 689.811477][T12964] dump_stack+0x15/0x20 [ 689.815672][T12964] dump_header+0x95/0x3c0 [ 689.820029][T12964] oom_kill_process+0xe3/0x3e0 [ 689.824854][T12964] out_of_memory+0x9ca/0xc00 [ 689.829584][T12964] mem_cgroup_out_of_memory+0x139/0x190 [ 689.835171][T12964] try_charge_memcg+0x75c/0xd20 [ 689.840052][T12964] obj_cgroup_charge_pages+0xab/0x130 [ 689.845422][T12964] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 689.851690][T12964] __alloc_pages+0x1bb/0x340 [ 689.856275][T12964] alloc_pages+0x3e1/0x4e0 [ 689.860744][T12964] __vmalloc_node_range+0x6d2/0xea0 [ 689.865984][T12964] kvmalloc_node+0x121/0x160 [ 689.870570][T12964] ? xt_alloc_table_info+0x3d/0x80 [ 689.875834][T12964] xt_alloc_table_info+0x3d/0x80 [ 689.880778][T12964] do_arpt_set_ctl+0x615/0x1390 [ 689.885701][T12964] ? futex_unqueue+0xba/0xe0 [ 689.890354][T12964] ? futex_wait+0x3c3/0x410 [ 689.894888][T12964] ? _raw_spin_unlock_bh+0x36/0x40 [ 689.899997][T12964] ? lock_sock_nested+0x10e/0x130 [ 689.905095][T12964] ? tcp_release_cb+0xfe/0x340 [ 689.909924][T12964] nf_setsockopt+0x18d/0x1b0 [ 689.914514][T12964] ip_setsockopt+0xe6/0x100 [ 689.919244][T12964] tcp_setsockopt+0x90/0xa0 [ 689.923794][T12964] sock_common_setsockopt+0x61/0x70 [ 689.928992][T12964] ? sock_common_recvmsg+0xe0/0xe0 [ 689.934100][T12964] __sys_setsockopt+0x1c9/0x230 [ 689.939015][T12964] __x64_sys_setsockopt+0x66/0x80 [ 689.944041][T12964] do_syscall_64+0x41/0xc0 [ 689.948450][T12964] ? syscall_exit_to_user_mode+0x26/0x140 [ 689.954246][T12964] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 689.960168][T12964] RIP: 0033:0x7fb036ae7389 [ 689.964748][T12964] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 689.984398][T12964] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 689.992877][T12964] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 690.000883][T12964] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 690.008843][T12964] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 690.016805][T12964] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.024790][T12964] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 690.032760][T12964] [ 690.035969][T12964] memory: usage 307200kB, limit 307200kB, failcnt 63231 [ 690.042996][T12964] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 690.050987][T12964] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 690.058463][T12964] Memory cgroup stats for /syz1: [ 690.060430][T12964] cache 0 [ 690.068365][T12964] rss 4096 [ 690.071403][T12964] shmem 0 [ 690.074358][T12964] mapped_file 0 [ 690.077842][T12964] dirty 0 [ 690.080789][T12964] writeback 0 [ 690.084066][T12964] workingset_refault_anon 18453 [ 690.088993][T12964] workingset_refault_file 5389 [ 690.093796][T12964] swap 733184 [ 690.097113][T12964] pgpgin 107463 [ 690.100566][T12964] pgpgout 107462 [ 690.104279][T12964] pgfault 82822 [ 690.107773][T12964] pgmajfault 8254 [ 690.111497][T12964] inactive_anon 0 [ 690.115116][T12964] active_anon 4096 [ 690.118844][T12964] inactive_file 0 [ 690.122499][T12964] active_file 0 [ 690.125947][T12964] unevictable 0 [ 690.129415][T12964] hierarchical_memory_limit 314572800 [ 690.134816][T12964] hierarchical_memsw_limit 9223372036854771712 [ 690.141018][T12964] total_cache 0 [ 690.144545][T12964] total_rss 4096 [ 690.148140][T12964] total_shmem 0 [ 690.151944][T12964] total_mapped_file 0 [ 690.155936][T12964] total_dirty 0 [ 690.159496][T12964] total_writeback 0 [ 690.163350][T12964] total_workingset_refault_anon 18453 [ 690.168752][T12964] total_workingset_refault_file 5389 [ 690.174038][T12964] total_swap 733184 [ 690.177890][T12964] total_pgpgin 107463 [ 690.181962][T12964] total_pgpgout 107462 [ 690.186132][T12964] total_pgfault 82822 [ 690.190129][T12964] total_pgmajfault 8254 [ 690.194274][T12964] total_inactive_anon 0 [ 690.198653][T12964] total_active_anon 4096 [ 690.202890][T12964] total_inactive_file 0 [ 690.207111][T12964] total_active_file 0 [ 690.211147][T12964] total_unevictable 0 [ 690.215294][T12964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12963,uid=0 [ 690.230640][T12964] Memory cgroup out of memory: Killed process 12963 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:30 executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001240), 0x2000c0) fcntl$setown(r0, 0x8, 0x0) 02:19:30 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x40000}, 0x20) 02:19:30 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/88, 0x58) getdents64(r0, 0x0, 0x0) 02:19:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe222, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 02:19:30 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x15, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:30 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="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", 0x181) 02:19:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000340)) 02:19:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000000040)) 02:19:30 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x38}, 0xc) 02:19:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000180)) 02:19:30 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x90440, 0x0) 02:19:30 executing program 2: r0 = socket(0x2, 0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 02:19:30 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x18}, 0xc) [ 691.179396][T12987] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 691.190797][T12987] CPU: 0 PID: 12987 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 691.199586][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 691.209642][T12987] Call Trace: [ 691.212921][T12987] [ 691.215850][T12987] dump_stack_lvl+0xda/0x130 [ 691.220449][T12987] dump_stack+0x15/0x20 [ 691.224605][T12987] dump_header+0x95/0x3c0 [ 691.228948][T12987] oom_kill_process+0xe3/0x3e0 [ 691.233719][T12987] out_of_memory+0x9ca/0xc00 [ 691.238319][T12987] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 691.244390][T12987] mem_cgroup_out_of_memory+0x139/0x190 [ 691.250017][T12987] try_charge_memcg+0x75c/0xd20 [ 691.254968][T12987] ? __alloc_pages+0x193/0x340 [ 691.259799][T12987] charge_memcg+0x51/0x200 [ 691.264323][T12987] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 691.270450][T12987] __read_swap_cache_async+0x2fe/0x560 [ 691.275929][T12987] swap_cluster_readahead+0x2a3/0x4f0 [ 691.281399][T12987] swapin_readahead+0x8d/0x700 [ 691.286220][T12987] ? __filemap_get_folio+0x47c/0x500 [ 691.291550][T12987] ? swap_cache_get_folio+0x6e/0x210 [ 691.296908][T12987] do_swap_page+0x4d7/0x1550 [ 691.301503][T12987] ? pte_offset_map_nolock+0x11f/0x1c0 [ 691.307012][T12987] handle_mm_fault+0x9ec/0x2c10 [ 691.312007][T12987] ? mt_find+0x1d1/0x300 [ 691.316252][T12987] exc_page_fault+0x24d/0x650 [ 691.320987][T12987] asm_exc_page_fault+0x26/0x30 [ 691.325848][T12987] RIP: 0033:0x7fb036a9283c [ 691.330326][T12987] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 691.349930][T12987] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 691.356052][T12987] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 691.364070][T12987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 691.372073][T12987] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 691.380054][T12987] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a8c59 [ 691.388017][T12987] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 691.395979][T12987] [ 691.399181][T12987] memory: usage 307200kB, limit 307200kB, failcnt 63407 [ 691.406208][T12987] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 691.414135][T12987] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 691.421506][T12987] Memory cgroup stats for /syz1: [ 691.422429][T12987] cache 0 [ 691.430338][T12987] rss 4096 [ 691.433348][T12987] shmem 0 [ 691.436313][T12987] mapped_file 0 [ 691.439791][T12987] dirty 0 [ 691.442724][T12987] writeback 4096 [ 691.446312][T12987] workingset_refault_anon 18507 [ 691.451231][T12987] workingset_refault_file 5389 [ 691.456018][T12987] swap 729088 [ 691.459388][T12987] pgpgin 107543 [ 691.462845][T12987] pgpgout 107540 [ 691.466444][T12987] pgfault 82973 [ 691.470019][T12987] pgmajfault 8268 [ 691.473697][T12987] inactive_anon 0 [ 691.477355][T12987] active_anon 0 [ 691.480799][T12987] inactive_file 0 [ 691.484418][T12987] active_file 0 [ 691.487946][T12987] unevictable 0 [ 691.491393][T12987] hierarchical_memory_limit 314572800 [ 691.496782][T12987] hierarchical_memsw_limit 9223372036854771712 [ 691.503142][T12987] total_cache 0 [ 691.506680][T12987] total_rss 4096 [ 691.510213][T12987] total_shmem 0 [ 691.513773][T12987] total_mapped_file 0 [ 691.517767][T12987] total_dirty 0 [ 691.521266][T12987] total_writeback 4096 [ 691.525327][T12987] total_workingset_refault_anon 18507 [ 691.530726][T12987] total_workingset_refault_file 5389 [ 691.536000][T12987] total_swap 729088 [ 691.539826][T12987] total_pgpgin 107543 [ 691.543831][T12987] total_pgpgout 107540 [ 691.547924][T12987] total_pgfault 82973 [ 691.551896][T12987] total_pgmajfault 8268 [ 691.556126][T12987] total_inactive_anon 0 [ 691.560409][T12987] total_active_anon 0 [ 691.564381][T12987] total_inactive_file 0 [ 691.568543][T12987] total_active_file 0 [ 691.572533][T12987] total_unevictable 0 [ 691.576492][T12987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12987,uid=0 [ 691.591899][T12987] Memory cgroup out of memory: Killed process 12987 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe322, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) 02:19:31 executing program 5: syz_clone(0xc5004300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0}}, 0x0) 02:19:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 02:19:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000004340)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004300)={&(0x7f00000031c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb1, 0xa8, @random="2797ecd4a5ddcc508afaa39f2769e6d9f87b3e9925547482cd2a82133fda41cbd5985a10c089505129520ef9aeed155294df053261b1b95425fa0c0a1738716b59c11d549ca7c0e445d6b6a4d896dd0e3e41f9d1bb899eeb343cd6ec359045dc0ffe12db1a60ce50bc3771a8d092735fc078a7ce9d66cf9c5f7469ae7d99dd534796b6191357f094f0149cef1485302574b6269e930fbfadafaac74e610205252480baf805c1e218530c46e383"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdad, 0xa8, @random="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"}]}, 0xec4}}, 0x0) 02:19:31 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x2d, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 02:19:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006240)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1}}], 0x1, 0x815) 02:19:31 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000040)) 02:19:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) 02:19:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 691.784979][ T26] audit: type=1400 audit(1688955571.705:362): avc: denied { ioctl } for pid=13009 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=218 ioctlcmd=0x700d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 02:19:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) accept$inet6(r0, 0x0, 0x0) [ 691.920220][ T26] audit: type=1400 audit(1688955571.855:363): avc: denied { setopt } for pid=13111 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 692.683388][T13033] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 692.694766][T13033] CPU: 0 PID: 13033 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 692.703601][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 692.713667][T13033] Call Trace: [ 692.717030][T13033] [ 692.719975][T13033] dump_stack_lvl+0xda/0x130 [ 692.724641][T13033] dump_stack+0x15/0x20 [ 692.728800][T13033] dump_header+0x95/0x3c0 [ 692.733170][T13033] oom_kill_process+0xe3/0x3e0 [ 692.738006][T13033] out_of_memory+0x9ca/0xc00 [ 692.743560][T13033] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 692.749677][T13033] mem_cgroup_out_of_memory+0x139/0x190 [ 692.755306][T13033] try_charge_memcg+0x75c/0xd20 [ 692.760175][T13033] ? __alloc_pages+0x193/0x340 [ 692.765113][T13033] charge_memcg+0x51/0x200 [ 692.769535][T13033] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 692.775528][T13033] __read_swap_cache_async+0x2fe/0x560 [ 692.781104][T13033] swap_cluster_readahead+0x2a3/0x4f0 [ 692.786479][T13033] swapin_readahead+0x8d/0x700 [ 692.791296][T13033] ? __filemap_get_folio+0x47c/0x500 [ 692.796591][T13033] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 692.802254][T13033] ? swap_cache_get_folio+0x6e/0x210 [ 692.807534][T13033] do_swap_page+0x4d7/0x1550 [ 692.812188][T13033] ? pte_offset_map_nolock+0x11f/0x1c0 [ 692.817688][T13033] handle_mm_fault+0x9ec/0x2c10 [ 692.822533][T13033] ? mt_find+0x1d1/0x300 [ 692.826775][T13033] exc_page_fault+0x24d/0x650 [ 692.831447][T13033] asm_exc_page_fault+0x26/0x30 [ 692.836297][T13033] RIP: 0033:0x7fb036a9283c [ 692.840706][T13033] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 692.860428][T13033] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 692.866486][T13033] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 692.874568][T13033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.882534][T13033] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 692.890571][T13033] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a91c3 [ 692.898534][T13033] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 692.906586][T13033] [ 692.909757][T13033] memory: usage 307200kB, limit 307200kB, failcnt 63561 [ 692.917561][T13033] memory+swap: usage 307980kB, limit 9007199254740988kB, failcnt 0 [ 692.925456][T13033] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 692.932863][T13033] Memory cgroup stats for /syz1: [ 692.932979][T13033] cache 0 [ 692.940853][T13033] rss 4096 [ 692.943852][T13033] shmem 0 [ 692.946790][T13033] mapped_file 0 [ 692.950231][T13033] dirty 0 [ 692.953144][T13033] writeback 0 [ 692.956482][T13033] workingset_refault_anon 18539 [ 692.961345][T13033] workingset_refault_file 5389 [ 692.966099][T13033] swap 806912 [ 692.969467][T13033] pgpgin 107601 [ 692.972928][T13033] pgpgout 107600 [ 692.976470][T13033] pgfault 83092 [ 692.980003][T13033] pgmajfault 8288 [ 692.983622][T13033] inactive_anon 0 [ 692.987287][T13033] active_anon 4096 [ 692.991044][T13033] inactive_file 0 [ 692.994872][T13033] active_file 0 [ 692.998338][T13033] unevictable 0 [ 693.001788][T13033] hierarchical_memory_limit 314572800 [ 693.007229][T13033] hierarchical_memsw_limit 9223372036854771712 [ 693.013473][T13033] total_cache 0 [ 693.016955][T13033] total_rss 4096 [ 693.020576][T13033] total_shmem 0 [ 693.024011][T13033] total_mapped_file 0 [ 693.028078][T13033] total_dirty 0 [ 693.031530][T13033] total_writeback 8192 [ 693.035641][T13033] total_workingset_refault_anon 18539 [ 693.041142][T13033] total_workingset_refault_file 5389 [ 693.046469][T13033] total_swap 798720 [ 693.050316][T13033] total_pgpgin 107601 [ 693.054327][T13033] total_pgpgout 107598 [ 693.058456][T13033] total_pgfault 83092 [ 693.062473][T13033] total_pgmajfault 8288 [ 693.066630][T13033] total_inactive_anon 0 [ 693.070775][T13033] total_active_anon 0 [ 693.074731][T13033] total_inactive_file 0 [ 693.078885][T13033] total_active_file 0 [ 693.082848][T13033] total_unevictable 0 [ 693.086862][T13033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13033,uid=0 [ 693.102346][T13033] Memory cgroup out of memory: Killed process 13033 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40d0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 02:19:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40191, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 02:19:33 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @multicast2}}) 02:19:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe422, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x17, 0x0, 0xd, 0x2080000}, 0x48) 02:19:33 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x500, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:33 executing program 5: r0 = epoll_create(0x9f) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000000}) 02:19:33 executing program 4: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a40)) 02:19:33 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f00000003c0)) 02:19:33 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4d4902, 0x0) 02:19:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000240)=""/99) 02:19:33 executing program 4: add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 02:19:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="73797a746e6c31000004000000000000", @ANYRES32=0x0, @ANYBLOB="0001000100000087000000064e"]}) 02:19:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x4000}, 0x0) 02:19:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b4d, &(0x7f0000000040)) [ 694.086261][T13142] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 694.097642][T13142] CPU: 0 PID: 13142 Comm: syz-executor.2 Not tainted 6.5.0-rc1-syzkaller #0 [ 694.106324][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 694.116372][T13142] Call Trace: [ 694.119650][T13142] [ 694.122580][T13142] dump_stack_lvl+0xda/0x130 [ 694.127254][T13142] dump_stack+0x15/0x20 [ 694.131440][T13142] dump_header+0x95/0x3c0 [ 694.135889][T13142] oom_kill_process+0xe3/0x3e0 [ 694.140659][T13142] out_of_memory+0x9ca/0xc00 [ 694.145298][T13142] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 694.151495][T13142] mem_cgroup_out_of_memory+0x139/0x190 [ 694.157135][T13142] try_charge_memcg+0x75c/0xd20 [ 694.161987][T13142] ? __alloc_pages+0x193/0x340 [ 694.166801][T13142] charge_memcg+0x51/0x200 [ 694.171265][T13142] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 694.177333][T13142] __read_swap_cache_async+0x2fe/0x560 [ 694.182814][T13142] swap_cluster_readahead+0x2a3/0x4f0 [ 694.188290][T13142] swapin_readahead+0x8d/0x700 [ 694.193134][T13142] ? __filemap_get_folio+0x47c/0x500 [ 694.198501][T13142] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 694.204074][T13142] ? swap_cache_get_folio+0x6e/0x210 [ 694.209405][T13142] do_swap_page+0x4d7/0x1550 [ 694.214173][T13142] ? pte_offset_map_nolock+0x11f/0x1c0 [ 694.219645][T13142] handle_mm_fault+0x9ec/0x2c10 [ 694.224511][T13142] ? mt_find+0x1d1/0x300 [ 694.228852][T13142] exc_page_fault+0x24d/0x650 [ 694.233551][T13142] asm_exc_page_fault+0x26/0x30 [ 694.238545][T13142] RIP: 0033:0x7f4dea879810 [ 694.242970][T13142] Code: 48 f7 f1 48 03 44 24 68 49 39 c4 4c 0f 42 e0 83 3d 8c 61 17 00 00 0f 8e 96 fe ff ff e8 99 02 ff ff 49 39 c4 0f 82 4a 01 00 00 <69> 3d 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 [ 694.262947][T13142] RSP: 002b:00007ffe581cc240 EFLAGS: 00010216 [ 694.269010][T13142] RAX: 00000000000a9729 RBX: 00007f4dea9ef980 RCX: 00000000000a96f0 [ 694.276973][T13142] RDX: 0000000000000039 RSI: 00007ffe581cc220 RDI: 7fffffffffffffff [ 694.285055][T13142] RBP: 00007f4dea9ef980 R08: 0000000000000010 R09: 00007ffe581ef0b0 [ 694.293015][T13142] R10: 00007ffe581ef080 R11: 000000000001cc68 R12: 00000000000a9783 [ 694.300974][T13142] R13: 00007ffe581cc320 R14: 00007ffe581cc340 R15: 0000000000000032 [ 694.308971][T13142] [ 694.312136][T13142] memory: usage 307200kB, limit 307200kB, failcnt 282 [ 694.318935][T13142] memory+swap: usage 311136kB, limit 9007199254740988kB, failcnt 0 [ 694.326852][T13142] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 02:19:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe522, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) [ 694.334127][T13142] Memory cgroup stats for /syz2: [ 694.407731][T13142] cache 16384 [ 694.415982][T13142] rss 4096 [ 694.419038][T13142] shmem 0 [ 694.421965][T13142] mapped_file 0 [ 694.425444][T13142] dirty 4096 [ 694.428696][T13142] writeback 4096 [ 694.432254][T13142] workingset_refault_anon 124 [ 694.436941][T13142] workingset_refault_file 36 [ 694.441534][T13142] swap 4030464 [ 694.444897][T13142] pgpgin 120409 [ 694.448509][T13142] pgpgout 120403 [ 694.452059][T13142] pgfault 109659 [ 694.455599][T13142] pgmajfault 53 [ 694.459105][T13142] inactive_anon 0 [ 694.462729][T13142] active_anon 0 [ 694.466248][T13142] inactive_file 8192 [ 694.470363][T13142] active_file 8192 [ 694.474085][T13142] unevictable 0 [ 694.477572][T13142] hierarchical_memory_limit 314572800 [ 694.482931][T13142] hierarchical_memsw_limit 9223372036854771712 [ 694.489132][T13142] total_cache 16384 [ 694.492944][T13142] total_rss 4096 [ 694.496559][T13142] total_shmem 0 [ 694.500022][T13142] total_mapped_file 0 [ 694.504001][T13142] total_dirty 4096 [ 694.507748][T13142] total_writeback 4096 [ 694.511803][T13142] total_workingset_refault_anon 124 [ 694.517121][T13142] total_workingset_refault_file 36 [ 694.522239][T13142] total_swap 4030464 [ 694.526133][T13142] total_pgpgin 120409 [ 694.530140][T13142] total_pgpgout 120403 [ 694.534206][T13142] total_pgfault 109659 [ 694.538349][T13142] total_pgmajfault 53 [ 694.542332][T13142] total_inactive_anon 0 [ 694.546587][T13142] total_active_anon 0 [ 694.550633][T13142] total_inactive_file 8192 [ 694.555046][T13142] total_active_file 8192 [ 694.559389][T13142] total_unevictable 0 [ 694.563376][T13142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13142,uid=0 [ 694.578723][T13142] Memory cgroup out of memory: Killed process 13142 (syz-executor.2) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:19:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 02:19:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{}, {0x2}, {0x8}]}) 02:19:34 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:19:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021308020a00000029bd7000ffdbdf2508007b"], 0x50}}, 0x0) 02:19:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x600, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:34 executing program 0: add_key$fscrypt_provisioning(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3, 0x29}, &(0x7f0000000540)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) 02:19:34 executing program 4: syz_open_dev$evdev(&(0x7f00000003c0), 0x6, 0x20040) 02:19:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b35, 0x0) 02:19:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 02:19:34 executing program 2: ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4bfa, &(0x7f0000000040)) 02:19:34 executing program 5: add_key$fscrypt_provisioning(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) [ 695.216060][T13174] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 695.227507][T13174] CPU: 0 PID: 13174 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 695.236210][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 695.246261][T13174] Call Trace: [ 695.249619][T13174] [ 695.252541][T13174] dump_stack_lvl+0xda/0x130 [ 695.257126][T13174] dump_stack+0x15/0x20 [ 695.261272][T13174] dump_header+0x95/0x3c0 [ 695.265697][T13174] oom_kill_process+0xe3/0x3e0 [ 695.270469][T13174] out_of_memory+0x9ca/0xc00 [ 695.275062][T13174] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 695.281150][T13174] mem_cgroup_out_of_memory+0x139/0x190 [ 695.286719][T13174] try_charge_memcg+0x75c/0xd20 [ 695.291640][T13174] ? __alloc_pages+0x193/0x340 [ 695.296447][T13174] charge_memcg+0x51/0x200 [ 695.300910][T13174] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 695.306941][T13174] __read_swap_cache_async+0x2fe/0x560 [ 695.312425][T13174] swap_cluster_readahead+0x2a3/0x4f0 [ 695.317856][T13174] swapin_readahead+0x8d/0x700 [ 695.322682][T13174] ? __filemap_get_folio+0x47c/0x500 [ 695.328044][T13174] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 695.333584][T13174] ? swap_cache_get_folio+0x6e/0x210 [ 695.338958][T13174] do_swap_page+0x4d7/0x1550 [ 695.343548][T13174] ? pte_offset_map_nolock+0x11f/0x1c0 [ 695.349145][T13174] handle_mm_fault+0x9ec/0x2c10 [ 695.354019][T13174] ? mt_find+0x1d1/0x300 [ 695.358335][T13174] exc_page_fault+0x24d/0x650 [ 695.363032][T13174] asm_exc_page_fault+0x26/0x30 [ 695.367969][T13174] RIP: 0033:0x7fb036a9283c [ 695.372389][T13174] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 695.391989][T13174] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 695.398130][T13174] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 695.406090][T13174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.414060][T13174] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 695.422137][T13174] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000a9c0f [ 695.430095][T13174] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 695.438096][T13174] [ 695.441224][T13174] memory: usage 307196kB, limit 307200kB, failcnt 64226 [ 695.448183][T13174] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 695.456225][T13174] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 695.463599][T13174] Memory cgroup stats for /syz1: [ 695.467553][T13174] cache 0 [ 695.475443][T13174] rss 0 [ 695.478244][T13174] shmem 0 [ 695.481170][T13174] mapped_file 0 [ 695.484676][T13174] dirty 0 [ 695.487632][T13174] writeback 0 [ 695.490922][T13174] workingset_refault_anon 18609 [ 695.495769][T13174] workingset_refault_file 5389 [ 695.500825][T13174] swap 729088 [ 695.504108][T13174] pgpgin 107723 [ 695.507604][T13174] pgpgout 107721 [ 695.511196][T13174] pgfault 83332 [ 695.514649][T13174] pgmajfault 8331 [ 695.518441][T13174] inactive_anon 0 [ 695.522067][T13174] active_anon 0 [ 695.525533][T13174] inactive_file 0 [ 695.529191][T13174] active_file 0 [ 695.532647][T13174] unevictable 0 [ 695.536188][T13174] hierarchical_memory_limit 314572800 [ 695.541582][T13174] hierarchical_memsw_limit 9223372036854771712 [ 695.547836][T13174] total_cache 0 [ 695.551296][T13174] total_rss 0 [ 695.554629][T13174] total_shmem 0 [ 695.558139][T13174] total_mapped_file 0 [ 695.562188][T13174] total_dirty 0 [ 695.565724][T13174] total_writeback 0 [ 695.569586][T13174] total_workingset_refault_anon 18609 [ 695.574998][T13174] total_workingset_refault_file 5389 [ 695.580362][T13174] total_swap 729088 [ 695.584168][T13174] total_pgpgin 107723 [ 695.588188][T13174] total_pgpgout 107721 [ 695.592254][T13174] total_pgfault 83332 [ 695.596242][T13174] total_pgmajfault 8331 [ 695.600684][T13174] total_inactive_anon 0 [ 695.604924][T13174] total_active_anon 0 [ 695.609009][T13174] total_inactive_file 0 [ 695.613219][T13174] total_active_file 0 [ 695.617412][T13174] total_unevictable 0 [ 695.621388][T13174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13174,uid=0 [ 695.636715][T13174] Memory cgroup out of memory: Killed process 13174 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:35 executing program 5: socketpair(0x1e, 0x80000, 0x2, &(0x7f0000001d00)) 02:19:35 executing program 4: socket(0x10, 0x2, 0x4) 02:19:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5414, &(0x7f0000000040)) 02:19:35 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000080)) 02:19:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe622, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:35 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0xc00, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:35 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendto$packet(r0, 0x0, 0x1100, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 02:19:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="9e", 0x1}, {0x0}, {&(0x7f0000000240)="1e", 0x1}], 0x3, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x0) 02:19:35 executing program 4: bpf$MAP_UPDATE_ELEM(0x13, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 02:19:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5414, &(0x7f0000000040)) 02:19:35 executing program 4: ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b62, &(0x7f0000000040)) 02:19:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b41, 0x0) 02:19:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8925, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c40)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x4, 0x40, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x10, 0x80, 0x7, 0x1000}}) 02:19:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5414, &(0x7f0000000040)) 02:19:35 executing program 4: r0 = socket(0x11, 0x2, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0xffffff64) 02:19:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5414, &(0x7f0000000040)) [ 696.084831][ T26] audit: type=1400 audit(1688955576.005:364): avc: denied { getopt } for pid=13238 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 696.740693][T13216] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 696.752100][T13216] CPU: 1 PID: 13216 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 696.760784][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 696.770908][T13216] Call Trace: [ 696.774167][T13216] [ 696.777089][T13216] dump_stack_lvl+0xda/0x130 [ 696.781707][T13216] dump_stack+0x15/0x20 [ 696.785845][T13216] dump_header+0x95/0x3c0 [ 696.790246][T13216] oom_kill_process+0xe3/0x3e0 [ 696.795000][T13216] out_of_memory+0x9ca/0xc00 [ 696.799576][T13216] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 696.805624][T13216] mem_cgroup_out_of_memory+0x139/0x190 [ 696.811156][T13216] try_charge_memcg+0x75c/0xd20 [ 696.816009][T13216] ? __alloc_pages+0x193/0x340 [ 696.820816][T13216] charge_memcg+0x51/0x200 [ 696.825322][T13216] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 696.831286][T13216] __read_swap_cache_async+0x2fe/0x560 [ 696.836754][T13216] swap_cluster_readahead+0x2a3/0x4f0 [ 696.842131][T13216] swapin_readahead+0x8d/0x700 [ 696.846948][T13216] ? __filemap_get_folio+0x47c/0x500 [ 696.852267][T13216] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 696.857805][T13216] ? swap_cache_get_folio+0x6e/0x210 [ 696.863153][T13216] do_swap_page+0x4d7/0x1550 [ 696.867728][T13216] ? pte_offset_map_nolock+0x11f/0x1c0 [ 696.873198][T13216] handle_mm_fault+0x9ec/0x2c10 [ 696.878284][T13216] ? mt_find+0x1d1/0x300 [ 696.882533][T13216] exc_page_fault+0x24d/0x650 [ 696.887198][T13216] asm_exc_page_fault+0x26/0x30 [ 696.892115][T13216] RIP: 0033:0x7fb036a9283c [ 696.896574][T13216] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 696.916252][T13216] RSP: 002b:00007ffec69faf60 EFLAGS: 00010206 [ 696.922314][T13216] RAX: 0000000000000000 RBX: 00007fb036c07050 RCX: 0000000000000000 [ 696.930337][T13216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.938398][T13216] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 696.946374][T13216] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000aa1c5 [ 696.954337][T13216] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 696.962305][T13216] [ 696.965410][T13216] memory: usage 307196kB, limit 307200kB, failcnt 64542 [ 696.972581][T13216] memory+swap: usage 307956kB, limit 9007199254740988kB, failcnt 0 [ 696.980552][T13216] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 696.987958][T13216] Memory cgroup stats for /syz1: [ 696.988134][T13216] cache 0 [ 696.996117][T13216] rss 4096 [ 696.999239][T13216] shmem 0 [ 697.002361][T13216] mapped_file 0 [ 697.005841][T13216] dirty 0 [ 697.009236][T13216] writeback 0 [ 697.012591][T13216] workingset_refault_anon 18650 [ 697.017523][T13216] workingset_refault_file 5389 [ 697.022290][T13216] swap 778240 [ 697.025574][T13216] pgpgin 107790 [ 697.029055][T13216] pgpgout 107789 [ 697.032598][T13216] pgfault 83465 [ 697.036045][T13216] pgmajfault 8347 [ 697.039693][T13216] inactive_anon 0 [ 697.043388][T13216] active_anon 4096 [ 697.047142][T13216] inactive_file 0 [ 697.050777][T13216] active_file 0 [ 697.054237][T13216] unevictable 0 [ 697.057710][T13216] hierarchical_memory_limit 314572800 [ 697.063074][T13216] hierarchical_memsw_limit 9223372036854771712 [ 697.069417][T13216] total_cache 0 [ 697.072863][T13216] total_rss 0 [ 697.076133][T13216] total_shmem 0 [ 697.079678][T13216] total_mapped_file 0 [ 697.083655][T13216] total_dirty 0 [ 697.087189][T13216] total_writeback 4096 [ 697.091250][T13216] total_workingset_refault_anon 18650 [ 697.096642][T13216] total_workingset_refault_file 5389 [ 697.101971][T13216] total_swap 778240 [ 697.105835][T13216] total_pgpgin 107790 [ 697.109836][T13216] total_pgpgout 107789 [ 697.113982][T13216] total_pgfault 83463 [ 697.117969][T13216] total_pgmajfault 8347 [ 697.122161][T13216] total_inactive_anon 4096 [ 697.126594][T13216] total_active_anon 0 [ 697.130564][T13216] total_inactive_file 0 [ 697.134706][T13216] total_active_file 0 [ 697.138755][T13216] total_unevictable 0 [ 697.142736][T13216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13216,uid=0 [ 697.158137][T13216] Memory cgroup out of memory: Killed process 13216 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 02:19:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5607, 0x0) 02:19:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b72, &(0x7f0000000040)) 02:19:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5452, &(0x7f0000000040)) 02:19:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe722, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0xdff, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0xfda52a441ca9fdbb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 02:19:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) 02:19:37 executing program 0: getresuid(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup/syz0\x00', 0x200002, 0x0) socket$xdp(0x2c, 0x3, 0x0) getegid() getpid() 02:19:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5429, 0x0) 02:19:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b46, &(0x7f0000000040)) 02:19:37 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) connect$packet(r0, 0x0, 0xffffffffffffff88) 02:19:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8947, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 02:19:37 executing program 4: socket(0x1f, 0x2, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000a40)) 02:19:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) 02:19:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) [ 698.182393][T13256] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 698.193923][T13256] CPU: 0 PID: 13256 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 698.202678][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 698.212735][T13256] Call Trace: [ 698.216007][T13256] [ 698.218927][T13256] dump_stack_lvl+0xda/0x130 [ 698.223603][T13256] dump_stack+0x15/0x20 [ 698.227819][T13256] dump_header+0x95/0x3c0 [ 698.232153][T13256] oom_kill_process+0xe3/0x3e0 [ 698.236947][T13256] out_of_memory+0x9ca/0xc00 [ 698.241656][T13256] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 698.247870][T13256] mem_cgroup_out_of_memory+0x139/0x190 [ 698.253453][T13256] try_charge_memcg+0x75c/0xd20 [ 698.258354][T13256] ? __alloc_pages+0x193/0x340 [ 698.263159][T13256] charge_memcg+0x51/0x200 [ 698.267596][T13256] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 698.273691][T13256] __read_swap_cache_async+0x2fe/0x560 [ 698.279173][T13256] swap_cluster_readahead+0x2a3/0x4f0 [ 698.284576][T13256] swapin_readahead+0x8d/0x700 [ 698.289362][T13256] ? __filemap_get_folio+0x47c/0x500 [ 698.294663][T13256] ? __list_add_valid+0x36/0xb0 [ 698.299541][T13256] ? _raw_spin_unlock+0x26/0x40 [ 698.304504][T13256] ? swap_cache_get_folio+0x6e/0x210 [ 698.309883][T13256] do_swap_page+0x4d7/0x1550 [ 698.314713][T13256] ? pte_offset_map_nolock+0x11f/0x1c0 [ 698.320180][T13256] handle_mm_fault+0x9ec/0x2c10 [ 698.325139][T13256] ? mt_find+0x1d1/0x300 [ 698.329376][T13256] exc_page_fault+0x24d/0x650 [ 698.334140][T13256] asm_exc_page_fault+0x26/0x30 [ 698.339073][T13256] RIP: 0033:0x7fb036a92810 [ 698.343485][T13256] Code: 48 f7 f1 48 03 44 24 68 49 39 c4 4c 0f 42 e0 83 3d 8c 61 17 00 00 0f 8e 96 fe ff ff e8 99 02 ff ff 49 39 c4 0f 82 4a 01 00 00 <69> 3d 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 [ 698.363430][T13256] RSP: 002b:00007ffec69faf60 EFLAGS: 00010206 [ 698.369486][T13256] RAX: 00000000000aa73a RBX: 00007fb036c08980 RCX: 00000000000aa690 [ 698.377445][T13256] RDX: 00000000000000aa RSI: 00007ffec69faf40 RDI: 7fffffffffffffff [ 698.385406][T13256] RBP: 00007fb036c08980 R08: 0000000000000010 R09: 00007ffec6a550b0 [ 698.393363][T13256] R10: 00007ffec6a55080 R11: 000000000001cef0 R12: 00000000000aa79a [ 698.401347][T13256] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 698.409319][T13256] [ 698.412398][T13256] memory: usage 307200kB, limit 307200kB, failcnt 64981 [ 698.419365][T13256] memory+swap: usage 308008kB, limit 9007199254740988kB, failcnt 0 [ 698.427769][T13256] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 698.435063][T13256] Memory cgroup stats for /syz1: [ 698.435982][T13256] cache 0 [ 698.443955][T13256] rss 4096 [ 698.447005][T13256] shmem 0 [ 698.449939][T13256] mapped_file 0 [ 698.453466][T13256] dirty 0 [ 698.456392][T13256] writeback 0 [ 698.459685][T13256] workingset_refault_anon 18694 [ 698.464529][T13256] workingset_refault_file 5389 [ 698.469371][T13256] swap 847872 [ 698.472650][T13256] pgpgin 107860 [ 698.476101][T13256] pgpgout 107859 [ 698.479664][T13256] pgfault 83601 [ 698.483129][T13256] pgmajfault 8360 [ 698.486783][T13256] inactive_anon 0 [ 698.490425][T13256] active_anon 0 [ 698.493872][T13256] inactive_file 0 [ 698.497510][T13256] active_file 0 [ 698.500995][T13256] unevictable 0 [ 698.504446][T13256] hierarchical_memory_limit 314572800 [ 698.509836][T13256] hierarchical_memsw_limit 9223372036854771712 [ 698.516000][T13256] total_cache 0 [ 698.519542][T13256] total_rss 4096 [ 698.523074][T13256] total_shmem 0 [ 698.526628][T13256] total_mapped_file 0 [ 698.530602][T13256] total_dirty 0 [ 698.534062][T13256] total_writeback 0 [ 698.537898][T13256] total_workingset_refault_anon 18694 [ 698.543257][T13256] total_workingset_refault_file 5389 [ 698.548594][T13256] total_swap 847872 [ 698.552441][T13256] total_pgpgin 107860 [ 698.556408][T13256] total_pgpgout 107859 [ 698.560497][T13256] total_pgfault 83601 [ 698.564466][T13256] total_pgmajfault 8360 [ 698.568637][T13256] total_inactive_anon 0 [ 698.572781][T13256] total_active_anon 0 [ 698.576810][T13256] total_inactive_file 0 [ 698.580959][T13256] total_active_file 0 [ 698.584926][T13256] total_unevictable 0 [ 698.588991][T13256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13256,uid=0 [ 698.604471][T13256] Memory cgroup out of memory: Killed process 13256 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:38 executing program 0: syz_clone3(&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000dc0)}, 0x58) 02:19:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5412, &(0x7f0000000040)) 02:19:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b34, 0x0) 02:19:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe822, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:38 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x7fffffe, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:38 executing program 5: syz_clone(0x5000080, 0x0, 0x0, 0x0, 0x0, 0x0) 02:19:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5425, 0x0) 02:19:38 executing program 0: socketpair(0x0, 0x59bbb3c8ea43cb0f, 0x0, 0x0) 02:19:38 executing program 4: bpf$MAP_UPDATE_ELEM(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 02:19:38 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 02:19:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @change_conn_ptype={{0x40f, 0x4}}}, 0x8) 02:19:38 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 02:19:38 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000280)={0x1, 0x2, @a}, 0x48, 0xfffffffffffffffe) [ 698.895314][ T26] audit: type=1400 audit(1688955578.815:365): avc: denied { write } for pid=13301 comm="syz-executor.5" path="socket:[70565]" dev="sockfs" ino=70565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 699.563662][T13299] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 699.573916][T13299] CPU: 1 PID: 13299 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 699.582594][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 699.592674][T13299] Call Trace: [ 699.595944][T13299] [ 699.598869][T13299] dump_stack_lvl+0xda/0x130 [ 699.603593][T13299] dump_stack+0x15/0x20 [ 699.607746][T13299] dump_header+0x95/0x3c0 [ 699.612089][T13299] oom_kill_process+0xe3/0x3e0 [ 699.616856][T13299] out_of_memory+0x9ca/0xc00 [ 699.621448][T13299] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 699.627508][T13299] mem_cgroup_out_of_memory+0x139/0x190 [ 699.633059][T13299] try_charge_memcg+0x75c/0xd20 [ 699.637908][T13299] ? read_pages+0x320/0x560 [ 699.642407][T13299] charge_memcg+0x51/0x200 [ 699.647277][T13299] __mem_cgroup_charge+0x29/0xa0 [ 699.652242][T13299] __filemap_add_folio+0x454/0x730 [ 699.657362][T13299] ? workingset_activation+0x2e0/0x2e0 [ 699.662817][T13299] filemap_add_folio+0x6f/0x150 [ 699.667663][T13299] filemap_get_pages+0x5cf/0xea0 [ 699.672601][T13299] filemap_splice_read+0x23a/0x810 [ 699.677713][T13299] ext4_file_splice_read+0x95/0xb0 [ 699.682837][T13299] ? ext4_release_file+0x1c0/0x1c0 [ 699.687948][T13299] splice_direct_to_actor+0x28c/0x690 [ 699.693321][T13299] ? direct_file_splice_eof+0x70/0x70 [ 699.698697][T13299] do_splice_direct+0x10d/0x190 [ 699.703552][T13299] ? do_splice_direct+0x190/0x190 [ 699.708578][T13299] do_sendfile+0x3b6/0x9a0 [ 699.712986][T13299] __x64_sys_sendfile64+0x110/0x150 [ 699.718174][T13299] do_syscall_64+0x41/0xc0 [ 699.722582][T13299] ? syscall_exit_to_user_mode+0x26/0x140 [ 699.728303][T13299] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 699.734193][T13299] RIP: 0033:0x7f074fb53389 [ 699.738596][T13299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 699.758197][T13299] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 699.766690][T13299] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 699.774651][T13299] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 699.782611][T13299] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 699.790575][T13299] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 699.798536][T13299] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 699.806499][T13299] [ 699.809747][T13299] memory: usage 307196kB, limit 307200kB, failcnt 38337 [ 699.816776][T13299] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 699.824665][T13299] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 699.832038][T13299] Memory cgroup stats for /syz3: [ 699.832162][T13299] cache 65536 [ 699.840384][T13299] rss 0 [ 699.843141][T13299] shmem 0 [ 699.846149][T13299] mapped_file 0 [ 699.849621][T13299] dirty 0 [ 699.852552][T13299] writeback 0 [ 699.855824][T13299] workingset_refault_anon 13122 [ 699.860684][T13299] workingset_refault_file 22586 [ 699.865529][T13299] swap 466944 [ 699.868829][T13299] pgpgin 725550 [ 699.872330][T13299] pgpgout 725534 [ 699.875901][T13299] pgfault 79661 [ 699.879395][T13299] pgmajfault 5527 [ 699.883046][T13299] inactive_anon 0 [ 699.886692][T13299] active_anon 0 [ 699.890159][T13299] inactive_file 0 [ 699.893786][T13299] active_file 0 [ 699.897272][T13299] unevictable 0 [ 699.900760][T13299] hierarchical_memory_limit 314572800 [ 699.906151][T13299] hierarchical_memsw_limit 9223372036854771712 [ 699.912327][T13299] total_cache 61440 [ 699.916134][T13299] total_rss 0 [ 699.919452][T13299] total_shmem 0 [ 699.922936][T13299] total_mapped_file 0 [ 699.926940][T13299] total_dirty 0 [ 699.930394][T13299] total_writeback 0 [ 699.934195][T13299] total_workingset_refault_anon 13122 [ 699.939690][T13299] total_workingset_refault_file 22586 [ 699.945105][T13299] total_swap 466944 [ 699.948960][T13299] total_pgpgin 725549 [ 699.952937][T13299] total_pgpgout 725534 [ 699.957041][T13299] total_pgfault 79661 [ 699.961023][T13299] total_pgmajfault 5527 [ 699.965165][T13299] total_inactive_anon 0 [ 699.969335][T13299] total_active_anon 0 [ 699.973310][T13299] total_inactive_file 0 [ 699.977468][T13299] total_active_file 0 [ 699.981443][T13299] total_unevictable 0 [ 699.985412][T13299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13284,uid=0 [ 700.000694][T13299] Memory cgroup out of memory: Killed process 13284 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:19:40 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0xfffffffe}) 02:19:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) 02:19:40 executing program 5: ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b46, &(0x7f0000000040)) 02:19:40 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffff0e, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe922, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000180)) 02:19:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b6a, 0x0) 02:19:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b3c, 0x0) 02:19:40 executing program 0: bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 02:19:40 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xfd00}) 02:19:40 executing program 0: ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5412, &(0x7f0000000040)) 02:19:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x2000004c, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000a300100027bd7000fedbdf25020000002dd4ec085b3c61d6211dc551ac23dc76ce6ea6c6854848e2d5e617b17e1c3b507badb8d476c93678c4241c0af72ad3eca2eb3302aa7b82cb46a210854c380d5902d42b159f6c35f0f76e21f223fb13edb2e40cb804f98eab807266e3dfaf5137718c1067792c", @ANYRES32=0x0, @ANYBLOB="4000b10b05000c00800000000a000100aaaaaaaaaabb000006000500000000000800040000010000060005000000000008000400ffffff7f14000100fe880000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20080000}, 0x44090) 02:19:40 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 02:19:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b52, 0x0) 02:19:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004500)={'wlan1\x00'}) [ 700.292107][T13334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=163 sclass=netlink_route_socket pid=13334 comm=syz-executor.2 [ 701.005418][T13322] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 701.016790][T13322] CPU: 0 PID: 13322 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 701.025459][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 701.035503][T13322] Call Trace: [ 701.038771][T13322] [ 701.041693][T13322] dump_stack_lvl+0xda/0x130 [ 701.046290][T13322] dump_stack+0x15/0x20 [ 701.050462][T13322] dump_header+0x95/0x3c0 [ 701.054836][T13322] oom_kill_process+0xe3/0x3e0 [ 701.059704][T13322] out_of_memory+0x9ca/0xc00 [ 701.064366][T13322] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 701.070467][T13322] mem_cgroup_out_of_memory+0x139/0x190 [ 701.076083][T13322] try_charge_memcg+0x75c/0xd20 [ 701.080974][T13322] ? __alloc_pages+0x193/0x340 [ 701.085778][T13322] charge_memcg+0x51/0x200 [ 701.090261][T13322] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 701.096259][T13322] __read_swap_cache_async+0x2fe/0x560 [ 701.101865][T13322] swap_cluster_readahead+0x2a3/0x4f0 [ 701.107276][T13322] swapin_readahead+0x8d/0x700 [ 701.112091][T13322] ? __filemap_get_folio+0x47c/0x500 [ 701.117391][T13322] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 701.122956][T13322] ? swap_cache_get_folio+0x6e/0x210 [ 701.128377][T13322] do_swap_page+0x4d7/0x1550 [ 701.132994][T13322] ? pte_offset_map_nolock+0x11f/0x1c0 [ 701.138480][T13322] handle_mm_fault+0x9ec/0x2c10 [ 701.143424][T13322] ? mt_find+0x1d1/0x300 [ 701.147676][T13322] exc_page_fault+0x24d/0x650 [ 701.152427][T13322] asm_exc_page_fault+0x26/0x30 [ 701.157280][T13322] RIP: 0033:0x7fb036a9283c [ 701.161773][T13322] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 701.181400][T13322] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 701.187499][T13322] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 701.195558][T13322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.203518][T13322] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 701.211483][T13322] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000ab28d [ 701.219446][T13322] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 701.227417][T13322] [ 701.230522][T13322] memory: usage 307200kB, limit 307200kB, failcnt 65310 [ 701.237474][T13322] memory+swap: usage 307928kB, limit 9007199254740988kB, failcnt 0 [ 701.245366][T13322] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 701.252687][T13322] Memory cgroup stats for /syz1: [ 701.252890][T13322] cache 0 [ 701.260933][T13322] rss 0 [ 701.263708][T13322] shmem 0 [ 701.266760][T13322] mapped_file 0 [ 701.270204][T13322] dirty 0 [ 701.273133][T13322] writeback 0 [ 701.276405][T13322] workingset_refault_anon 18789 [ 701.281344][T13322] workingset_refault_file 5389 [ 701.286103][T13322] swap 753664 [ 701.289448][T13322] pgpgin 108007 [ 701.293017][T13322] pgpgout 108007 [ 701.296581][T13322] pgfault 83875 [ 701.300032][T13322] pgmajfault 8398 [ 701.303712][T13322] inactive_anon 0 [ 701.307411][T13322] active_anon 0 [ 701.310862][T13322] inactive_file 0 [ 701.314482][T13322] active_file 0 [ 701.317958][T13322] unevictable 0 [ 701.321411][T13322] hierarchical_memory_limit 314572800 [ 701.326806][T13322] hierarchical_memsw_limit 9223372036854771712 [ 701.332961][T13322] total_cache 0 [ 701.336651][T13322] total_rss 0 [ 701.339983][T13322] total_shmem 0 [ 701.343432][T13322] total_mapped_file 0 [ 701.347607][T13322] total_dirty 0 [ 701.351052][T13322] total_writeback 0 [ 701.354971][T13322] total_workingset_refault_anon 18789 [ 701.360374][T13322] total_workingset_refault_file 5389 [ 701.365723][T13322] total_swap 753664 [ 701.369590][T13322] total_pgpgin 108007 [ 701.373561][T13322] total_pgpgout 108007 [ 701.377689][T13322] total_pgfault 83875 [ 701.381686][T13322] total_pgmajfault 8398 [ 701.385843][T13322] total_inactive_anon 0 [ 701.390005][T13322] total_active_anon 0 [ 701.394010][T13322] total_inactive_file 0 [ 701.398168][T13322] total_active_file 0 [ 701.402138][T13322] total_unevictable 0 02:19:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 701.406118][T13322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13322,uid=0 [ 701.421507][T13322] Memory cgroup out of memory: Killed process 13322 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xea22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x20000054) 02:19:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 02:19:41 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}}) 02:19:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x20044010, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) 02:19:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8927, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 02:19:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x6, &(0x7f0000000b80)={0x443, 0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f0000000900)=""/156, 0x9c}], 0x1, &(0x7f0000000a40)=[{0x0}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000001c0)=""/63, 0x3f}], 0x6, &(0x7f0000000640)=""/143, 0x8f}}, {{&(0x7f0000000700)=@phonet, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/108, 0x6c}, 0x3}], 0x2, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, 0x0}, 0x4c040) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x21, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9829}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}}, 0x0) sched_setattr(r0, &(0x7f0000000bc0)={0x38, 0x6, 0x8, 0x1, 0x248, 0x1, 0x20, 0x2, 0x9, 0xffff}, 0x0) sendto$packet(r4, &(0x7f0000000040)="9f61477af26f", 0x6, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) socket$packet(0x11, 0x3, 0x300) recvmsg(r4, &(0x7f0000001140)={&(0x7f0000000c00)=@ax25={{0x3, @netrom}, [@rose, @default, @default, @remote, @null, @remote, @default, @null]}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c80)=""/88, 0x58}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/174, 0xae}, {&(0x7f0000000dc0)=""/15, 0xf}, {&(0x7f0000000e00)=""/238, 0xee}, {&(0x7f0000000f00)=""/134, 0x86}], 0x6}, 0x120) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$packet(0x11, 0x2, 0x300) 02:19:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5415, 0x0) 02:19:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 02:19:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "cb49fc52c0710174", "1429e7015df38ef5cdc1c79153172768f64ee9b2d883b88bb721a00127cb37e3", "604b6f15", "26d35bad189621b0"}, 0x38) 02:19:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x64}}, 0x0) [ 702.231869][T13350] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 702.245459][T13350] CPU: 1 PID: 13350 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 702.254222][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 702.264281][T13350] Call Trace: [ 702.267560][T13350] [ 702.270520][T13350] dump_stack_lvl+0xda/0x130 [ 702.275202][T13350] dump_stack+0x15/0x20 [ 702.279371][T13350] dump_header+0x95/0x3c0 [ 702.283742][T13350] oom_kill_process+0xe3/0x3e0 [ 702.288571][T13350] out_of_memory+0x9ca/0xc00 [ 702.293249][T13350] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 702.299353][T13350] mem_cgroup_out_of_memory+0x139/0x190 [ 702.304992][T13350] try_charge_memcg+0x75c/0xd20 [ 702.309950][T13350] obj_cgroup_charge_pages+0xab/0x130 [ 702.315336][T13350] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 702.320906][T13350] __alloc_pages+0x1bb/0x340 [ 702.325515][T13350] alloc_pages+0x3e1/0x4e0 [ 702.329944][T13350] __vmalloc_node_range+0x6d2/0xea0 [ 702.335152][T13350] kvmalloc_node+0x121/0x160 [ 702.339830][T13350] ? xt_alloc_table_info+0x3d/0x80 [ 702.345017][T13350] xt_alloc_table_info+0x3d/0x80 [ 702.350026][T13350] do_arpt_set_ctl+0x615/0x1390 [ 702.354887][T13350] ? futex_unqueue+0xba/0xe0 [ 702.359516][T13350] ? futex_wait+0x3c3/0x410 [ 702.364019][T13350] ? _raw_spin_unlock_bh+0x36/0x40 [ 702.369136][T13350] ? lock_sock_nested+0x10e/0x130 [ 702.374253][T13350] ? tcp_release_cb+0xfe/0x340 [ 702.379030][T13350] nf_setsockopt+0x18d/0x1b0 [ 702.383629][T13350] ip_setsockopt+0xe6/0x100 [ 702.388140][T13350] tcp_setsockopt+0x90/0xa0 [ 702.392705][T13350] sock_common_setsockopt+0x61/0x70 [ 702.398009][T13350] ? sock_common_recvmsg+0xe0/0xe0 [ 702.403151][T13350] __sys_setsockopt+0x1c9/0x230 [ 702.408063][T13350] __x64_sys_setsockopt+0x66/0x80 [ 702.413186][T13350] do_syscall_64+0x41/0xc0 [ 702.417605][T13350] ? syscall_exit_to_user_mode+0x26/0x140 [ 702.423376][T13350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 702.429328][T13350] RIP: 0033:0x7f074fb53389 [ 702.433753][T13350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 702.453388][T13350] RSP: 002b:00007f074eec6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 702.461816][T13350] RAX: ffffffffffffffda RBX: 00007f074fc72f80 RCX: 00007f074fb53389 [ 702.469907][T13350] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 702.477984][T13350] RBP: 00007f074fb9e493 R08: 0000000000000438 R09: 0000000000000000 [ 702.485960][T13350] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.493950][T13350] R13: 00007ffc045c9d1f R14: 00007f074eec6300 R15: 0000000000022000 [ 702.501933][T13350] [ 702.505121][T13350] memory: usage 307200kB, limit 307200kB, failcnt 39437 [ 702.512132][T13350] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 702.520089][T13350] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 702.527438][T13350] Memory cgroup stats for /syz3: [ 702.527542][T13350] cache 32768 [ 702.535733][T13350] rss 0 [ 702.538502][T13350] shmem 0 [ 702.541493][T13350] mapped_file 0 [ 702.544972][T13350] dirty 0 [ 702.547929][T13350] writeback 0 [ 702.551212][T13350] workingset_refault_anon 13252 [ 702.556036][T13350] workingset_refault_file 22668 [ 702.561058][T13350] swap 389120 [ 702.564394][T13350] pgpgin 728553 [ 702.567852][T13350] pgpgout 728544 [ 702.571384][T13350] pgfault 80044 [ 702.574844][T13350] pgmajfault 5584 [ 702.578477][T13350] inactive_anon 4096 [ 702.582361][T13350] active_anon 0 [ 702.585797][T13350] inactive_file 32768 [ 702.589813][T13350] active_file 0 [ 702.593320][T13350] unevictable 0 [ 702.596790][T13350] hierarchical_memory_limit 314572800 [ 702.602149][T13350] hierarchical_memsw_limit 9223372036854771712 [ 702.608344][T13350] total_cache 32768 [ 702.612285][T13350] total_rss 0 [ 702.615565][T13350] total_shmem 0 [ 702.619064][T13350] total_mapped_file 0 [ 702.623045][T13350] total_dirty 0 [ 702.626486][T13350] total_writeback 0 [ 702.630355][T13350] total_workingset_refault_anon 13252 [ 702.635778][T13350] total_workingset_refault_file 22668 [ 702.641153][T13350] total_swap 389120 [ 702.644951][T13350] total_pgpgin 728553 [ 702.648997][T13350] total_pgpgout 728544 [ 702.653096][T13350] total_pgfault 80044 [ 702.657158][T13350] total_pgmajfault 5584 [ 702.661298][T13350] total_inactive_anon 4096 [ 702.665748][T13350] total_active_anon 0 [ 702.669815][T13350] total_inactive_file 32768 [ 702.674308][T13350] total_active_file 0 [ 702.678307][T13350] total_unevictable 0 [ 702.682367][T13350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13349,uid=0 [ 702.697724][T13350] Memory cgroup out of memory: Killed process 13349 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 702.715400][T13363] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 702.726822][T13363] CPU: 0 PID: 13363 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 702.735511][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 702.745602][T13363] Call Trace: [ 702.748885][T13363] [ 702.751827][T13363] dump_stack_lvl+0xda/0x130 [ 702.756563][T13363] dump_stack+0x15/0x20 [ 702.760719][T13363] dump_header+0x95/0x3c0 [ 702.765309][T13363] oom_kill_process+0xe3/0x3e0 [ 702.770099][T13363] out_of_memory+0x9ca/0xc00 [ 702.774685][T13363] mem_cgroup_out_of_memory+0x139/0x190 [ 702.780306][T13363] try_charge_memcg+0x75c/0xd20 [ 702.785216][T13363] ? __alloc_pages+0x193/0x340 [ 702.789985][T13363] charge_memcg+0x51/0x200 [ 702.794396][T13363] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 702.800543][T13363] __read_swap_cache_async+0x2fe/0x560 [ 702.806002][T13363] swap_cluster_readahead+0x2a3/0x4f0 [ 702.811369][T13363] swapin_readahead+0x8d/0x700 [ 702.816206][T13363] ? __filemap_get_folio+0x47c/0x500 [ 702.821523][T13363] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 702.827070][T13363] ? swap_cache_get_folio+0x6e/0x210 [ 702.832422][T13363] do_swap_page+0x4d7/0x1550 [ 702.837057][T13363] ? pte_offset_map_nolock+0x11f/0x1c0 [ 702.842540][T13363] handle_mm_fault+0x9ec/0x2c10 [ 702.847388][T13363] ? mt_find+0x1d1/0x300 [ 702.851636][T13363] exc_page_fault+0x24d/0x650 [ 702.856306][T13363] asm_exc_page_fault+0x26/0x30 [ 702.861155][T13363] RIP: 0033:0x7fb036a9283c [ 702.865557][T13363] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 702.885154][T13363] RSP: 002b:00007ffec69faf60 EFLAGS: 00010206 [ 702.891241][T13363] RAX: 0000000000000000 RBX: 00007fb036c08090 RCX: 0000000000000000 [ 702.899209][T13363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 702.907174][T13363] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 702.915135][T13363] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000ab837 [ 702.923093][T13363] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 702.931106][T13363] [ 702.934174][T13363] memory: usage 307200kB, limit 307200kB, failcnt 65487 [ 702.941119][T13363] memory+swap: usage 307952kB, limit 9007199254740988kB, failcnt 0 [ 702.949068][T13363] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 702.956339][T13363] Memory cgroup stats for /syz1: [ 702.956797][T13363] cache 0 [ 702.964732][T13363] rss 0 [ 702.967527][T13363] shmem 0 [ 702.970472][T13363] mapped_file 0 [ 702.973921][T13363] dirty 0 [ 702.976974][T13363] writeback 0 [ 702.980288][T13363] workingset_refault_anon 18829 [ 702.985178][T13363] workingset_refault_file 5389 [ 702.989975][T13363] swap 770048 [ 702.993250][T13363] pgpgin 108073 [ 702.996715][T13363] pgpgout 108072 [ 703.000333][T13363] pgfault 83969 [ 703.003784][T13363] pgmajfault 8410 [ 703.007560][T13363] inactive_anon 4096 [ 703.011578][T13363] active_anon 0 [ 703.015026][T13363] inactive_file 0 [ 703.018675][T13363] active_file 0 [ 703.022126][T13363] unevictable 0 [ 703.025585][T13363] hierarchical_memory_limit 314572800 [ 703.030976][T13363] hierarchical_memsw_limit 9223372036854771712 [ 703.037149][T13363] total_cache 0 [ 703.040606][T13363] total_rss 0 [ 703.043880][T13363] total_shmem 0 [ 703.047474][T13363] total_mapped_file 0 [ 703.051447][T13363] total_dirty 0 [ 703.054923][T13363] total_writeback 0 [ 703.058756][T13363] total_workingset_refault_anon 18829 [ 703.064114][T13363] total_workingset_refault_file 5389 [ 703.069480][T13363] total_swap 770048 [ 703.073282][T13363] total_pgpgin 108073 [ 703.077273][T13363] total_pgpgout 108072 [ 703.081363][T13363] total_pgfault 83969 [ 703.085336][T13363] total_pgmajfault 8410 [ 703.089579][T13363] total_inactive_anon 4096 [ 703.094060][T13363] total_active_anon 0 [ 703.098057][T13363] total_inactive_file 0 [ 703.102247][T13363] total_active_file 0 [ 703.106213][T13363] total_unevictable 0 [ 703.110210][T13363] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13363,uid=0 02:19:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x2, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 703.125545][T13363] Memory cgroup out of memory: Killed process 13363 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xeb22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @private}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_vlan\x00'}) 02:19:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:19:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000280)) 02:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) 02:19:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b48, 0x0) 02:19:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b46, 0x0) 02:19:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x0, 0x92, 0x0, 0x4e5, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x1, 0x1}, 0x48) r0 = socket(0x11, 0x2, 0x3) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb38}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="64010100000000002000000000000000ffffffff000000000000000000000000ac1e0000000000000000000000000000e9145b6c70a7d91000b71948af559df21a907ffcbbd2ee0c248900f9a075f1c14fff80e25610959dbcfb871a66b5b0906319f3e44c84b250272116ea9b84fb372a229b37909b214f1550818b9a4c842659c7fec66fcd78eaa4fd4001724ea2674de7e2c644b0d0fd9f05700651077b175fb044fb5380db8bb9e04fb144936dd0fef282b37bddb1fe"]}) 02:19:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8947, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 02:19:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b69, 0x0) 02:19:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "8ddacc"}) [ 703.989225][ T3094] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 704.000466][ T3094] CPU: 0 PID: 3094 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 704.009055][ T3094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 704.019149][ T3094] Call Trace: [ 704.022420][ T3094] [ 704.025368][ T3094] dump_stack_lvl+0xda/0x130 [ 704.029963][ T3094] dump_stack+0x15/0x20 [ 704.034151][ T3094] dump_header+0x95/0x3c0 [ 704.038492][ T3094] oom_kill_process+0xe3/0x3e0 [ 704.043269][ T3094] out_of_memory+0x9ca/0xc00 [ 704.047907][ T3094] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 704.054066][ T3094] mem_cgroup_out_of_memory+0x139/0x190 [ 704.059688][ T3094] try_charge_memcg+0x75c/0xd20 [ 704.064595][ T3094] ? __alloc_pages+0x193/0x340 [ 704.069468][ T3094] charge_memcg+0x51/0x200 [ 704.073896][ T3094] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 704.079902][ T3094] __read_swap_cache_async+0x2fe/0x560 [ 704.085374][ T3094] swap_cluster_readahead+0x488/0x4f0 [ 704.090760][ T3094] swapin_readahead+0x8d/0x700 [ 704.095558][ T3094] ? __filemap_get_folio+0x47c/0x500 [ 704.100851][ T3094] ? __list_add_valid+0x36/0xb0 [ 704.105851][ T3094] ? _raw_spin_unlock+0x26/0x40 [ 704.110718][ T3094] ? swap_cache_get_folio+0x6e/0x210 [ 704.116023][ T3094] do_swap_page+0x4d7/0x1550 [ 704.120643][ T3094] ? pte_offset_map_nolock+0x11f/0x1c0 [ 704.126225][ T3094] handle_mm_fault+0x9ec/0x2c10 [ 704.131298][ T3094] ? mt_find+0x1d1/0x300 [ 704.135589][ T3094] exc_page_fault+0x24d/0x650 [ 704.140301][ T3094] asm_exc_page_fault+0x26/0x30 [ 704.145153][ T3094] RIP: 0033:0x7f074fb7806f [ 704.149579][ T3094] Code: 44 f8 64 8b 04 25 18 00 00 00 85 c0 75 2d b8 e6 00 00 00 0f 05 89 c2 f7 da 3d 00 f0 ff ff b8 00 00 00 00 0f 47 c2 48 83 c4 28 b8 16 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 48 89 54 24 10 [ 704.169260][ T3094] RSP: 002b:00007ffc045c9f38 EFLAGS: 00010202 [ 704.175441][ T3094] RAX: 0000000000000000 RBX: 0000000000000909 RCX: 00007f074fb7805a [ 704.183410][ T3094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.191392][ T3094] RBP: 00007ffc045c9fdc R08: 0000000000000010 R09: 00007ffc045f20b0 [ 704.199367][ T3094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 704.207333][ T3094] R13: 00000000000abbc8 R14: 0000000000000011 R15: 00007ffc045ca040 [ 704.215318][ T3094] [ 704.218486][ T3094] memory: usage 307196kB, limit 307200kB, failcnt 40567 [ 704.225416][ T3094] memory+swap: usage 307544kB, limit 9007199254740988kB, failcnt 0 [ 704.233326][ T3094] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 704.240766][ T3094] Memory cgroup stats for /syz3: [ 704.240956][ T3094] cache 4096 [ 704.249179][ T3094] rss 20480 [ 704.252279][ T3094] shmem 4096 [ 704.255453][ T3094] mapped_file 4096 [ 704.259208][ T3094] dirty 0 [ 704.262132][ T3094] writeback 0 [ 704.265396][ T3094] workingset_refault_anon 13439 [ 704.270242][ T3094] workingset_refault_file 22684 [ 704.275090][ T3094] swap 356352 [ 704.278381][ T3094] pgpgin 730223 [ 704.281831][ T3094] pgpgout 730214 [ 704.285352][ T3094] pgfault 80462 [ 704.288818][ T3094] pgmajfault 5707 [ 704.292460][ T3094] inactive_anon 32768 [ 704.296416][ T3094] active_anon 4096 [ 704.300188][ T3094] inactive_file 0 [ 704.303876][ T3094] active_file 0 [ 704.307334][ T3094] unevictable 0 [ 704.310778][ T3094] hierarchical_memory_limit 314572800 [ 704.316174][ T3094] hierarchical_memsw_limit 9223372036854771712 [ 704.322364][ T3094] total_cache 4096 [ 704.326071][ T3094] total_rss 36864 [ 704.329760][ T3094] total_shmem 4096 [ 704.333468][ T3094] total_mapped_file 4096 [ 704.337742][ T3094] total_dirty 0 [ 704.341189][ T3094] total_writeback 0 [ 704.344970][ T3094] total_workingset_refault_anon 13437 [ 704.350580][ T3094] total_workingset_refault_file 22684 [ 704.356071][ T3094] total_swap 352256 [ 704.359938][ T3094] total_pgpgin 730221 [ 704.363991][ T3094] total_pgpgout 730211 [ 704.368081][ T3094] total_pgfault 80456 [ 704.372048][ T3094] total_pgmajfault 5706 [ 704.376197][ T3094] total_inactive_anon 8192 [ 704.380619][ T3094] total_active_anon 28672 [ 704.384997][ T3094] total_inactive_file 0 [ 704.389227][ T3094] total_active_file 0 [ 704.393349][ T3094] total_unevictable 0 [ 704.397339][ T3094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13478,uid=0 [ 704.412692][ T3094] Memory cgroup out of memory: Killed process 13478 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 704.448888][T13500] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 704.462503][T13500] CPU: 0 PID: 13500 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 704.471356][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 704.481460][T13500] Call Trace: [ 704.484783][T13500] [ 704.487717][T13500] dump_stack_lvl+0xda/0x130 [ 704.492354][T13500] dump_stack+0x15/0x20 [ 704.496506][T13500] dump_header+0x95/0x3c0 [ 704.500869][T13500] oom_kill_process+0xe3/0x3e0 [ 704.505723][T13500] out_of_memory+0x9ca/0xc00 [ 704.510344][T13500] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 704.516418][T13500] mem_cgroup_out_of_memory+0x139/0x190 [ 704.522053][T13500] try_charge_memcg+0x75c/0xd20 [ 704.526941][T13500] obj_cgroup_charge_pages+0xab/0x130 [ 704.532313][T13500] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 704.538117][T13500] __alloc_pages+0x1bb/0x340 [ 704.542706][T13500] alloc_pages+0x3e1/0x4e0 [ 704.547135][T13500] __vmalloc_node_range+0x6d2/0xea0 [ 704.552391][T13500] kvmalloc_node+0x121/0x160 [ 704.557008][T13500] ? xt_alloc_table_info+0x3d/0x80 [ 704.562371][T13500] xt_alloc_table_info+0x3d/0x80 [ 704.567389][T13500] do_arpt_set_ctl+0x615/0x1390 [ 704.572237][T13500] ? futex_unqueue+0xba/0xe0 [ 704.576823][T13500] ? futex_wait+0x3c3/0x410 [ 704.581318][T13500] ? _raw_spin_unlock_bh+0x36/0x40 [ 704.586443][T13500] ? lock_sock_nested+0x10e/0x130 [ 704.591497][T13500] ? tcp_release_cb+0xfe/0x340 [ 704.596346][T13500] nf_setsockopt+0x18d/0x1b0 [ 704.601010][T13500] ip_setsockopt+0xe6/0x100 [ 704.605509][T13500] tcp_setsockopt+0x90/0xa0 [ 704.610173][T13500] sock_common_setsockopt+0x61/0x70 [ 704.615392][T13500] ? sock_common_recvmsg+0xe0/0xe0 [ 704.620500][T13500] __sys_setsockopt+0x1c9/0x230 [ 704.625355][T13500] __x64_sys_setsockopt+0x66/0x80 [ 704.630443][T13500] do_syscall_64+0x41/0xc0 [ 704.634914][T13500] ? syscall_exit_to_user_mode+0x26/0x140 [ 704.640649][T13500] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 704.646718][T13500] RIP: 0033:0x7fb036ae7389 [ 704.651122][T13500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 704.670725][T13500] RSP: 002b:00007fb035e5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 704.679130][T13500] RAX: ffffffffffffffda RBX: 00007fb036c06f80 RCX: 00007fb036ae7389 [ 704.687165][T13500] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 704.695167][T13500] RBP: 00007fb036b32493 R08: 0000000000000438 R09: 0000000000000000 [ 704.703132][T13500] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.711096][T13500] R13: 00007ffec69faedf R14: 00007fb035e5a300 R15: 0000000000022000 [ 704.719071][T13500] [ 704.722236][T13500] memory: usage 307200kB, limit 307200kB, failcnt 65890 [ 704.729209][T13500] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 704.737156][T13500] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 704.744453][T13500] Memory cgroup stats for /syz1: [ 704.745755][T13500] cache 0 [ 704.753676][T13500] rss 4096 [ 704.756734][T13500] shmem 0 [ 704.759667][T13500] mapped_file 0 [ 704.763120][T13500] dirty 0 [ 704.766134][T13500] writeback 0 [ 704.769504][T13500] workingset_refault_anon 18904 [ 704.774362][T13500] workingset_refault_file 5389 [ 704.779192][T13500] swap 724992 [ 704.782478][T13500] pgpgin 108174 [ 704.786783][T13500] pgpgout 108169 [ 704.790339][T13500] pgfault 84112 [ 704.793790][T13500] pgmajfault 8445 [ 704.797453][T13500] inactive_anon 12288 [ 704.801431][T13500] active_anon 4096 [ 704.805142][T13500] inactive_file 0 [ 704.808848][T13500] active_file 0 [ 704.812298][T13500] unevictable 0 [ 704.815751][T13500] hierarchical_memory_limit 314572800 [ 704.821135][T13500] hierarchical_memsw_limit 9223372036854771712 [ 704.827362][T13500] total_cache 0 [ 704.830810][T13500] total_rss 4096 [ 704.834425][T13500] total_shmem 0 [ 704.837905][T13500] total_mapped_file 0 [ 704.841888][T13500] total_dirty 0 [ 704.845514][T13500] total_writeback 0 [ 704.849398][T13500] total_workingset_refault_anon 18904 [ 704.854779][T13500] total_workingset_refault_file 5389 [ 704.860106][T13500] total_swap 724992 [ 704.863989][T13500] total_pgpgin 108174 [ 704.868267][T13500] total_pgpgout 108169 [ 704.872380][T13500] total_pgfault 84112 [ 704.876627][T13500] total_pgmajfault 8445 [ 704.880776][T13500] total_inactive_anon 12288 [ 704.885277][T13500] total_active_anon 4096 [ 704.889636][T13500] total_inactive_file 0 [ 704.893787][T13500] total_active_file 0 02:19:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x3, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 704.897841][T13500] total_unevictable 0 [ 704.901885][T13500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13497,uid=0 [ 704.917325][T13500] Memory cgroup out of memory: Killed process 13497 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xec22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80104592, 0x0) 02:19:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5441, 0x0) 02:19:45 executing program 2: r0 = epoll_create(0xa24) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0x10000010}) 02:19:45 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x2000, @broadcast}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x0, @broadcast}}) 02:19:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="1e", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0) 02:19:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@bridge_delvlan={0x18, 0x71, 0x205}, 0x18}}, 0x0) 02:19:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b68, 0x0) 02:19:45 executing program 0: bpf$MAP_UPDATE_ELEM(0x14, 0x0, 0x0) 02:19:45 executing program 4: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8910, 0x0) 02:19:45 executing program 2: syz_clone(0x18001000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)="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") pidfd_open(0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) [ 705.273954][ T26] audit: type=1400 audit(1688955585.195:366): avc: denied { ioctl } for pid=13533 comm="syz-executor.4" path="socket:[71737]" dev="sockfs" ino=71737 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 705.833922][T13509] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 705.844167][T13509] CPU: 0 PID: 13509 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 705.853203][T13509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 705.863263][T13509] Call Trace: [ 705.866551][T13509] [ 705.869507][T13509] dump_stack_lvl+0xda/0x130 [ 705.874107][T13509] dump_stack+0x15/0x20 [ 705.878264][T13509] dump_header+0x95/0x3c0 [ 705.882602][T13509] oom_kill_process+0xe3/0x3e0 [ 705.887394][T13509] out_of_memory+0x9ca/0xc00 [ 705.891997][T13509] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 705.898155][T13509] mem_cgroup_out_of_memory+0x139/0x190 [ 705.903815][T13509] try_charge_memcg+0x75c/0xd20 [ 705.908697][T13509] ? read_pages+0x320/0x560 [ 705.913206][T13509] charge_memcg+0x51/0x200 [ 705.917636][T13509] __mem_cgroup_charge+0x29/0xa0 [ 705.922594][T13509] __filemap_add_folio+0x454/0x730 [ 705.927718][T13509] ? workingset_activation+0x2e0/0x2e0 [ 705.933197][T13509] filemap_add_folio+0x6f/0x150 [ 705.938063][T13509] filemap_get_pages+0x5cf/0xea0 [ 705.943018][T13509] filemap_splice_read+0x23a/0x810 [ 705.948153][T13509] ? pipe_unlock+0x3b/0x40 [ 705.952599][T13509] ext4_file_splice_read+0x95/0xb0 [ 705.957729][T13509] ? ext4_release_file+0x1c0/0x1c0 [ 705.962924][T13509] splice_direct_to_actor+0x28c/0x690 [ 705.968321][T13509] ? direct_file_splice_eof+0x70/0x70 [ 705.973724][T13509] do_splice_direct+0x10d/0x190 [ 705.978597][T13509] ? do_splice_direct+0x190/0x190 [ 705.983640][T13509] do_sendfile+0x3b6/0x9a0 [ 705.988081][T13509] __x64_sys_sendfile64+0x110/0x150 [ 705.993293][T13509] do_syscall_64+0x41/0xc0 [ 705.997744][T13509] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 706.003646][T13509] RIP: 0033:0x7f074fb53389 [ 706.008052][T13509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 706.027654][T13509] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 706.036051][T13509] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 706.044005][T13509] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 706.052046][T13509] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 706.060004][T13509] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 706.067967][T13509] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 706.075930][T13509] [ 706.079023][T13509] memory: usage 307200kB, limit 307200kB, failcnt 42059 [ 706.085969][T13509] memory+swap: usage 307676kB, limit 9007199254740988kB, failcnt 0 [ 706.093896][T13509] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 706.101206][T13509] Memory cgroup stats for /syz3: [ 706.101561][T13509] cache 12288 [ 706.109826][T13509] rss 8192 [ 706.112824][T13509] shmem 0 [ 706.115868][T13509] mapped_file 0 [ 706.119346][T13509] dirty 0 [ 706.122273][T13509] writeback 0 [ 706.125533][T13509] workingset_refault_anon 13537 [ 706.130404][T13509] workingset_refault_file 22867 [ 706.135257][T13509] swap 487424 [ 706.138538][T13509] pgpgin 731960 [ 706.141986][T13509] pgpgout 731955 [ 706.145505][T13509] pgfault 80829 [ 706.148976][T13509] pgmajfault 5753 [ 706.152609][T13509] inactive_anon 8192 [ 706.156501][T13509] active_anon 0 [ 706.160036][T13509] inactive_file 12288 [ 706.163999][T13509] active_file 0 [ 706.167483][T13509] unevictable 0 [ 706.170937][T13509] hierarchical_memory_limit 314572800 [ 706.176287][T13509] hierarchical_memsw_limit 9223372036854771712 [ 706.182537][T13509] total_cache 12288 [ 706.186341][T13509] total_rss 8192 [ 706.189914][T13509] total_shmem 0 [ 706.193359][T13509] total_mapped_file 0 [ 706.197339][T13509] total_dirty 0 [ 706.200782][T13509] total_writeback 0 [ 706.204567][T13509] total_workingset_refault_anon 13537 [ 706.210029][T13509] total_workingset_refault_file 22867 [ 706.215388][T13509] total_swap 487424 [ 706.219192][T13509] total_pgpgin 731960 [ 706.223172][T13509] total_pgpgout 731955 [ 706.227266][T13509] total_pgfault 80829 [ 706.231249][T13509] total_pgmajfault 5753 [ 706.235383][T13509] total_inactive_anon 8192 [ 706.239842][T13509] total_active_anon 0 [ 706.243817][T13509] total_inactive_file 12288 [ 706.253102][T13509] total_active_file 0 [ 706.257083][T13509] total_unevictable 0 [ 706.261047][T13509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13507,uid=0 [ 706.276294][T13509] Memory cgroup out of memory: Killed process 13507 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 706.307835][T13523] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 706.319246][T13523] CPU: 1 PID: 13523 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 706.328040][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 706.338103][T13523] Call Trace: [ 706.341392][T13523] [ 706.344343][T13523] dump_stack_lvl+0xda/0x130 [ 706.350757][T13523] dump_stack+0x15/0x20 [ 706.354968][T13523] dump_header+0x95/0x3c0 [ 706.359358][T13523] oom_kill_process+0xe3/0x3e0 [ 706.364119][T13523] out_of_memory+0x9ca/0xc00 [ 706.368706][T13523] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 706.374834][T13523] mem_cgroup_out_of_memory+0x139/0x190 [ 706.380424][T13523] try_charge_memcg+0x75c/0xd20 [ 706.385325][T13523] ? __alloc_pages+0x193/0x340 [ 706.390133][T13523] charge_memcg+0x51/0x200 [ 706.394803][T13523] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 706.400802][T13523] __read_swap_cache_async+0x2fe/0x560 [ 706.406275][T13523] swap_cluster_readahead+0x2a3/0x4f0 [ 706.411771][T13523] swapin_readahead+0x8d/0x700 [ 706.416549][T13523] ? __filemap_get_folio+0x47c/0x500 [ 706.421858][T13523] ? swap_cache_get_folio+0x6e/0x210 [ 706.427136][T13523] do_swap_page+0x4d7/0x1550 [ 706.431823][T13523] ? pte_offset_map_nolock+0x11f/0x1c0 [ 706.437401][T13523] handle_mm_fault+0x9ec/0x2c10 [ 706.442245][T13523] ? mt_find+0x1d1/0x300 [ 706.446490][T13523] exc_page_fault+0x24d/0x650 [ 706.451171][T13523] asm_exc_page_fault+0x26/0x30 [ 706.456017][T13523] RIP: 0033:0x7fb036a90bd0 [ 706.460467][T13523] Code: 00 00 40 f6 c7 10 74 12 c6 05 04 fb c9 00 01 e9 24 ff ff ff 66 0f 1f 44 00 00 c6 05 f5 fa c9 00 01 e9 12 ff ff ff 0f 1f 40 00 <0f> b6 05 e6 fa c9 00 84 c0 74 0b 0f b6 05 ca fa c9 00 84 c0 74 0a [ 706.480066][T13523] RSP: 002b:00007ffec69faf58 EFLAGS: 00010202 [ 706.486126][T13523] RAX: 00000000000ac6f2 RBX: 00007fb036c06f80 RCX: 00000000000ac5d0 [ 706.494149][T13523] RDX: 0000000000000122 RSI: 00007ffec69faf40 RDI: 00007fb036c06f80 [ 706.502161][T13523] RBP: 00007fb036c08980 R08: 0000000000000010 R09: 00007ffec6a550b0 [ 706.510120][T13523] R10: 00007ffec6a55080 R11: 000000000001d3dc R12: 00000000000ac5ee [ 706.518082][T13523] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 706.526042][T13523] [ 706.529221][T13523] memory: usage 307200kB, limit 307200kB, failcnt 66131 [ 706.536207][T13523] memory+swap: usage 307996kB, limit 9007199254740988kB, failcnt 0 [ 706.544151][T13523] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 706.551453][T13523] Memory cgroup stats for /syz1: [ 706.552789][T13523] cache 0 [ 706.560675][T13523] rss 4096 [ 706.563727][T13523] shmem 0 [ 706.566681][T13523] mapped_file 0 [ 706.570130][T13523] dirty 0 [ 706.573053][T13523] writeback 4096 [ 706.576602][T13523] workingset_refault_anon 18969 [ 706.581521][T13523] workingset_refault_file 5389 [ 706.586276][T13523] swap 815104 [ 706.589630][T13523] pgpgin 108265 [ 706.593082][T13523] pgpgout 108263 [ 706.596633][T13523] pgfault 84280 [ 706.600080][T13523] pgmajfault 8482 [ 706.604137][T13523] inactive_anon 0 [ 706.607804][T13523] active_anon 0 [ 706.611321][T13523] inactive_file 0 [ 706.614944][T13523] active_file 0 [ 706.618524][T13523] unevictable 0 [ 706.621975][T13523] hierarchical_memory_limit 314572800 [ 706.627354][T13523] hierarchical_memsw_limit 9223372036854771712 [ 706.633497][T13523] total_cache 0 [ 706.637011][T13523] total_rss 4096 [ 706.640549][T13523] total_shmem 0 [ 706.643999][T13523] total_mapped_file 0 [ 706.648032][T13523] total_dirty 0 [ 706.651479][T13523] total_writeback 4096 [ 706.655545][T13523] total_workingset_refault_anon 18969 [ 706.661063][T13523] total_workingset_refault_file 5389 [ 706.666335][T13523] total_swap 815104 [ 706.670196][T13523] total_pgpgin 108265 [ 706.674249][T13523] total_pgpgout 108263 [ 706.678323][T13523] total_pgfault 84280 [ 706.682296][T13523] total_pgmajfault 8482 [ 706.686438][T13523] total_inactive_anon 0 [ 706.690687][T13523] total_active_anon 0 [ 706.694667][T13523] total_inactive_file 0 [ 706.698844][T13523] total_active_file 0 [ 706.702860][T13523] total_unevictable 0 [ 706.706896][T13523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13523,uid=0 02:19:46 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x4, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 706.722300][T13523] Memory cgroup out of memory: Killed process 13523 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xed22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:46 executing program 0: r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) 02:19:46 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x18001000, 0x0, 0x0, &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)="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") 02:19:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x6ffc}, 0x37fe0}}, 0x0) 02:19:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20000004) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000054c0)={&(0x7f0000005380), 0xc, &(0x7f0000005480)={&(0x7f00000053c0)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "869b2e3c4a"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x54}}, 0x0) 02:19:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000011"], 0x64}}, 0x0) 02:19:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x5595}, 0x0) 02:19:46 executing program 0: socket(0xa, 0x5, 0x82abfc5) 02:19:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000040)) 02:19:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000001a40), 0x10) 02:19:46 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[], 0x29, 0xfffffffffffffffe) [ 707.708555][T13552] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 707.719967][T13552] CPU: 0 PID: 13552 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 707.728815][T13552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 707.738873][T13552] Call Trace: [ 707.742146][T13552] [ 707.745097][T13552] dump_stack_lvl+0xda/0x130 [ 707.749688][T13552] dump_stack+0x15/0x20 [ 707.753843][T13552] dump_header+0x95/0x3c0 [ 707.758182][T13552] oom_kill_process+0xe3/0x3e0 [ 707.762962][T13552] out_of_memory+0x9ca/0xc00 [ 707.767557][T13552] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 707.773673][T13552] mem_cgroup_out_of_memory+0x139/0x190 [ 707.779288][T13552] try_charge_memcg+0x75c/0xd20 [ 707.784144][T13552] ? __alloc_pages+0x193/0x340 [ 707.788983][T13552] charge_memcg+0x51/0x200 [ 707.793408][T13552] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 707.799458][T13552] __read_swap_cache_async+0x2fe/0x560 [ 707.804942][T13552] swap_cluster_readahead+0x2a3/0x4f0 [ 707.810325][T13552] swapin_readahead+0x8d/0x700 [ 707.815206][T13552] ? __filemap_get_folio+0x47c/0x500 [ 707.820490][T13552] ? kcsan_setup_watchpoint+0x3fe/0x410 [ 707.826039][T13552] ? swap_cache_get_folio+0x6e/0x210 [ 707.831328][T13552] do_swap_page+0x4d7/0x1550 [ 707.835925][T13552] ? pte_offset_map_nolock+0x11f/0x1c0 [ 707.841452][T13552] handle_mm_fault+0x9ec/0x2c10 [ 707.846335][T13552] ? mt_find+0x1d1/0x300 [ 707.850671][T13552] exc_page_fault+0x24d/0x650 02:19:47 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x5, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 707.855377][T13552] asm_exc_page_fault+0x26/0x30 [ 707.860300][T13552] RIP: 0033:0x7fb036a9283c [ 707.864732][T13552] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 707.884543][T13552] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 707.890695][T13552] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 707.898690][T13552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.906683][T13552] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 707.914730][T13552] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000accf8 [ 707.922706][T13552] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 707.930689][T13552] [ 707.933839][T13552] memory: usage 307200kB, limit 307200kB, failcnt 66515 [ 707.940982][T13552] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 707.948936][T13552] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 707.956298][T13552] Memory cgroup stats for /syz1: [ 707.960390][T13552] cache 0 [ 707.968382][T13552] rss 0 [ 707.971165][T13552] shmem 0 [ 707.974188][T13552] mapped_file 0 [ 707.977751][T13552] dirty 0 [ 707.980774][T13552] writeback 0 [ 707.984052][T13552] workingset_refault_anon 19003 [ 707.988964][T13552] workingset_refault_file 5389 [ 707.993762][T13552] swap 737280 [ 707.997053][T13552] pgpgin 108325 [ 708.000500][T13552] pgpgout 108325 [ 708.004071][T13552] pgfault 84406 [ 708.007585][T13552] pgmajfault 8498 [ 708.011233][T13552] inactive_anon 0 [ 708.014977][T13552] active_anon 0 [ 708.018455][T13552] inactive_file 0 [ 708.022123][T13552] active_file 0 [ 708.025579][T13552] unevictable 0 [ 708.029065][T13552] hierarchical_memory_limit 314572800 [ 708.034432][T13552] hierarchical_memsw_limit 9223372036854771712 [ 708.040732][T13552] total_cache 0 [ 708.044193][T13552] total_rss 0 [ 708.047490][T13552] total_shmem 0 [ 708.051004][T13552] total_mapped_file 0 [ 708.055016][T13552] total_dirty 0 [ 708.058492][T13552] total_writeback 0 [ 708.062303][T13552] total_workingset_refault_anon 19003 [ 708.067859][T13552] total_workingset_refault_file 5389 [ 708.073144][T13552] total_swap 737280 [ 708.076973][T13552] total_pgpgin 108325 [ 708.080951][T13552] total_pgpgout 108325 [ 708.085016][T13552] total_pgfault 84406 [ 708.089097][T13552] total_pgmajfault 8498 [ 708.093278][T13552] total_inactive_anon 0 [ 708.097450][T13552] total_active_anon 0 [ 708.101422][T13552] total_inactive_file 0 [ 708.105605][T13552] total_active_file 0 [ 708.109609][T13552] total_unevictable 0 [ 708.113574][T13552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13552,uid=0 [ 708.128886][T13552] Memory cgroup out of memory: Killed process 13552 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xfdff, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:48 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @dev}}}}) 02:19:48 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0xa, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 02:19:48 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) 02:19:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40084504, 0x0) 02:19:48 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0xa, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 02:19:48 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) 02:19:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 02:19:48 executing program 4: ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b31, &(0x7f0000000040)) 02:19:48 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8955, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 02:19:48 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0xa, 0x0, @remote}, {0x2, 0x0, @broadcast}}) [ 708.771059][T13571] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 708.784616][T13571] CPU: 1 PID: 13571 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 708.793313][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 708.803464][T13571] Call Trace: [ 708.806751][T13571] [ 708.809713][T13571] dump_stack_lvl+0xda/0x130 [ 708.814390][T13571] dump_stack+0x15/0x20 [ 708.818664][T13571] dump_header+0x95/0x3c0 [ 708.823000][T13571] oom_kill_process+0xe3/0x3e0 [ 708.827790][T13571] out_of_memory+0x9ca/0xc00 [ 708.832526][T13571] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 708.838660][T13571] mem_cgroup_out_of_memory+0x139/0x190 [ 708.844254][T13571] try_charge_memcg+0x75c/0xd20 [ 708.849127][T13571] obj_cgroup_charge_pages+0xab/0x130 [ 708.854583][T13571] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 708.860144][T13571] __alloc_pages+0x1bb/0x340 [ 708.864787][T13571] alloc_pages+0x3e1/0x4e0 [ 708.869282][T13571] __vmalloc_node_range+0x6d2/0xea0 [ 708.874602][T13571] kvmalloc_node+0x121/0x160 [ 708.879327][T13571] ? xt_alloc_table_info+0x3d/0x80 [ 708.884642][T13571] xt_alloc_table_info+0x3d/0x80 [ 708.889593][T13571] do_arpt_set_ctl+0x615/0x1390 [ 708.894443][T13571] ? enqueue_task_fair+0x678/0x850 [ 708.899611][T13571] ? check_preempt_wakeup+0x187/0x320 [ 708.905008][T13571] ? _raw_spin_unlock_bh+0x36/0x40 [ 708.910214][T13571] ? lock_sock_nested+0x10e/0x130 [ 708.915244][T13571] ? tcp_release_cb+0xfe/0x340 [ 708.920088][T13571] nf_setsockopt+0x18d/0x1b0 [ 708.924682][T13571] ip_setsockopt+0xe6/0x100 [ 708.929198][T13571] tcp_setsockopt+0x90/0xa0 [ 708.933717][T13571] sock_common_setsockopt+0x61/0x70 [ 708.939013][T13571] ? sock_common_recvmsg+0xe0/0xe0 [ 708.944198][T13571] __sys_setsockopt+0x1c9/0x230 [ 708.949058][T13571] __x64_sys_setsockopt+0x66/0x80 [ 708.954234][T13571] do_syscall_64+0x41/0xc0 [ 708.958682][T13571] ? syscall_exit_to_user_mode+0x26/0x140 [ 708.964422][T13571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 708.970356][T13571] RIP: 0033:0x7f074fb53389 [ 708.974851][T13571] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 708.994474][T13571] RSP: 002b:00007f074eec6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 709.002914][T13571] RAX: ffffffffffffffda RBX: 00007f074fc72f80 RCX: 00007f074fb53389 [ 709.010913][T13571] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 709.018881][T13571] RBP: 00007f074fb9e493 R08: 0000000000000438 R09: 0000000000000000 [ 709.026864][T13571] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.034901][T13571] R13: 00007ffc045c9d1f R14: 00007f074eec6300 R15: 0000000000022000 [ 709.042905][T13571] [ 709.046176][T13571] memory: usage 307200kB, limit 307200kB, failcnt 43556 [ 709.053230][T13571] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 709.061142][T13571] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 709.068460][T13571] Memory cgroup stats for /syz3: [ 709.068720][T13571] cache 4096 [ 709.076957][T13571] rss 8192 [ 709.079975][T13571] shmem 0 [ 709.082904][T13571] mapped_file 0 [ 709.086355][T13571] dirty 0 [ 709.089306][T13571] writeback 8192 [ 709.092850][T13571] workingset_refault_anon 13740 [ 709.097723][T13571] workingset_refault_file 22892 [ 709.102678][T13571] swap 389120 [ 709.105962][T13571] pgpgin 735234 [ 709.109460][T13571] pgpgout 735231 [ 709.113003][T13571] pgfault 81338 [ 709.116610][T13571] pgmajfault 5818 [ 709.120298][T13571] inactive_anon 0 [ 709.123945][T13571] active_anon 0 [ 709.127469][T13571] inactive_file 4096 [ 709.131403][T13571] active_file 0 [ 709.134883][T13571] unevictable 0 [ 709.138374][T13571] hierarchical_memory_limit 314572800 [ 709.143790][T13571] hierarchical_memsw_limit 9223372036854771712 [ 709.149978][T13571] total_cache 4096 [ 709.153844][T13571] total_rss 8192 [ 709.157421][T13571] total_shmem 0 [ 709.160866][T13571] total_mapped_file 0 [ 709.164886][T13571] total_dirty 0 [ 709.168397][T13571] total_writeback 8192 [ 709.172499][T13571] total_workingset_refault_anon 13740 [ 709.177984][T13571] total_workingset_refault_file 22892 [ 709.183374][T13571] total_swap 389120 [ 709.187248][T13571] total_pgpgin 735234 [ 709.191246][T13571] total_pgpgout 735231 [ 709.195416][T13571] total_pgfault 81338 [ 709.199508][T13571] total_pgmajfault 5818 [ 709.203995][T13571] total_inactive_anon 0 [ 709.208239][T13571] total_active_anon 0 [ 709.212228][T13571] total_inactive_file 4096 [ 709.216674][T13571] total_active_file 0 [ 709.220644][T13571] total_unevictable 0 [ 709.224612][T13571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13570,uid=0 [ 709.239870][T13571] Memory cgroup out of memory: Killed process 13570 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 709.257314][T13585] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 709.268736][T13585] CPU: 0 PID: 13585 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 709.277409][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 709.287532][T13585] Call Trace: [ 709.290846][T13585] [ 709.293770][T13585] dump_stack_lvl+0xda/0x130 [ 709.298371][T13585] dump_stack+0x15/0x20 [ 709.302528][T13585] dump_header+0x95/0x3c0 [ 709.306909][T13585] oom_kill_process+0xe3/0x3e0 [ 709.311687][T13585] out_of_memory+0x9ca/0xc00 [ 709.316299][T13585] mem_cgroup_out_of_memory+0x139/0x190 [ 709.321857][T13585] try_charge_memcg+0x75c/0xd20 [ 709.326772][T13585] ? __alloc_pages+0x193/0x340 [ 709.331612][T13585] charge_memcg+0x51/0x200 [ 709.336095][T13585] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 709.342202][T13585] __read_swap_cache_async+0x2fe/0x560 [ 709.347828][T13585] swap_cluster_readahead+0x2a3/0x4f0 [ 709.353198][T13585] swapin_readahead+0x8d/0x700 [ 709.357992][T13585] ? __filemap_get_folio+0x47c/0x500 [ 709.363348][T13585] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 709.368962][T13585] ? swap_cache_get_folio+0x6e/0x210 [ 709.374311][T13585] do_swap_page+0x4d7/0x1550 [ 709.378908][T13585] ? pte_offset_map_nolock+0x11f/0x1c0 [ 709.384362][T13585] handle_mm_fault+0x9ec/0x2c10 [ 709.389270][T13585] ? mt_find+0x1d1/0x300 [ 709.393508][T13585] exc_page_fault+0x24d/0x650 [ 709.398200][T13585] asm_exc_page_fault+0x26/0x30 [ 709.403137][T13585] RIP: 0033:0x7fb036a9283c [ 709.407631][T13585] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 709.427275][T13585] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 709.433429][T13585] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 709.441578][T13585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.449556][T13585] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 709.457577][T13585] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000ad2bf [ 709.465585][T13585] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 709.473635][T13585] [ 709.476735][T13585] memory: usage 307188kB, limit 307200kB, failcnt 66697 [ 709.483673][T13585] memory+swap: usage 307968kB, limit 9007199254740988kB, failcnt 0 [ 709.491587][T13585] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 709.498878][T13585] Memory cgroup stats for /syz1: [ 709.500774][T13585] cache 0 [ 709.508711][T13585] rss 4096 [ 709.511724][T13585] shmem 0 [ 709.514651][T13585] mapped_file 0 [ 709.518128][T13585] dirty 0 [ 709.521054][T13585] writeback 0 [ 709.524435][T13585] workingset_refault_anon 19085 [ 709.529335][T13585] workingset_refault_file 5389 [ 709.534081][T13585] swap 798720 [ 709.537368][T13585] pgpgin 108433 [ 709.540820][T13585] pgpgout 108432 [ 709.544354][T13585] pgfault 84563 [ 709.547882][T13585] pgmajfault 8522 [ 709.551514][T13585] inactive_anon 0 [ 709.555136][T13585] active_anon 4096 [ 709.558891][T13585] inactive_file 0 [ 709.562519][T13585] active_file 0 [ 709.566015][T13585] unevictable 0 [ 709.569477][T13585] hierarchical_memory_limit 314572800 [ 709.574835][T13585] hierarchical_memsw_limit 9223372036854771712 [ 709.581124][T13585] total_cache 0 [ 709.584574][T13585] total_rss 4096 [ 709.588280][T13585] total_shmem 0 [ 709.591734][T13585] total_mapped_file 0 [ 709.595706][T13585] total_dirty 0 [ 709.599179][T13585] total_writeback 0 [ 709.603045][T13585] total_workingset_refault_anon 19085 [ 709.608447][T13585] total_workingset_refault_file 5389 [ 709.613755][T13585] total_swap 798720 [ 709.617575][T13585] total_pgpgin 108433 [ 709.621548][T13585] total_pgpgout 108432 [ 709.625677][T13585] total_pgfault 84563 [ 709.629671][T13585] total_pgmajfault 8522 [ 709.633819][T13585] total_inactive_anon 0 [ 709.638070][T13585] total_active_anon 4096 [ 709.642298][T13585] total_inactive_file 0 [ 709.646539][T13585] total_active_file 0 [ 709.650511][T13585] total_unevictable 0 [ 709.654476][T13585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13585,uid=0 02:19:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x6, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 709.669909][T13585] Memory cgroup out of memory: Killed process 13585 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xfeff, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 02:19:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000680)={r2, 0x1, 0x6, @random="c12fb6e4b3e5"}, 0x10) 02:19:49 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x37fe0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x4, 0xb81, 0xc, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x700, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x29, 0x1, 0x79, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x10, 0x8000, 0x9, 0x8a}}) 02:19:49 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0xa, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 02:19:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b32, &(0x7f0000000040)) 02:19:49 executing program 2: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) 02:19:49 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@empty, @local}) 02:19:49 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 02:19:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 02:19:49 executing program 2: request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffc) [ 710.601309][T13602] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 710.611556][T13602] CPU: 0 PID: 13602 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 710.620235][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 710.630287][T13602] Call Trace: [ 710.633554][T13602] [ 710.636474][T13602] dump_stack_lvl+0xda/0x130 [ 710.641069][T13602] dump_stack+0x15/0x20 [ 710.645218][T13602] dump_header+0x95/0x3c0 [ 710.649555][T13602] oom_kill_process+0xe3/0x3e0 [ 710.654326][T13602] out_of_memory+0x9ca/0xc00 [ 710.658916][T13602] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 710.664991][T13602] mem_cgroup_out_of_memory+0x139/0x190 [ 710.670542][T13602] try_charge_memcg+0x75c/0xd20 [ 710.675394][T13602] ? read_pages+0x320/0x560 [ 710.679892][T13602] charge_memcg+0x51/0x200 [ 710.684308][T13602] __mem_cgroup_charge+0x29/0xa0 [ 710.689247][T13602] __filemap_add_folio+0x454/0x730 [ 710.694632][T13602] ? workingset_activation+0x2e0/0x2e0 [ 710.700091][T13602] filemap_add_folio+0x6f/0x150 [ 710.704937][T13602] filemap_get_pages+0x5cf/0xea0 [ 710.709876][T13602] filemap_splice_read+0x23a/0x810 [ 710.714990][T13602] ext4_file_splice_read+0x95/0xb0 [ 710.720104][T13602] ? ext4_release_file+0x1c0/0x1c0 [ 710.725217][T13602] splice_direct_to_actor+0x28c/0x690 [ 710.730599][T13602] ? direct_file_splice_eof+0x70/0x70 [ 710.735976][T13602] do_splice_direct+0x10d/0x190 [ 710.740830][T13602] ? do_splice_direct+0x190/0x190 [ 710.745857][T13602] do_sendfile+0x3b6/0x9a0 [ 710.750265][T13602] __x64_sys_sendfile64+0x110/0x150 [ 710.755456][T13602] do_syscall_64+0x41/0xc0 [ 710.759884][T13602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 710.765779][T13602] RIP: 0033:0x7f074fb53389 [ 710.770182][T13602] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 710.789799][T13602] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 710.798203][T13602] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 710.806172][T13602] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 710.814134][T13602] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 710.822098][T13602] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 710.830076][T13602] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 710.838041][T13602] [ 710.841159][T13602] memory: usage 307196kB, limit 307200kB, failcnt 44982 [ 710.848119][T13602] memory+swap: usage 307604kB, limit 9007199254740988kB, failcnt 0 [ 710.856009][T13602] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 710.863321][T13602] Memory cgroup stats for /syz3: [ 710.863446][T13602] cache 40960 [ 710.871666][T13602] rss 4096 [ 710.874679][T13602] shmem 4096 [ 710.877891][T13602] mapped_file 4096 [ 710.881599][T13602] dirty 0 [ 710.884526][T13602] writeback 4096 [ 710.888083][T13602] workingset_refault_anon 13827 [ 710.893015][T13602] workingset_refault_file 22995 [ 710.897875][T13602] swap 397312 [ 710.901155][T13602] pgpgin 736862 [ 710.904608][T13602] pgpgout 736850 [ 710.908173][T13602] pgfault 81735 [ 710.911621][T13602] pgmajfault 5860 [ 710.915251][T13602] inactive_anon 8192 [ 710.919160][T13602] active_anon 4096 [ 710.922876][T13602] inactive_file 36864 [ 710.926886][T13602] active_file 0 [ 710.930345][T13602] unevictable 0 [ 710.933800][T13602] hierarchical_memory_limit 314572800 [ 710.939184][T13602] hierarchical_memsw_limit 9223372036854771712 [ 710.945336][T13602] total_cache 40960 [ 710.949164][T13602] total_rss 4096 [ 710.952700][T13602] total_shmem 0 [ 710.956173][T13602] total_mapped_file 0 [ 710.960191][T13602] total_dirty 0 [ 710.963656][T13602] total_writeback 0 [ 710.967511][T13602] total_workingset_refault_anon 13825 [ 710.972871][T13602] total_workingset_refault_file 22995 [ 710.978252][T13602] total_swap 413696 [ 710.982051][T13602] total_pgpgin 736860 [ 710.986019][T13602] total_pgpgout 736848 [ 710.990103][T13602] total_pgfault 81729 [ 710.994072][T13602] total_pgmajfault 5857 [ 710.998224][T13602] total_inactive_anon 4096 [ 711.002628][T13602] total_active_anon 4096 [ 711.006878][T13602] total_inactive_file 0 [ 711.011016][T13602] total_active_file 0 [ 711.015063][T13602] total_unevictable 0 [ 711.019085][T13602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13600,uid=0 [ 711.034558][T13602] Memory cgroup out of memory: Killed process 13600 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 711.078787][T13612] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 711.090236][T13612] CPU: 0 PID: 13612 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 711.098948][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 711.109031][T13612] Call Trace: [ 711.112305][T13612] [ 711.115258][T13612] dump_stack_lvl+0xda/0x130 [ 711.119915][T13612] dump_stack+0x15/0x20 [ 711.124073][T13612] dump_header+0x95/0x3c0 [ 711.128475][T13612] oom_kill_process+0xe3/0x3e0 [ 711.133304][T13612] out_of_memory+0x9ca/0xc00 [ 711.137906][T13612] mem_cgroup_out_of_memory+0x139/0x190 [ 711.143458][T13612] try_charge_memcg+0x75c/0xd20 [ 711.148312][T13612] ? __alloc_pages+0x193/0x340 [ 711.153159][T13612] charge_memcg+0x51/0x200 [ 711.157586][T13612] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 711.163575][T13612] __read_swap_cache_async+0x2fe/0x560 [ 711.169033][T13612] swap_cluster_readahead+0x2a3/0x4f0 [ 711.174460][T13612] swapin_readahead+0x8d/0x700 [ 711.179277][T13612] ? __filemap_get_folio+0x47c/0x500 [ 711.184609][T13612] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 711.190180][T13612] ? swap_cache_get_folio+0x6e/0x210 [ 711.195472][T13612] do_swap_page+0x4d7/0x1550 [ 711.200067][T13612] ? pte_offset_map_nolock+0x11f/0x1c0 [ 711.205524][T13612] handle_mm_fault+0x9ec/0x2c10 [ 711.210482][T13612] ? mt_find+0x1d1/0x300 [ 711.214766][T13612] exc_page_fault+0x24d/0x650 [ 711.219459][T13612] asm_exc_page_fault+0x26/0x30 [ 711.224463][T13612] RIP: 0033:0x7fb036a92996 [ 711.228874][T13612] Code: 1a 00 00 7f 25 e9 22 fd ff ff 48 8b 00 89 83 9c 00 00 00 31 f6 e8 9a ea ff ff 48 81 c3 d0 00 00 00 48 39 eb 0f 84 02 fd ff ff <80> 7b 20 00 48 89 df 74 e7 e8 2c e2 ff ff 84 c0 74 d7 80 3d 81 b7 [ 711.248491][T13612] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 711.254567][T13612] RAX: 00000000000ad996 RBX: 00007fb036c06f80 RCX: 00000000000ad958 [ 711.262557][T13612] RDX: 000000000000003e RSI: 00007ffec69faf40 RDI: 7fffffffffffffff [ 711.270558][T13612] RBP: 00007fb036c08980 R08: 0000000000000010 R09: 00007ffec6a550b0 [ 711.278515][T13612] R10: 00007ffec6a55080 R11: 000000000001d6ca R12: 00000000000ad84e [ 711.286493][T13612] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 711.294466][T13612] [ 711.297571][T13612] memory: usage 307200kB, limit 307200kB, failcnt 66901 [ 711.304501][T13612] memory+swap: usage 307980kB, limit 9007199254740988kB, failcnt 0 [ 711.312421][T13612] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 711.319715][T13612] Memory cgroup stats for /syz1: [ 711.321894][T13612] cache 0 [ 711.329834][T13612] rss 0 [ 711.332587][T13612] shmem 0 [ 711.335496][T13612] mapped_file 0 [ 711.338987][T13612] dirty 0 [ 711.341907][T13612] writeback 0 [ 711.345162][T13612] workingset_refault_anon 19138 [ 711.350021][T13612] workingset_refault_file 5389 [ 711.354769][T13612] swap 798720 [ 711.358060][T13612] pgpgin 108512 [ 711.361562][T13612] pgpgout 108511 [ 711.365080][T13612] pgfault 84711 [ 711.368539][T13612] pgmajfault 8542 [ 711.372170][T13612] inactive_anon 4096 [ 711.376316][T13612] active_anon 0 [ 711.379811][T13612] inactive_file 0 [ 711.383427][T13612] active_file 0 [ 711.386924][T13612] unevictable 0 [ 711.390371][T13612] hierarchical_memory_limit 314572800 [ 711.395712][T13612] hierarchical_memsw_limit 9223372036854771712 [ 711.401863][T13612] total_cache 0 [ 711.405345][T13612] total_rss 0 [ 711.408714][T13612] total_shmem 0 [ 711.412153][T13612] total_mapped_file 0 [ 711.416105][T13612] total_dirty 0 [ 711.419599][T13612] total_writeback 0 [ 711.423391][T13612] total_workingset_refault_anon 19138 [ 711.428791][T13612] total_workingset_refault_file 5389 [ 711.434056][T13612] total_swap 798720 [ 711.437865][T13612] total_pgpgin 108512 [ 711.441851][T13612] total_pgpgout 108511 [ 711.445964][T13612] total_pgfault 84711 [ 711.449958][T13612] total_pgmajfault 8542 [ 711.454090][T13612] total_inactive_anon 4096 [ 711.458498][T13612] total_active_anon 0 [ 711.462532][T13612] total_inactive_file 0 [ 711.466695][T13612] total_active_file 0 [ 711.470657][T13612] total_unevictable 0 02:19:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x7, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 711.474623][T13612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13612,uid=0 [ 711.489863][T13612] Memory cgroup out of memory: Killed process 13612 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:51 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 02:19:51 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @broadcast}, {0x4, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 02:19:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4c80, 0x0) 02:19:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7f) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000040)) 02:19:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xfffd, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:51 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x31b340, 0x0) 02:19:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40084503, 0x0) 02:19:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 02:19:51 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) 02:19:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x1, 0xace, 0x4, @local, @dev={0xfe, 0x80, '\x00', 0x37}, 0x20, 0x7, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x29, 0x5, 0x1, 0x1ff, 0x32, @mcast1, @remote, 0x8000, 0x1, 0x1, 0x4c7f}}) socket$inet6_udplite(0xa, 0x2, 0x88) 02:19:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x5437, 0x0) [ 712.429919][T13634] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 712.440206][T13634] CPU: 1 PID: 13634 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 712.448912][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 712.458981][T13634] Call Trace: [ 712.462265][T13634] [ 712.465193][T13634] dump_stack_lvl+0xda/0x130 [ 712.469799][T13634] dump_stack+0x15/0x20 [ 712.473975][T13634] dump_header+0x95/0x3c0 [ 712.478319][T13634] oom_kill_process+0xe3/0x3e0 [ 712.483096][T13634] out_of_memory+0x9ca/0xc00 [ 712.487695][T13634] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 712.493773][T13634] mem_cgroup_out_of_memory+0x139/0x190 [ 712.499339][T13634] try_charge_memcg+0x75c/0xd20 [ 712.504201][T13634] ? read_pages+0x320/0x560 [ 712.508712][T13634] charge_memcg+0x51/0x200 [ 712.513114][T13634] __mem_cgroup_charge+0x29/0xa0 [ 712.518057][T13634] __filemap_add_folio+0x454/0x730 [ 712.523183][T13634] ? workingset_activation+0x2e0/0x2e0 [ 712.528734][T13634] filemap_add_folio+0x6f/0x150 [ 712.533635][T13634] filemap_get_pages+0x5cf/0xea0 [ 712.538562][T13634] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.544739][T13634] filemap_splice_read+0x23a/0x810 [ 712.549860][T13634] ext4_file_splice_read+0x95/0xb0 [ 712.554958][T13634] ? ext4_release_file+0x1c0/0x1c0 [ 712.560085][T13634] splice_direct_to_actor+0x28c/0x690 [ 712.565467][T13634] ? direct_file_splice_eof+0x70/0x70 [ 712.570828][T13634] do_splice_direct+0x10d/0x190 [ 712.575709][T13634] ? do_splice_direct+0x190/0x190 [ 712.580721][T13634] do_sendfile+0x3b6/0x9a0 [ 712.585134][T13634] __x64_sys_sendfile64+0x110/0x150 [ 712.590327][T13634] do_syscall_64+0x41/0xc0 [ 712.594840][T13634] ? syscall_exit_to_user_mode+0x26/0x140 [ 712.600619][T13634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 712.606585][T13634] RIP: 0033:0x7f074fb53389 [ 712.611020][T13634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 712.630612][T13634] RSP: 002b:00007f074ee84168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 712.639019][T13634] RAX: ffffffffffffffda RBX: 00007f074fc73120 RCX: 00007f074fb53389 [ 712.647006][T13634] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 712.654958][T13634] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 712.662910][T13634] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 712.670882][T13634] R13: 00007ffc045c9d1f R14: 00007f074ee84300 R15: 0000000000022000 [ 712.678845][T13634] [ 712.682071][T13634] memory: usage 307200kB, limit 307200kB, failcnt 46349 [ 712.689202][T13634] memory+swap: usage 307548kB, limit 9007199254740988kB, failcnt 0 [ 712.697147][T13634] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 712.704524][T13634] Memory cgroup stats for /syz3: [ 712.704662][T13634] cache 65536 [ 712.712938][T13634] rss 12288 [ 712.716088][T13634] shmem 0 [ 712.719047][T13634] mapped_file 0 [ 712.722558][T13634] dirty 0 [ 712.725482][T13634] writeback 0 [ 712.728772][T13634] workingset_refault_anon 13922 [ 712.733670][T13634] workingset_refault_file 23050 [ 712.738583][T13634] swap 368640 [ 712.741857][T13634] pgpgin 738522 [ 712.745349][T13634] pgpgout 738500 [ 712.748888][T13634] pgfault 81973 [ 712.752335][T13634] pgmajfault 5902 [ 712.755996][T13634] inactive_anon 0 [ 712.759635][T13634] active_anon 0 [ 712.763083][T13634] inactive_file 65536 [ 712.767134][T13634] active_file 0 [ 712.770594][T13634] unevictable 0 [ 712.774052][T13634] hierarchical_memory_limit 314572800 [ 712.779440][T13634] hierarchical_memsw_limit 9223372036854771712 [ 712.785736][T13634] total_cache 65536 [ 712.789549][T13634] total_rss 12288 [ 712.793188][T13634] total_shmem 0 [ 712.796670][T13634] total_mapped_file 0 [ 712.800658][T13634] total_dirty 0 [ 712.804118][T13634] total_writeback 0 [ 712.807929][T13634] total_workingset_refault_anon 13922 [ 712.813295][T13634] total_workingset_refault_file 23050 [ 712.818728][T13634] total_swap 368640 [ 712.822529][T13634] total_pgpgin 738522 [ 712.826499][T13634] total_pgpgout 738500 [ 712.830578][T13634] total_pgfault 81973 [ 712.834531][T13634] total_pgmajfault 5902 [ 712.838685][T13634] total_inactive_anon 0 [ 712.842835][T13634] total_active_anon 0 [ 712.846827][T13634] total_inactive_file 65536 [ 712.851369][T13634] total_active_file 0 [ 712.855327][T13634] total_unevictable 0 [ 712.859322][T13634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13630,uid=0 [ 712.874806][T13634] Memory cgroup out of memory: Killed process 13630 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 712.892411][T13640] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 712.903857][T13640] CPU: 0 PID: 13640 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 712.912538][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 712.922604][T13640] Call Trace: [ 712.925886][T13640] [ 712.928890][T13640] dump_stack_lvl+0xda/0x130 [ 712.933563][T13640] dump_stack+0x15/0x20 [ 712.937755][T13640] dump_header+0x95/0x3c0 [ 712.942111][T13640] oom_kill_process+0xe3/0x3e0 [ 712.946936][T13640] out_of_memory+0x9ca/0xc00 [ 712.951596][T13640] mem_cgroup_out_of_memory+0x139/0x190 [ 712.957155][T13640] try_charge_memcg+0x75c/0xd20 [ 712.962088][T13640] ? __alloc_pages+0x193/0x340 [ 712.966896][T13640] charge_memcg+0x51/0x200 [ 712.971352][T13640] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 712.977338][T13640] __read_swap_cache_async+0x2fe/0x560 [ 712.982791][T13640] swap_cluster_readahead+0x2a3/0x4f0 [ 712.988163][T13640] swapin_readahead+0x8d/0x700 [ 712.992966][T13640] ? __filemap_get_folio+0x47c/0x500 [ 712.998285][T13640] ? __list_add_valid+0x36/0xb0 [ 713.003129][T13640] ? _raw_spin_unlock+0x26/0x40 [ 713.007974][T13640] ? swap_cache_get_folio+0x6e/0x210 [ 713.013251][T13640] do_swap_page+0x4d7/0x1550 [ 713.017837][T13640] ? pte_offset_map_nolock+0x11f/0x1c0 [ 713.023292][T13640] handle_mm_fault+0x9ec/0x2c10 [ 713.028201][T13640] ? mt_find+0x1d1/0x300 [ 713.032510][T13640] exc_page_fault+0x24d/0x650 [ 713.037192][T13640] asm_exc_page_fault+0x26/0x30 [ 713.042052][T13640] RIP: 0033:0x7fb036a9283c [ 713.046480][T13640] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 713.066159][T13640] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 713.072212][T13640] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 713.080227][T13640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 713.088198][T13640] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 713.096222][T13640] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000adf97 [ 713.104181][T13640] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 713.112143][T13640] [ 713.115237][T13640] memory: usage 307172kB, limit 307200kB, failcnt 67104 [ 713.122181][T13640] memory+swap: usage 307872kB, limit 9007199254740988kB, failcnt 0 [ 713.130102][T13640] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 713.137405][T13640] Memory cgroup stats for /syz1: [ 713.140119][T13640] cache 0 [ 713.148225][T13640] rss 24576 [ 713.151334][T13640] shmem 0 [ 713.154294][T13640] mapped_file 0 [ 713.157773][T13640] dirty 0 [ 713.160791][T13640] writeback 0 [ 713.164060][T13640] workingset_refault_anon 19188 [ 713.168921][T13640] workingset_refault_file 5389 [ 713.173766][T13640] swap 712704 [ 713.177072][T13640] pgpgin 108588 [ 713.180584][T13640] pgpgout 108581 [ 713.184110][T13640] pgfault 84834 [ 713.187574][T13640] pgmajfault 8558 [ 713.191196][T13640] inactive_anon 4096 [ 713.195130][T13640] active_anon 24576 [ 713.198979][T13640] inactive_file 0 [ 713.202606][T13640] active_file 0 [ 713.206053][T13640] unevictable 0 [ 713.209557][T13640] hierarchical_memory_limit 314572800 [ 713.214970][T13640] hierarchical_memsw_limit 9223372036854771712 [ 713.221152][T13640] total_cache 0 [ 713.224603][T13640] total_rss 24576 [ 713.228252][T13640] total_shmem 0 [ 713.231700][T13640] total_mapped_file 0 [ 713.235716][T13640] total_dirty 0 [ 713.239230][T13640] total_writeback 0 [ 713.243035][T13640] total_workingset_refault_anon 19188 [ 713.248423][T13640] total_workingset_refault_file 5389 [ 713.253709][T13640] total_swap 712704 [ 713.257590][T13640] total_pgpgin 108588 [ 713.261568][T13640] total_pgpgout 108581 [ 713.265652][T13640] total_pgfault 84834 [ 713.269677][T13640] total_pgmajfault 8558 [ 713.273825][T13640] total_inactive_anon 4096 [ 713.278264][T13640] total_active_anon 24576 02:19:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x8, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:53 executing program 4: add_key$fscrypt_provisioning(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3, 0xe}, &(0x7f0000000540)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) 02:19:53 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) 02:19:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10002005}) 02:19:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x890b, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) [ 713.282671][T13640] total_inactive_file 0 [ 713.286851][T13640] total_active_file 0 [ 713.290814][T13640] total_unevictable 0 [ 713.294782][T13640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13640,uid=0 [ 713.310116][T13640] Memory cgroup out of memory: Killed process 13640 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xfffe, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0xf26e}, {}]}) 02:19:53 executing program 5: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 02:19:53 executing program 4: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000440)={0x8000200, 0x0, 0x0, &(0x7f0000000240), {0xb}, &(0x7f0000000280)=""/154, 0x9a, &(0x7f0000000340)=""/158, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) 02:19:53 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) 02:19:53 executing program 5: sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)) 02:19:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 714.117772][T13771] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 714.128012][T13771] CPU: 0 PID: 13771 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 714.136694][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 714.146758][T13771] Call Trace: [ 714.150038][T13771] [ 714.152980][T13771] dump_stack_lvl+0xda/0x130 [ 714.157582][T13771] dump_stack+0x15/0x20 [ 714.161740][T13771] dump_header+0x95/0x3c0 [ 714.166178][T13771] oom_kill_process+0xe3/0x3e0 [ 714.170959][T13771] out_of_memory+0x9ca/0xc00 [ 714.175565][T13771] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 714.181635][T13771] mem_cgroup_out_of_memory+0x139/0x190 [ 714.187200][T13771] try_charge_memcg+0x75c/0xd20 [ 714.192064][T13771] ? read_pages+0x320/0x560 [ 714.196573][T13771] charge_memcg+0x51/0x200 [ 714.200998][T13771] __mem_cgroup_charge+0x29/0xa0 [ 714.205949][T13771] __filemap_add_folio+0x454/0x730 [ 714.211065][T13771] ? workingset_activation+0x2e0/0x2e0 [ 714.216525][T13771] filemap_add_folio+0x6f/0x150 [ 714.221379][T13771] filemap_get_pages+0x5cf/0xea0 [ 714.226330][T13771] filemap_splice_read+0x23a/0x810 [ 714.231454][T13771] ext4_file_splice_read+0x95/0xb0 [ 714.236578][T13771] ? ext4_release_file+0x1c0/0x1c0 [ 714.241700][T13771] splice_direct_to_actor+0x28c/0x690 [ 714.247090][T13771] ? direct_file_splice_eof+0x70/0x70 [ 714.252481][T13771] do_splice_direct+0x10d/0x190 [ 714.257340][T13771] ? do_splice_direct+0x190/0x190 [ 714.262371][T13771] do_sendfile+0x3b6/0x9a0 [ 714.266794][T13771] __x64_sys_sendfile64+0x110/0x150 [ 714.272001][T13771] do_syscall_64+0x41/0xc0 [ 714.276437][T13771] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 714.282515][T13771] RIP: 0033:0x7f074fb53389 [ 714.286927][T13771] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 714.306546][T13771] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 714.314970][T13771] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 714.322947][T13771] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 714.330926][T13771] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 714.338897][T13771] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 714.346895][T13771] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 714.354861][T13771] [ 714.358077][T13771] memory: usage 307200kB, limit 307200kB, failcnt 47434 [ 714.365000][T13771] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 714.372969][T13771] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 714.380261][T13771] Memory cgroup stats for /syz3: [ 714.380331][T13771] cache 45056 [ 714.388542][T13771] rss 8192 [ 714.391597][T13771] shmem 0 [ 714.394512][T13771] mapped_file 0 [ 714.397973][T13771] dirty 0 [ 714.400915][T13771] writeback 0 [ 714.405069][T13771] workingset_refault_anon 14003 [ 714.409957][T13771] workingset_refault_file 23079 [ 714.414795][T13771] swap 454656 [ 714.418122][T13771] pgpgin 739797 [ 714.421575][T13771] pgpgout 739784 [ 714.425104][T13771] pgfault 82365 [ 714.428577][T13771] pgmajfault 5930 [ 714.432207][T13771] inactive_anon 8192 [ 714.436079][T13771] active_anon 0 [ 714.439554][T13771] inactive_file 45056 [ 714.443532][T13771] active_file 0 [ 714.447008][T13771] unevictable 0 [ 714.450449][T13771] hierarchical_memory_limit 314572800 [ 714.455793][T13771] hierarchical_memsw_limit 9223372036854771712 [ 714.461944][T13771] total_cache 45056 [ 714.465765][T13771] total_rss 8192 [ 714.469334][T13771] total_shmem 0 [ 714.472779][T13771] total_mapped_file 0 [ 714.476777][T13771] total_dirty 0 [ 714.480236][T13771] total_writeback 4096 [ 714.484310][T13771] total_workingset_refault_anon 14003 [ 714.489703][T13771] total_workingset_refault_file 23079 [ 714.495066][T13771] total_swap 454656 [ 714.498874][T13771] total_pgpgin 739797 [ 714.502842][T13771] total_pgpgout 739784 [ 714.506923][T13771] total_pgfault 82365 [ 714.510893][T13771] total_pgmajfault 5930 [ 714.515022][T13771] total_inactive_anon 0 [ 714.519213][T13771] total_active_anon 8192 [ 714.523458][T13771] total_inactive_file 45056 [ 714.527962][T13771] total_active_file 0 [ 714.531929][T13771] total_unevictable 0 [ 714.535884][T13771] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13767,uid=0 [ 714.551240][T13771] Memory cgroup out of memory: Killed process 13767 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 714.568677][T13782] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 714.580113][T13782] CPU: 1 PID: 13782 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 714.589305][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 714.599358][T13782] Call Trace: [ 714.602624][T13782] [ 714.605548][T13782] dump_stack_lvl+0xda/0x130 [ 714.610137][T13782] dump_stack+0x15/0x20 [ 714.614284][T13782] dump_header+0x95/0x3c0 [ 714.618610][T13782] oom_kill_process+0xe3/0x3e0 [ 714.623453][T13782] out_of_memory+0x9ca/0xc00 [ 714.628057][T13782] mem_cgroup_out_of_memory+0x139/0x190 [ 714.633731][T13782] try_charge_memcg+0x75c/0xd20 [ 714.638646][T13782] ? __alloc_pages+0x193/0x340 [ 714.643420][T13782] charge_memcg+0x51/0x200 [ 714.647851][T13782] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 714.653870][T13782] __read_swap_cache_async+0x2fe/0x560 [ 714.659406][T13782] swap_cluster_readahead+0x2a3/0x4f0 [ 714.664851][T13782] swapin_readahead+0x8d/0x700 [ 714.669665][T13782] ? __filemap_get_folio+0x47c/0x500 [ 714.674942][T13782] ? _raw_spin_unlock+0x26/0x40 [ 714.679809][T13782] ? swap_cache_get_folio+0x6e/0x210 [ 714.685089][T13782] do_swap_page+0x4d7/0x1550 [ 714.689685][T13782] ? pte_offset_map_nolock+0x11f/0x1c0 [ 714.695171][T13782] handle_mm_fault+0x9ec/0x2c10 [ 714.700078][T13782] ? mt_find+0x1d1/0x300 [ 714.704361][T13782] exc_page_fault+0x24d/0x650 [ 714.709081][T13782] asm_exc_page_fault+0x26/0x30 [ 714.713981][T13782] RIP: 0033:0x7fb036a9283c [ 714.718383][T13782] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 714.737983][T13782] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 714.744092][T13782] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 714.752092][T13782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.760084][T13782] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 714.768046][T13782] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000ae6a9 [ 714.776009][T13782] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 714.783978][T13782] [ 714.787128][T13782] memory: usage 307200kB, limit 307200kB, failcnt 67201 [ 714.794146][T13782] memory+swap: usage 307956kB, limit 9007199254740988kB, failcnt 0 [ 714.802112][T13782] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 714.809442][T13782] Memory cgroup stats for /syz1: [ 714.809615][T13782] cache 0 [ 714.817569][T13782] rss 4096 [ 714.820631][T13782] shmem 0 [ 714.823553][T13782] mapped_file 0 [ 714.827040][T13782] dirty 0 [ 714.829965][T13782] writeback 8192 [ 714.833549][T13782] workingset_refault_anon 19222 [ 714.838508][T13782] workingset_refault_file 5389 [ 714.843370][T13782] swap 774144 [ 714.846700][T13782] pgpgin 108648 [ 714.850154][T13782] pgpgout 108645 [ 714.853691][T13782] pgfault 84950 [ 714.857312][T13782] pgmajfault 8568 [ 714.860936][T13782] inactive_anon 0 [ 714.864634][T13782] active_anon 0 [ 714.868137][T13782] inactive_file 0 [ 714.871880][T13782] active_file 0 [ 714.875353][T13782] unevictable 0 [ 714.878890][T13782] hierarchical_memory_limit 314572800 [ 714.884251][T13782] hierarchical_memsw_limit 9223372036854771712 [ 714.890424][T13782] total_cache 0 [ 714.893873][T13782] total_rss 4096 [ 714.897434][T13782] total_shmem 0 [ 714.900884][T13782] total_mapped_file 0 [ 714.904853][T13782] total_dirty 0 [ 714.908383][T13782] total_writeback 8192 [ 714.912489][T13782] total_workingset_refault_anon 19222 [ 714.917920][T13782] total_workingset_refault_file 5389 [ 714.923193][T13782] total_swap 774144 [ 714.927197][T13782] total_pgpgin 108648 [ 714.931250][T13782] total_pgpgout 108645 [ 714.935447][T13782] total_pgfault 84950 [ 714.939442][T13782] total_pgmajfault 8568 [ 714.943584][T13782] total_inactive_anon 0 [ 714.947793][T13782] total_active_anon 0 [ 714.951763][T13782] total_inactive_file 0 [ 714.955971][T13782] total_active_file 0 [ 714.959986][T13782] total_unevictable 0 [ 714.963961][T13782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13782,uid=0 [ 714.979315][T13782] Memory cgroup out of memory: Killed process 13782 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:54 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x9, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:54 executing program 4: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000440)={0x8000200, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0xb}, &(0x7f0000000280)=""/154, 0x9a, &(0x7f0000000340)=""/158, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) 02:19:54 executing program 0: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000440)={0x8000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 02:19:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) 02:19:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x4c}}, 0x0) [ 715.061414][T13796] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 02:19:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x20000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:55 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, 0x0) 02:19:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xc0, 0x13, 0x1, 0x0, 0x0, {0x0, 0x7, 0x0, 0xf8, {0x4e20, 0x4e21, [0x1ff, 0x9, 0x95, 0x7], [0xee, 0x20, 0x3f, 0x288], 0x0, [0x8001, 0x7]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x72, 0x1, "bb4339afcd9612c8dd2a451a5a38f11abda5068f15bbbe2b9662ff84ea2348c81bc48b1fbddc609900d75320c615cd7e9e201054f1e5849049a5ccadff0856feb349607060cb8a882d30d9543015cadf4f8c4c6ba2135881f1cd56862c67948a5da8935fa638d581b3f98ab347fc"}]}, 0xc0}, 0x1, 0x0, 0x0, 0xd0}, 0x40010) 02:19:55 executing program 0: openat2$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x40c2}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20040, 0x0, 0x8}, 0x18) 02:19:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 02:19:55 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)='G', 0x7ffff000}], 0x1}}], 0x1, 0xc801) 02:19:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="020d000014000000cc8f39813a894f6b05000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000001d08001200000002"], 0xa0}}, 0x0) [ 715.276137][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 715.909353][T13799] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 715.920764][T13799] CPU: 0 PID: 13799 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 715.929517][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 715.939661][T13799] Call Trace: [ 715.942933][T13799] [ 715.945861][T13799] dump_stack_lvl+0xda/0x130 [ 715.950481][T13799] dump_stack+0x15/0x20 [ 715.954648][T13799] dump_header+0x95/0x3c0 [ 715.959101][T13799] oom_kill_process+0xe3/0x3e0 [ 715.963936][T13799] out_of_memory+0x9ca/0xc00 [ 715.968580][T13799] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 715.974710][T13799] mem_cgroup_out_of_memory+0x139/0x190 [ 715.980302][T13799] try_charge_memcg+0x75c/0xd20 [ 715.985177][T13799] ? __alloc_pages+0x193/0x340 [ 715.990006][T13799] charge_memcg+0x51/0x200 [ 715.994582][T13799] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 716.000580][T13799] __read_swap_cache_async+0x2fe/0x560 [ 716.006093][T13799] swap_cluster_readahead+0x2a3/0x4f0 [ 716.011502][T13799] swapin_readahead+0x8d/0x700 [ 716.016423][T13799] ? __filemap_get_folio+0x47c/0x500 [ 716.021771][T13799] ? swap_cache_get_folio+0x6e/0x210 [ 716.027114][T13799] do_swap_page+0x4d7/0x1550 [ 716.031702][T13799] ? pte_offset_map_nolock+0x11f/0x1c0 [ 716.037165][T13799] handle_mm_fault+0x9ec/0x2c10 [ 716.042012][T13799] ? mt_find+0x1d1/0x300 [ 716.046254][T13799] exc_page_fault+0x24d/0x650 [ 716.050968][T13799] asm_exc_page_fault+0x26/0x30 [ 716.055821][T13799] RIP: 0033:0x7f074fafe83c [ 716.060293][T13799] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 716.080013][T13799] RSP: 002b:00007ffc045c9da0 EFLAGS: 00010202 [ 716.086106][T13799] RAX: 0000000000000000 RBX: 00007f074fc72f80 RCX: 0000000000000000 [ 716.094084][T13799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.102041][T13799] RBP: 00007f074fc74980 R08: 0000000000000000 R09: 00007ffc045f20b0 [ 716.109999][T13799] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000aec9c [ 716.117993][T13799] R13: 00007ffc045c9e80 R14: 00007f074fc73120 R15: 0000000000000032 [ 716.126043][T13799] [ 716.129101][T13799] memory: usage 307200kB, limit 307200kB, failcnt 49019 [ 716.136118][T13799] memory+swap: usage 307624kB, limit 9007199254740988kB, failcnt 0 [ 716.144076][T13799] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 716.151482][T13799] Memory cgroup stats for /syz3: [ 716.152260][T13799] cache 12288 [ 716.160501][T13799] rss 8192 [ 716.163502][T13799] shmem 0 [ 716.166420][T13799] mapped_file 0 [ 716.169901][T13799] dirty 0 [ 716.172909][T13799] writeback 4096 [ 716.176632][T13799] workingset_refault_anon 14088 [ 716.181470][T13799] workingset_refault_file 23118 [ 716.186300][T13799] swap 434176 [ 716.189684][T13799] pgpgin 741090 [ 716.193192][T13799] pgpgout 741081 [ 716.196743][T13799] pgfault 82632 [ 716.200256][T13799] pgmajfault 5956 [ 716.203874][T13799] inactive_anon 0 [ 716.207529][T13799] active_anon 0 [ 716.211064][T13799] inactive_file 12288 [ 716.215051][T13799] active_file 0 [ 716.218513][T13799] unevictable 0 [ 716.221958][T13799] hierarchical_memory_limit 314572800 [ 716.227335][T13799] hierarchical_memsw_limit 9223372036854771712 [ 716.233472][T13799] total_cache 12288 [ 716.237345][T13799] total_rss 8192 [ 716.240891][T13799] total_shmem 0 [ 716.244326][T13799] total_mapped_file 0 [ 716.248417][T13799] total_dirty 0 [ 716.251864][T13799] total_writeback 4096 [ 716.255919][T13799] total_workingset_refault_anon 14088 [ 716.261295][T13799] total_workingset_refault_file 23118 [ 716.266690][T13799] total_swap 434176 [ 716.270482][T13799] total_pgpgin 741090 [ 716.274438][T13799] total_pgpgout 741081 [ 716.278509][T13799] total_pgfault 82632 [ 716.282482][T13799] total_pgmajfault 5956 [ 716.286668][T13799] total_inactive_anon 0 [ 716.290885][T13799] total_active_anon 0 [ 716.294839][T13799] total_inactive_file 12288 [ 716.299339][T13799] total_active_file 0 [ 716.303304][T13799] total_unevictable 0 [ 716.307290][T13799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13799,uid=0 [ 716.322673][T13799] Memory cgroup out of memory: Killed process 13799 (syz-executor.3) total-vm:46616kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 716.347547][T13813] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 716.358917][T13813] CPU: 0 PID: 13813 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 716.367591][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 716.377796][T13813] Call Trace: [ 716.381064][T13813] [ 716.384055][T13813] dump_stack_lvl+0xda/0x130 [ 716.388641][T13813] dump_stack+0x15/0x20 [ 716.392786][T13813] dump_header+0x95/0x3c0 [ 716.397139][T13813] oom_kill_process+0xe3/0x3e0 [ 716.401927][T13813] out_of_memory+0x9ca/0xc00 [ 716.406808][T13813] mem_cgroup_out_of_memory+0x139/0x190 [ 716.412348][T13813] try_charge_memcg+0x75c/0xd20 [ 716.417331][T13813] ? __alloc_pages+0x193/0x340 [ 716.422143][T13813] charge_memcg+0x51/0x200 [ 716.426552][T13813] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 716.432525][T13813] __read_swap_cache_async+0x2fe/0x560 [ 716.438007][T13813] swap_cluster_readahead+0x2a3/0x4f0 [ 716.443374][T13813] swapin_readahead+0x8d/0x700 [ 716.448132][T13813] ? __filemap_get_folio+0x47c/0x500 [ 716.453497][T13813] ? swap_cache_get_folio+0x6e/0x210 [ 716.458774][T13813] do_swap_page+0x4d7/0x1550 [ 716.463357][T13813] ? pte_offset_map_nolock+0x11f/0x1c0 [ 716.469002][T13813] handle_mm_fault+0x9ec/0x2c10 [ 716.473873][T13813] ? mt_find+0x1d1/0x300 [ 716.478268][T13813] exc_page_fault+0x24d/0x650 [ 716.482951][T13813] asm_exc_page_fault+0x26/0x30 [ 716.487891][T13813] RIP: 0033:0x7fb036a9283c [ 716.492297][T13813] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 716.511937][T13813] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 716.517991][T13813] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 716.526103][T13813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.534118][T13813] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 716.542077][T13813] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000aed62 [ 716.550177][T13813] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 716.558332][T13813] [ 716.561732][T13813] memory: usage 307200kB, limit 307200kB, failcnt 67341 [ 716.568794][T13813] memory+swap: usage 307924kB, limit 9007199254740988kB, failcnt 0 [ 716.576714][T13813] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 716.584012][T13813] Memory cgroup stats for /syz1: [ 716.587362][T13813] cache 0 [ 716.595231][T13813] rss 0 [ 716.598017][T13813] shmem 0 [ 716.601093][T13813] mapped_file 0 [ 716.604535][T13813] dirty 0 [ 716.607476][T13813] writeback 0 [ 716.610757][T13813] workingset_refault_anon 19263 [ 716.615649][T13813] workingset_refault_file 5389 [ 716.620422][T13813] swap 741376 [ 716.623695][T13813] pgpgin 108715 [ 716.627185][T13813] pgpgout 108715 [ 716.630714][T13813] pgfault 85072 [ 716.634159][T13813] pgmajfault 8591 [ 716.637799][T13813] inactive_anon 0 [ 716.641424][T13813] active_anon 0 [ 716.644875][T13813] inactive_file 0 [ 716.648518][T13813] active_file 0 [ 716.651998][T13813] unevictable 0 [ 716.655548][T13813] hierarchical_memory_limit 314572800 [ 716.660970][T13813] hierarchical_memsw_limit 9223372036854771712 [ 716.667130][T13813] total_cache 0 [ 716.670657][T13813] total_rss 0 [ 716.674054][T13813] total_shmem 0 [ 716.677520][T13813] total_mapped_file 0 [ 716.681494][T13813] total_dirty 0 [ 716.684953][T13813] total_writeback 0 [ 716.688830][T13813] total_workingset_refault_anon 19263 [ 716.694190][T13813] total_workingset_refault_file 5389 [ 716.699520][T13813] total_swap 741376 [ 716.703409][T13813] total_pgpgin 108715 [ 716.707501][T13813] total_pgpgout 108715 [ 716.711559][T13813] total_pgfault 85072 [ 716.715524][T13813] total_pgmajfault 8591 [ 716.719699][T13813] total_inactive_anon 0 [ 716.723837][T13813] total_active_anon 0 [ 716.727838][T13813] total_inactive_file 0 [ 716.732012][T13813] total_active_file 0 [ 716.735978][T13813] total_unevictable 0 [ 716.739969][T13813] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13813,uid=0 02:19:56 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000480)) 02:19:56 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)='G', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=')', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001940)=[{&(0x7f00000002c0)='\\', 0x1}], 0x1}}], 0x3, 0xc801) 02:19:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x5a, @private}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}], 0x20}}], 0x2, 0x0) 02:19:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xa, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x3a31a15e28b35513}, 0x14}}, 0x40) [ 716.755310][T13813] Memory cgroup out of memory: Killed process 13813 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:56 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @private}}}], 0x20}}], 0x1, 0x0) 02:19:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x40000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="020d000014000000cc8f39813a894f6b05000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000001d0800120000000200000000000000000006000000000000000000000000000000fe880000000000000000000000000001ac1e000100"], 0xa0}}, 0x0) 02:19:56 executing program 5: socketpair(0xa, 0x3, 0x7, &(0x7f0000000180)) 02:19:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 02:19:56 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x105280, 0x0) 02:19:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b70, &(0x7f0000000040)) 02:19:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000ac0), 0xffffffffffffffff) 02:19:57 executing program 0: syz_clone(0x0, &(0x7f000000a300)='z', 0x1, 0x0, 0x0, 0x0) [ 717.671774][T13827] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 717.683227][T13827] CPU: 0 PID: 13827 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 717.691903][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 717.702014][T13827] Call Trace: [ 717.705286][T13827] [ 717.708213][T13827] dump_stack_lvl+0xda/0x130 [ 717.712812][T13827] dump_stack+0x15/0x20 [ 717.716968][T13827] dump_header+0x95/0x3c0 [ 717.721306][T13827] oom_kill_process+0xe3/0x3e0 [ 717.726387][T13827] out_of_memory+0x9ca/0xc00 [ 717.731015][T13827] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 717.737229][T13827] mem_cgroup_out_of_memory+0x139/0x190 [ 717.742796][T13827] try_charge_memcg+0x75c/0xd20 [ 717.747664][T13827] ? __alloc_pages+0x193/0x340 [ 717.752451][T13827] charge_memcg+0x51/0x200 [ 717.756905][T13827] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 717.762967][T13827] __read_swap_cache_async+0x2fe/0x560 [ 717.768441][T13827] swap_cluster_readahead+0x2a3/0x4f0 [ 717.773912][T13827] swapin_readahead+0x8d/0x700 [ 717.778766][T13827] ? __filemap_get_folio+0x47c/0x500 [ 717.784046][T13827] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 717.789611][T13827] ? swap_cache_get_folio+0x6e/0x210 [ 717.794882][T13827] do_swap_page+0x4d7/0x1550 [ 717.799500][T13827] ? pte_offset_map_nolock+0x11f/0x1c0 [ 717.804999][T13827] handle_mm_fault+0x9ec/0x2c10 [ 717.809853][T13827] ? mt_find+0x1d1/0x300 [ 717.814208][T13827] exc_page_fault+0x24d/0x650 [ 717.818868][T13827] asm_exc_page_fault+0x26/0x30 [ 717.823777][T13827] RIP: 0033:0x7f074fafe83c [ 717.828177][T13827] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 717.847774][T13827] RSP: 002b:00007ffc045c9da0 EFLAGS: 00010206 [ 717.853829][T13827] RAX: 0000000000000000 RBX: 00007f074fc74090 RCX: 0000000000000000 [ 717.861998][T13827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.869972][T13827] RBP: 00007f074fc74980 R08: 0000000000000000 R09: 00007ffc045f20b0 [ 717.877995][T13827] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000af368 [ 717.885954][T13827] R13: 00007ffc045c9e80 R14: 00007f074fc73120 R15: 0000000000000032 [ 717.893913][T13827] [ 717.897010][T13827] memory: usage 307200kB, limit 307200kB, failcnt 50434 [ 717.903938][T13827] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 717.911898][T13827] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 717.919243][T13827] Memory cgroup stats for /syz3: [ 717.919415][T13827] cache 57344 [ 717.927664][T13827] rss 8192 [ 717.930677][T13827] shmem 0 [ 717.933597][T13827] mapped_file 0 [ 717.937133][T13827] dirty 0 [ 717.940088][T13827] writeback 0 [ 717.943602][T13827] workingset_refault_anon 14155 [ 717.948481][T13827] workingset_refault_file 23121 [ 717.953364][T13827] swap 380928 [ 717.956729][T13827] pgpgin 742433 [ 717.960171][T13827] pgpgout 742417 [ 717.963768][T13827] pgfault 82899 [ 717.967225][T13827] pgmajfault 5980 [ 717.970844][T13827] inactive_anon 8192 [ 717.974710][T13827] active_anon 0 [ 717.978174][T13827] inactive_file 57344 [ 717.982169][T13827] active_file 0 [ 717.985681][T13827] unevictable 0 [ 717.989250][T13827] hierarchical_memory_limit 314572800 [ 717.994610][T13827] hierarchical_memsw_limit 9223372036854771712 [ 718.000789][T13827] total_cache 57344 [ 718.004699][T13827] total_rss 8192 [ 718.008276][T13827] total_shmem 0 [ 718.011722][T13827] total_mapped_file 0 [ 718.015764][T13827] total_dirty 0 [ 718.019281][T13827] total_writeback 8192 [ 718.023446][T13827] total_workingset_refault_anon 14155 [ 718.028812][T13827] total_workingset_refault_file 23121 [ 718.034226][T13827] total_swap 380928 [ 718.038081][T13827] total_pgpgin 742433 [ 718.042061][T13827] total_pgpgout 742417 [ 718.046101][T13827] total_pgfault 82899 [ 718.050154][T13827] total_pgmajfault 5980 [ 718.054367][T13827] total_inactive_anon 0 [ 718.058521][T13827] total_active_anon 8192 [ 718.062746][T13827] total_inactive_file 57344 [ 718.067278][T13827] total_active_file 0 [ 718.071268][T13827] total_unevictable 0 [ 718.075224][T13827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13827,uid=0 [ 718.090499][T13827] Memory cgroup out of memory: Killed process 13827 (syz-executor.3) total-vm:46616kB, anon-rss:472kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 718.110880][T13842] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 718.122345][T13842] CPU: 0 PID: 13842 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 718.131027][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 718.141104][T13842] Call Trace: [ 718.144376][T13842] [ 718.147296][T13842] dump_stack_lvl+0xda/0x130 [ 718.151938][T13842] dump_stack+0x15/0x20 [ 718.156082][T13842] dump_header+0x95/0x3c0 [ 718.160425][T13842] oom_kill_process+0xe3/0x3e0 [ 718.165388][T13842] out_of_memory+0x9ca/0xc00 [ 718.169997][T13842] mem_cgroup_out_of_memory+0x139/0x190 [ 718.175601][T13842] try_charge_memcg+0x75c/0xd20 [ 718.180448][T13842] ? __alloc_pages+0x193/0x340 [ 718.185237][T13842] charge_memcg+0x51/0x200 [ 718.189660][T13842] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 718.195668][T13842] __read_swap_cache_async+0x2fe/0x560 [ 718.201203][T13842] swap_cluster_readahead+0x2a3/0x4f0 [ 718.206643][T13842] swapin_readahead+0x8d/0x700 [ 718.211469][T13842] ? __filemap_get_folio+0x47c/0x500 [ 718.216746][T13842] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 718.222299][T13842] ? swap_cache_get_folio+0x6e/0x210 [ 718.227618][T13842] do_swap_page+0x4d7/0x1550 [ 718.232201][T13842] ? pte_offset_map_nolock+0x11f/0x1c0 [ 718.237680][T13842] handle_mm_fault+0x9ec/0x2c10 [ 718.242523][T13842] ? mt_find+0x1d1/0x300 [ 718.246762][T13842] exc_page_fault+0x24d/0x650 [ 718.251435][T13842] asm_exc_page_fault+0x26/0x30 [ 718.256360][T13842] RIP: 0033:0x7fb036a9283c [ 718.260802][T13842] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 718.280666][T13842] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 718.286721][T13842] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 718.294936][T13842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 718.302894][T13842] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 718.310863][T13842] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000af448 [ 718.318903][T13842] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 718.326865][T13842] [ 718.329962][T13842] memory: usage 307200kB, limit 307200kB, failcnt 67599 [ 718.336917][T13842] memory+swap: usage 307924kB, limit 9007199254740988kB, failcnt 0 [ 718.344804][T13842] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 718.352129][T13842] Memory cgroup stats for /syz1: [ 718.353091][T13842] cache 0 [ 718.361091][T13842] rss 4096 [ 718.364106][T13842] shmem 0 [ 718.367086][T13842] mapped_file 0 [ 718.370607][T13842] dirty 0 [ 718.373613][T13842] writeback 0 [ 718.376911][T13842] workingset_refault_anon 19304 [ 718.381749][T13842] workingset_refault_file 5389 [ 718.386790][T13842] swap 741376 [ 718.390064][T13842] pgpgin 108782 [ 718.393525][T13842] pgpgout 108781 [ 718.397085][T13842] pgfault 85214 [ 718.400603][T13842] pgmajfault 8606 [ 718.404281][T13842] inactive_anon 0 [ 718.407926][T13842] active_anon 4096 [ 718.411634][T13842] inactive_file 0 [ 718.415287][T13842] active_file 0 [ 718.418769][T13842] unevictable 0 [ 718.422289][T13842] hierarchical_memory_limit 314572800 [ 718.427693][T13842] hierarchical_memsw_limit 9223372036854771712 [ 718.433881][T13842] total_cache 0 [ 718.437372][T13842] total_rss 4096 [ 718.440908][T13842] total_shmem 0 [ 718.444367][T13842] total_mapped_file 0 [ 718.448391][T13842] total_dirty 0 [ 718.451843][T13842] total_writeback 0 [ 718.455702][T13842] total_workingset_refault_anon 19304 [ 718.461100][T13842] total_workingset_refault_file 5389 [ 718.466371][T13842] total_swap 741376 [ 718.470227][T13842] total_pgpgin 108782 [ 718.474203][T13842] total_pgpgout 108781 [ 718.478317][T13842] total_pgfault 85214 [ 718.482323][T13842] total_pgmajfault 8606 [ 718.486460][T13842] total_inactive_anon 0 [ 718.490631][T13842] total_active_anon 4096 [ 718.494915][T13842] total_inactive_file 0 [ 718.499081][T13842] total_active_file 0 [ 718.503092][T13842] total_unevictable 0 [ 718.507078][T13842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13842,uid=0 02:19:58 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x9, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:19:58 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x6, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 718.522432][T13842] Memory cgroup out of memory: Killed process 13842 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:19:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x80000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:19:58 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x2, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:58 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x3, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:58 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x6, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xb, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:58 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x9, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:59 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x9, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:59 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x6, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:59 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x3, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:59 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x2, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:19:59 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x101000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xc, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:00 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x3, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:00 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0xf, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:00 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:00 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0xf, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:00 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x2, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:00 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0xf, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:01 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:01 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1c000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x1ff000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:01 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x8, 0x6, 0xa4ea7550a4d7a6b3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ptrace$setopts(0x64dfd3aefbf6cd57, r2, 0x20000000003, 0x80000) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r2}) sched_setscheduler(r2, 0x6, &(0x7f0000000080)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = socket$inet6(0xa, 0x401000000001, 0x0) close(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffdffa) sendfile(r6, r5, 0x0, 0x800000a1) 02:20:01 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1c000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:01 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x112a0000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:01 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1c000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:01 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x112a0000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x200000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) [ 722.571503][T15835] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 722.582878][T15835] CPU: 1 PID: 15835 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 722.591587][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 722.601707][T15835] Call Trace: [ 722.605000][T15835] [ 722.607922][T15835] dump_stack_lvl+0xda/0x130 [ 722.612526][T15835] dump_stack+0x15/0x20 [ 722.616739][T15835] dump_header+0x95/0x3c0 [ 722.621076][T15835] oom_kill_process+0xe3/0x3e0 [ 722.625849][T15835] out_of_memory+0x9ca/0xc00 [ 722.630468][T15835] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 722.636607][T15835] mem_cgroup_out_of_memory+0x139/0x190 [ 722.642204][T15835] try_charge_memcg+0x75c/0xd20 [ 722.647062][T15835] ? __alloc_pages+0x193/0x340 [ 722.651957][T15835] charge_memcg+0x51/0x200 [ 722.656522][T15835] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 722.662528][T15835] __read_swap_cache_async+0x2fe/0x560 [ 722.668018][T15835] swap_cluster_readahead+0x2a3/0x4f0 [ 722.673476][T15835] swapin_readahead+0x8d/0x700 [ 722.678311][T15835] ? __filemap_get_folio+0x47c/0x500 [ 722.683620][T15835] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 722.689186][T15835] ? swap_cache_get_folio+0x6e/0x210 [ 722.694508][T15835] do_swap_page+0x4d7/0x1550 [ 722.699106][T15835] ? pte_offset_map_nolock+0x11f/0x1c0 [ 722.704649][T15835] handle_mm_fault+0x9ec/0x2c10 [ 722.709511][T15835] ? mt_find+0x1d1/0x300 [ 722.713764][T15835] exc_page_fault+0x24d/0x650 [ 722.718506][T15835] asm_exc_page_fault+0x26/0x30 [ 722.723437][T15835] RIP: 0033:0x7f074fb00509 [ 722.727855][T15835] Code: 00 4c 89 f7 e8 58 05 ff ff 40 08 c5 0f 85 ff 01 00 00 41 83 c5 01 45 39 6f 04 0f 86 c4 00 00 00 48 8b 0c 24 44 89 ee 4c 89 f0 <4d> 8b 77 28 4c 03 34 f1 44 89 f3 81 e3 00 f0 ff ff 80 3d 97 eb 16 [ 722.747510][T15835] RSP: 002b:00007ffc045c9cf0 EFLAGS: 00010206 [ 722.753581][T15835] RAX: ffffffff8143f3ee RBX: 000000008143fcd8 RCX: 00007f074f0c7008 [ 722.761556][T15835] RDX: 0000001b2c22b004 RSI: 00000000000115f0 RDI: 000000008143fcd8 [ 722.769552][T15835] RBP: 0000000000000001 R08: 0000001b2c620000 R09: 000000008143fcdc [ 722.777545][T15835] R10: 00007ffc045f2080 R11: 000000000001ddcc R12: 00007f074fc67000 [ 722.785608][T15835] R13: 00000000000115f0 R14: ffffffff8143f3ee R15: 00007f074fc731b8 [ 722.793580][T15835] ? release_pages+0x76e/0x7f0 [ 722.798423][T15835] ? release_pages+0x76e/0x7f0 [ 722.803258][T15835] [ 722.806372][T15835] memory: usage 307200kB, limit 307200kB, failcnt 51589 [ 722.813436][T15835] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 722.821351][T15835] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 722.828654][T15835] Memory cgroup stats for /syz3: [ 722.830151][T15835] cache 57344 [ 722.838388][T15835] rss 8192 [ 722.841441][T15835] shmem 0 [ 722.844413][T15835] mapped_file 0 [ 722.847991][T15835] dirty 4096 [ 722.851182][T15835] writeback 8192 [ 722.854778][T15835] workingset_refault_anon 14351 [ 722.859646][T15835] workingset_refault_file 23521 [ 722.864535][T15835] swap 385024 [ 722.867971][T15835] pgpgin 746934 [ 722.871416][T15835] pgpgout 746918 [ 722.874949][T15835] pgfault 83506 [ 722.878428][T15835] pgmajfault 6090 [ 722.882251][T15835] inactive_anon 0 [ 722.885879][T15835] active_anon 0 [ 722.889404][T15835] inactive_file 57344 [ 722.893390][T15835] active_file 0 [ 722.896869][T15835] unevictable 0 [ 722.900320][T15835] hierarchical_memory_limit 314572800 [ 722.905751][T15835] hierarchical_memsw_limit 9223372036854771712 [ 722.911924][T15835] total_cache 57344 [ 722.915730][T15835] total_rss 8192 [ 722.919293][T15835] total_shmem 0 [ 722.922745][T15835] total_mapped_file 0 [ 722.926765][T15835] total_dirty 4096 [ 722.930578][T15835] total_writeback 8192 [ 722.934645][T15835] total_workingset_refault_anon 14351 [ 722.940073][T15835] total_workingset_refault_file 23521 [ 722.945478][T15835] total_swap 385024 [ 722.949318][T15835] total_pgpgin 746934 [ 722.953350][T15835] total_pgpgout 746918 [ 722.957433][T15835] total_pgfault 83506 [ 722.961455][T15835] total_pgmajfault 6090 [ 722.965605][T15835] total_inactive_anon 0 [ 722.969952][T15835] total_active_anon 0 [ 722.973978][T15835] total_inactive_file 57344 [ 722.978534][T15835] total_active_file 0 [ 722.982532][T15835] total_unevictable 0 [ 722.986491][T15835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15835,uid=0 [ 723.001861][T15835] Memory cgroup out of memory: Killed process 15835 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 723.024957][T16255] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 723.036464][T16255] CPU: 1 PID: 16255 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 723.045153][T16255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 723.055224][T16255] Call Trace: [ 723.058508][T16255] [ 723.061431][T16255] dump_stack_lvl+0xda/0x130 [ 723.066018][T16255] dump_stack+0x15/0x20 [ 723.070168][T16255] dump_header+0x95/0x3c0 [ 723.074557][T16255] oom_kill_process+0xe3/0x3e0 [ 723.079410][T16255] out_of_memory+0x9ca/0xc00 [ 723.084002][T16255] mem_cgroup_out_of_memory+0x139/0x190 [ 723.089595][T16255] try_charge_memcg+0x75c/0xd20 [ 723.094511][T16255] ? __alloc_pages+0x193/0x340 [ 723.099326][T16255] charge_memcg+0x51/0x200 [ 723.103744][T16255] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 723.109722][T16255] __read_swap_cache_async+0x2fe/0x560 [ 723.115177][T16255] swap_cluster_readahead+0x2a3/0x4f0 [ 723.120653][T16255] swapin_readahead+0x8d/0x700 [ 723.125435][T16255] ? __filemap_get_folio+0x47c/0x500 [ 723.130773][T16255] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 723.136338][T16255] ? swap_cache_get_folio+0x6e/0x210 [ 723.141618][T16255] do_swap_page+0x4d7/0x1550 [ 723.146222][T16255] ? pte_offset_map_nolock+0x11f/0x1c0 [ 723.151675][T16255] handle_mm_fault+0x9ec/0x2c10 [ 723.156636][T16255] ? mt_find+0x1d1/0x300 [ 723.160874][T16255] exc_page_fault+0x24d/0x650 [ 723.165554][T16255] asm_exc_page_fault+0x26/0x30 [ 723.170598][T16255] RIP: 0033:0x7fb036a9283c [ 723.175017][T16255] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 723.194798][T16255] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 723.200910][T16255] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 723.208951][T16255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 723.216939][T16255] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 723.224904][T16255] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b08c7 [ 723.232943][T16255] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 723.240977][T16255] [ 723.244049][T16255] memory: usage 307200kB, limit 307200kB, failcnt 67940 [ 723.251077][T16255] memory+swap: usage 307928kB, limit 9007199254740988kB, failcnt 0 [ 723.259011][T16255] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 723.266296][T16255] Memory cgroup stats for /syz1: [ 723.268432][T16255] cache 0 [ 723.276428][T16255] rss 4096 [ 723.279582][T16255] shmem 0 [ 723.282579][T16255] mapped_file 0 [ 723.286061][T16255] dirty 0 [ 723.289006][T16255] writeback 0 [ 723.292283][T16255] workingset_refault_anon 19479 [ 723.297133][T16255] workingset_refault_file 5389 [ 723.301888][T16255] swap 749568 [ 723.305272][T16255] pgpgin 109061 [ 723.308738][T16255] pgpgout 109059 [ 723.312305][T16255] pgfault 85743 [ 723.315754][T16255] pgmajfault 8712 [ 723.319393][T16255] inactive_anon 8192 [ 723.323335][T16255] active_anon 0 [ 723.326798][T16255] inactive_file 0 [ 723.330427][T16255] active_file 0 [ 723.333998][T16255] unevictable 0 [ 723.337475][T16255] hierarchical_memory_limit 314572800 [ 723.342839][T16255] hierarchical_memsw_limit 9223372036854771712 [ 723.349008][T16255] total_cache 0 [ 723.352453][T16255] total_rss 4096 [ 723.356054][T16255] total_shmem 0 [ 723.359538][T16255] total_mapped_file 0 [ 723.363518][T16255] total_dirty 0 [ 723.366994][T16255] total_writeback 0 [ 723.370874][T16255] total_workingset_refault_anon 19479 [ 723.376236][T16255] total_workingset_refault_file 5389 [ 723.381631][T16255] total_swap 749568 [ 723.385503][T16255] total_pgpgin 109061 [ 723.389488][T16255] total_pgpgout 109059 [ 723.393539][T16255] total_pgfault 85743 [ 723.397568][T16255] total_pgmajfault 8712 [ 723.401741][T16255] total_inactive_anon 8192 [ 723.406160][T16255] total_active_anon 0 [ 723.410244][T16255] total_inactive_file 0 [ 723.414387][T16255] total_active_file 0 [ 723.418377][T16255] total_unevictable 0 02:20:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:03 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x112a0000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000806b3a60000000000000000050000080500010007000000050001000400000000000000070000000900020073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ptrace$setopts(0x4200, r2, 0x0, 0x80000) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r2}) sched_setscheduler(r2, 0x6, &(0x7f0000000080)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6(0xa, 0x401000000001, 0x0) close(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffdffa) sendfile(r5, r4, 0x0, 0x800000a1) [ 723.422348][T16255] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16255,uid=0 [ 723.437683][T16255] Memory cgroup out of memory: Killed process 16255 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:20:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000806b3a6000000000000000005080500010007000003000000000700000005000100070000000900020073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ptrace$setopts(0x4200, r2, 0x0, 0x80000) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r2}) sched_setscheduler(r2, 0x6, &(0x7f0000000080)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6(0xa, 0x401000000001, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)=0x0) ptrace$ARCH_GET_CPUID(0x1e, r5, 0x0, 0x1011) close(r4) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffdffa) sendfile(r6, r4, 0x0, 0x800000a1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x4, r7}, {0x2, 0x6, 0xee01}], {0x4, 0x1}, [{0x8, 0x4, 0xee00}], {0x10, 0x6}}, 0x3c, 0x1) 02:20:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0xffffffffffffffed, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000041, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x8, 0x6, 0xa4ea7550a4d7a6b3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ptrace$setopts(0x4200, r2, 0x0, 0x80000) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x2, r2}) sched_setscheduler(r2, 0x6, &(0x7f0000000080)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6(0xa, 0x401000000001, 0x0) close(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffdffa) sendfile(r5, r4, 0x0, 0x800000a1) 02:20:03 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 02:20:03 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 02:20:03 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 02:20:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xf01f00, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) [ 724.501654][T16488] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 724.513020][T16488] CPU: 1 PID: 16488 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 724.521732][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 724.531771][T16488] Call Trace: [ 724.535058][T16488] [ 724.537982][T16488] dump_stack_lvl+0xda/0x130 [ 724.542562][T16488] dump_stack+0x15/0x20 [ 724.546697][T16488] dump_header+0x95/0x3c0 [ 724.551018][T16488] oom_kill_process+0xe3/0x3e0 [ 724.555766][T16488] out_of_memory+0x9ca/0xc00 [ 724.560356][T16488] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 724.566534][T16488] mem_cgroup_out_of_memory+0x139/0x190 [ 724.572084][T16488] try_charge_memcg+0x75c/0xd20 [ 724.576995][T16488] ? __alloc_pages+0x193/0x340 [ 724.581754][T16488] charge_memcg+0x51/0x200 [ 724.586197][T16488] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 724.592168][T16488] __read_swap_cache_async+0x2fe/0x560 [ 724.597676][T16488] swap_cluster_readahead+0x2a3/0x4f0 [ 724.603057][T16488] swapin_readahead+0x8d/0x700 [ 724.607824][T16488] ? __filemap_get_folio+0x47c/0x500 [ 724.613100][T16488] ? swap_cache_get_folio+0x6e/0x210 [ 724.618393][T16488] do_swap_page+0x4d7/0x1550 [ 724.622971][T16488] ? pte_offset_map_nolock+0x11f/0x1c0 [ 724.628440][T16488] handle_mm_fault+0x9ec/0x2c10 [ 724.633286][T16488] ? mt_find+0x1d1/0x300 [ 724.637554][T16488] exc_page_fault+0x24d/0x650 [ 724.642309][T16488] asm_exc_page_fault+0x26/0x30 [ 724.647284][T16488] RIP: 0033:0x7fb036a9283c [ 724.651895][T16488] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 724.671510][T16488] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 724.677652][T16488] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 724.685612][T16488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 724.693605][T16488] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 02:20:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xf, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:04 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 02:20:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x0, 0x80000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r2}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4000) sched_setscheduler(r2, 0x6, &(0x7f0000000100)=0x3) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ptrace$setopts(0x4200, r3, 0x0, 0x80000) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r3}) sched_setscheduler(r3, 0x6, &(0x7f0000000080)) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r4, 0x208200) r5 = socket$inet6(0xa, 0x401000000001, 0x0) close(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffdffa) sendfile(r6, r5, 0x0, 0x800000a1) 02:20:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000000c0)) openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x20, 0xe, 0xffff, 0x4, "ee51ac9d719cccfa580a5ba368acfd5d6b92060057eaf93bfe2e4ed36c027044"}) 02:20:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:04 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 02:20:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000000c0)) openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x20, 0xe, 0xffff, 0x4, "ee51ac9d719cccfa580a5ba368acfd5d6b92060057eaf93bfe2e4ed36c027044"}) [ 724.701628][T16488] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b0ed9 [ 724.709649][T16488] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 724.717614][T16488] [ 724.720745][T16488] memory: usage 307200kB, limit 307200kB, failcnt 68152 [ 724.727699][T16488] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 724.735632][T16488] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 02:20:04 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 02:20:04 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:04 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) [ 724.743039][T16488] Memory cgroup stats for /syz1: [ 724.801105][T16488] cache 0 [ 724.809082][T16488] rss 4096 [ 724.812100][T16488] shmem 0 [ 724.815056][T16488] mapped_file 0 [ 724.818663][T16488] dirty 0 [ 724.821603][T16488] writeback 4096 [ 724.825141][T16488] workingset_refault_anon 19513 [ 724.830028][T16488] workingset_refault_file 5389 [ 724.834868][T16488] swap 729088 [ 724.838650][T16488] pgpgin 109121 [ 724.842112][T16488] pgpgout 109119 [ 724.845680][T16488] pgfault 85866 [ 724.849245][T16488] pgmajfault 8729 [ 724.852903][T16488] inactive_anon 0 [ 724.856630][T16488] active_anon 0 [ 724.860081][T16488] inactive_file 0 [ 724.863759][T16488] active_file 0 [ 724.867308][T16488] unevictable 0 [ 724.870770][T16488] hierarchical_memory_limit 314572800 [ 724.876136][T16488] hierarchical_memsw_limit 9223372036854771712 [ 724.882335][T16488] total_cache 0 [ 724.885814][T16488] total_rss 4096 [ 724.889441][T16488] total_shmem 0 [ 724.892910][T16488] total_mapped_file 0 [ 724.897041][T16488] total_dirty 0 [ 724.900499][T16488] total_writeback 4096 [ 724.904560][T16488] total_workingset_refault_anon 19513 [ 724.909966][T16488] total_workingset_refault_file 5389 [ 724.915505][T16488] total_swap 729088 [ 724.919326][T16488] total_pgpgin 109121 [ 724.923351][T16488] total_pgpgout 109119 [ 724.927454][T16488] total_pgfault 85866 [ 724.931428][T16488] total_pgmajfault 8729 [ 724.935575][T16488] total_inactive_anon 0 [ 724.939764][T16488] total_active_anon 0 [ 724.943751][T16488] total_inactive_file 0 [ 724.947920][T16488] total_active_file 0 02:20:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000000c0)) openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x20, 0xe, 0xffff, 0x4, "ee51ac9d719cccfa580a5ba368acfd5d6b92060057eaf93bfe2e4ed36c027044"}) [ 724.951889][T16488] total_unevictable 0 [ 724.955886][T16488] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16488,uid=0 [ 724.971204][T16488] Memory cgroup out of memory: Killed process 16488 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:20:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x1000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) [ 725.602633][ T3094] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 725.613831][ T3094] CPU: 1 PID: 3094 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 725.622520][ T3094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.632574][ T3094] Call Trace: [ 725.635947][ T3094] [ 725.639048][ T3094] dump_stack_lvl+0xda/0x130 [ 725.643644][ T3094] dump_stack+0x15/0x20 [ 725.647797][ T3094] dump_header+0x95/0x3c0 [ 725.652216][ T3094] oom_kill_process+0xe3/0x3e0 [ 725.656995][ T3094] out_of_memory+0x9ca/0xc00 [ 725.661573][ T3094] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 725.667733][ T3094] mem_cgroup_out_of_memory+0x139/0x190 [ 725.673313][ T3094] try_charge_memcg+0x75c/0xd20 [ 725.678149][ T3094] ? __alloc_pages+0x193/0x340 [ 725.682895][ T3094] charge_memcg+0x51/0x200 [ 725.687299][ T3094] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 725.693354][ T3094] __read_swap_cache_async+0x2fe/0x560 [ 725.698798][ T3094] swap_cluster_readahead+0x2a3/0x4f0 [ 725.704158][ T3094] swapin_readahead+0x8d/0x700 [ 725.708916][ T3094] ? __filemap_get_folio+0x47c/0x500 [ 725.714268][ T3094] ? _raw_spin_unlock+0x26/0x40 [ 725.719119][ T3094] ? swap_cache_get_folio+0x6e/0x210 [ 725.724414][ T3094] do_swap_page+0x4d7/0x1550 [ 725.729121][ T3094] ? pte_offset_map_nolock+0x11f/0x1c0 [ 725.734563][ T3094] handle_mm_fault+0x9ec/0x2c10 [ 725.739410][ T3094] ? mt_find+0x1d1/0x300 [ 725.743636][ T3094] exc_page_fault+0x24d/0x650 [ 725.748354][ T3094] asm_exc_page_fault+0x26/0x30 [ 725.753220][ T3094] RIP: 0033:0x7f074fb7806f [ 725.757682][ T3094] Code: 44 f8 64 8b 04 25 18 00 00 00 85 c0 75 2d b8 e6 00 00 00 0f 05 89 c2 f7 da 3d 00 f0 ff ff b8 00 00 00 00 0f 47 c2 48 83 c4 28 b8 16 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 48 89 54 24 10 [ 725.777336][ T3094] RSP: 002b:00007ffc045c9f38 EFLAGS: 00010202 [ 725.783441][ T3094] RAX: 0000000000000000 RBX: 0000000000000948 RCX: 00007f074fb7805a [ 725.791392][ T3094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 725.799403][ T3094] RBP: 00007ffc045c9fdc R08: 0000000000000010 R09: 00007ffc045f20b0 [ 725.807470][ T3094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 725.815457][ T3094] R13: 00000000000b10a5 R14: 0000000000000011 R15: 00007ffc045ca040 [ 725.823462][ T3094] [ 725.826828][ T3094] memory: usage 307200kB, limit 307200kB, failcnt 52585 [ 725.833859][ T3094] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 725.841816][ T3094] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 725.849165][ T3094] Memory cgroup stats for /syz3: [ 725.849310][ T3094] cache 20480 [ 725.857769][ T3094] rss 0 [ 725.860615][ T3094] shmem 0 [ 725.863595][ T3094] mapped_file 0 [ 725.867082][ T3094] dirty 0 [ 725.870091][ T3094] writeback 0 [ 725.873426][ T3094] workingset_refault_anon 14515 [ 725.878376][ T3094] workingset_refault_file 23701 [ 725.883271][ T3094] swap 376832 [ 725.886665][ T3094] pgpgin 750004 [ 725.890104][ T3094] pgpgout 749995 [ 725.893624][ T3094] pgfault 83873 [ 725.897125][ T3094] pgmajfault 6143 [ 725.900807][ T3094] inactive_anon 16384 [ 725.904836][ T3094] active_anon 0 [ 725.908311][ T3094] inactive_file 20480 [ 725.912329][ T3094] active_file 0 [ 725.915772][ T3094] unevictable 0 [ 725.919231][ T3094] hierarchical_memory_limit 314572800 [ 725.924589][ T3094] hierarchical_memsw_limit 9223372036854771712 [ 725.930836][ T3094] total_cache 20480 [ 725.934654][ T3094] total_rss 0 [ 725.938009][ T3094] total_shmem 0 [ 725.941543][ T3094] total_mapped_file 0 [ 725.945540][ T3094] total_dirty 0 [ 725.949036][ T3094] total_writeback 0 [ 725.952865][ T3094] total_workingset_refault_anon 14515 [ 725.958245][ T3094] total_workingset_refault_file 23701 [ 725.963606][ T3094] total_swap 376832 [ 725.967498][ T3094] total_pgpgin 750004 [ 725.971519][ T3094] total_pgpgout 749995 [ 725.975575][ T3094] total_pgfault 83873 [ 725.979576][ T3094] total_pgmajfault 6143 [ 725.983810][ T3094] total_inactive_anon 16384 [ 725.988379][ T3094] total_active_anon 0 [ 725.992388][ T3094] total_inactive_file 20480 [ 725.996922][ T3094] total_active_file 0 [ 726.000893][ T3094] total_unevictable 0 [ 726.004948][ T3094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16495,uid=0 [ 726.020229][ T3094] Memory cgroup out of memory: Killed process 16495 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x12, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:06 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000b4bffc)=0x2, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x8, 0x6, 0xa4ea7550a4d7a6b3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ptrace$setopts(0x4200, r3, 0x0, 0x80000) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r3}) sched_setscheduler(r3, 0x6, &(0x7f0000000080)) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r4, 0x208200) r5 = socket$inet6(0xa, 0x401000000001, 0x0) close(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffdffa) sendfile(r6, r5, 0x0, 0x800000a1) 02:20:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) poll(&(0x7f0000000240)=[{r3, 0x1000}, {0xffffffffffffffff, 0x4}, {r4}, {r1, 0x104}, {r0, 0x1017}, {r5, 0x4000}, {r6, 0x90}, {r7, 0x40}, {r8, 0x211}], 0x9, 0x5) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) syz_open_dev$tty1(0xc, 0x4, 0x3) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x3, 0x39, [0xffffffffffffff7f, 0x817, 0x0, 0x40, 0x0, 0x5f1], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/57}, &(0x7f0000000180)=0x78) r9 = socket$kcm(0x29, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000002c0)={0x0, @adiantum, 0x0, @desc2}) 02:20:06 executing program 2: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:06 executing program 2: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:06 executing program 4: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:06 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xf, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:06 executing program 2: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:06 executing program 4: r0 = syz_open_dev$MSR(0x0, 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x2000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x14, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:07 executing program 4: r0 = syz_open_dev$MSR(0x0, 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x8, 0x6, 0xa4ea7550a4d7a6b3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ptrace$setopts(0x4200, r2, 0x0, 0x80000) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r2}) sched_setscheduler(r2, 0x6, &(0x7f0000000080)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6(0xa, 0x401000000001, 0x0) close(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffdffa) sendfile(r5, r4, 0x0, 0x800000a1) 02:20:07 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xf, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:07 executing program 4: r0 = syz_open_dev$MSR(0x0, 0xb86, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:07 executing program 4: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:07 executing program 4: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 02:20:07 executing program 4: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 02:20:07 executing program 4: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 02:20:07 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2d00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x3000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x15, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2d00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2a09, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xf, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:08 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2a09, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2d00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2a09, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x298a, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:08 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (fail_nth: 1) [ 728.862986][T17745] FAULT_INJECTION: forcing a failure. [ 728.862986][T17745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.876129][T17745] CPU: 1 PID: 17745 Comm: syz-executor.5 Not tainted 6.5.0-rc1-syzkaller #0 [ 728.884814][T17745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 728.894864][T17745] Call Trace: [ 728.898137][T17745] [ 728.901093][T17745] dump_stack_lvl+0xda/0x130 [ 728.905678][T17745] dump_stack+0x15/0x20 [ 728.909828][T17745] should_fail_ex+0x21f/0x230 [ 728.914501][T17745] should_fail+0xb/0x10 [ 728.918647][T17745] should_fail_usercopy+0x1a/0x20 [ 728.923780][T17745] _copy_to_user+0x1e/0x90 [ 728.928186][T17745] simple_read_from_buffer+0xa0/0x110 [ 728.933637][T17745] proc_fail_nth_read+0xfc/0x140 [ 728.938595][T17745] ? proc_fault_inject_write+0x210/0x210 [ 728.944237][T17745] vfs_read+0x19f/0x5c0 [ 728.948411][T17745] ? __fget_files+0x1c4/0x200 [ 728.953108][T17745] ? mutex_lock+0xd/0x30 [ 728.957434][T17745] ksys_read+0xeb/0x1a0 [ 728.961677][T17745] __x64_sys_read+0x42/0x50 [ 728.966202][T17745] do_syscall_64+0x41/0xc0 [ 728.970630][T17745] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 728.976577][T17745] RIP: 0033:0x7fb15347009c [ 728.981019][T17745] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 729.000656][T17745] RSP: 002b:00007fb152831160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 02:20:09 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x298a, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 729.009062][T17745] RAX: ffffffffffffffda RBX: 00007fb1535ddf80 RCX: 00007fb15347009c [ 729.017096][T17745] RDX: 000000000000000f RSI: 00007fb1528311e0 RDI: 0000000000000004 [ 729.025123][T17745] RBP: 00007fb1528311d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.033085][T17745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.041096][T17745] R13: 00007ffde04d20ff R14: 00007fb152831300 R15: 0000000000022000 [ 729.049062][T17745] 02:20:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x4000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x1b, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:09 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) sendfile(r1, r0, 0x0, 0x8000000000004) (fail_nth: 1) 02:20:09 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (fail_nth: 1) 02:20:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:09 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x2, 0x0) [ 729.333381][T17927] FAULT_INJECTION: forcing a failure. [ 729.333381][T17927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.346543][T17927] CPU: 0 PID: 17927 Comm: syz-executor.4 Not tainted 6.5.0-rc1-syzkaller #0 [ 729.355229][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 729.365352][T17927] Call Trace: [ 729.368640][T17927] [ 729.371573][T17927] dump_stack_lvl+0xda/0x130 [ 729.376258][T17927] dump_stack+0x15/0x20 02:20:09 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x4b47, 0x0) [ 729.380453][T17927] should_fail_ex+0x21f/0x230 [ 729.385137][T17927] should_fail+0xb/0x10 [ 729.389610][T17927] should_fail_usercopy+0x1a/0x20 [ 729.394735][T17927] _copy_from_user+0x1e/0xd0 [ 729.399375][T17927] do_arpt_set_ctl+0x197/0x1390 [ 729.404244][T17927] ? _parse_integer+0x27/0x30 [ 729.408945][T17927] ? kstrtoull+0x110/0x140 [ 729.413459][T17927] ? _raw_spin_unlock_bh+0x36/0x40 [ 729.418651][T17927] ? lock_sock_nested+0x10e/0x130 [ 729.423694][T17927] ? tcp_release_cb+0xfe/0x340 [ 729.428477][T17927] nf_setsockopt+0x18d/0x1b0 [ 729.433109][T17927] ip_setsockopt+0xe6/0x100 [ 729.437642][T17927] tcp_setsockopt+0x90/0xa0 [ 729.442189][T17927] sock_common_setsockopt+0x61/0x70 [ 729.447408][T17927] ? sock_common_recvmsg+0xe0/0xe0 [ 729.452540][T17927] __sys_setsockopt+0x1c9/0x230 [ 729.457415][T17927] __x64_sys_setsockopt+0x66/0x80 [ 729.462591][T17927] do_syscall_64+0x41/0xc0 [ 729.467091][T17927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 729.473075][T17927] RIP: 0033:0x7f62c0075389 [ 729.477604][T17927] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.497321][T17927] RSP: 002b:00007f62bf3e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 729.505729][T17927] RAX: ffffffffffffffda RBX: 00007f62c0194f80 RCX: 00007f62c0075389 [ 729.513786][T17927] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 729.521746][T17927] RBP: 00007f62bf3e81d0 R08: 0000000000000438 R09: 0000000000000000 02:20:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (fail_nth: 2) 02:20:09 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x4b49, 0x0) 02:20:09 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) sendfile(r1, r0, 0x0, 0x8000000000004) [ 729.529708][T17927] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.537676][T17927] R13: 00007ffc5179495f R14: 00007f62bf3e8300 R15: 0000000000022000 [ 729.545716][T17927] 02:20:09 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x541b, 0x0) [ 729.612283][T18042] FAULT_INJECTION: forcing a failure. [ 729.612283][T18042] name failslab, interval 1, probability 0, space 0, times 0 [ 729.625238][T18042] CPU: 0 PID: 18042 Comm: syz-executor.4 Not tainted 6.5.0-rc1-syzkaller #0 [ 729.633923][T18042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 729.644075][T18042] Call Trace: [ 729.647363][T18042] [ 729.650392][T18042] dump_stack_lvl+0xda/0x130 [ 729.655073][T18042] dump_stack+0x15/0x20 [ 729.659239][T18042] should_fail_ex+0x21f/0x230 [ 729.663937][T18042] ? __get_vm_area_node+0x10e/0x230 [ 729.669223][T18042] __should_failslab+0x92/0xa0 [ 729.674093][T18042] should_failslab+0x9/0x20 [ 729.678630][T18042] slab_pre_alloc_hook+0x38/0x180 [ 729.683718][T18042] ? __get_vm_area_node+0x10e/0x230 [ 729.688947][T18042] __kmem_cache_alloc_node+0x48/0x1d0 [ 729.694351][T18042] ? __get_vm_area_node+0x10e/0x230 [ 729.699626][T18042] kmalloc_node_trace+0x27/0xa0 [ 729.704577][T18042] __get_vm_area_node+0x10e/0x230 [ 729.709634][T18042] __vmalloc_node_range+0x2fb/0xea0 [ 729.714837][T18042] ? xt_alloc_table_info+0x3d/0x80 [ 729.720049][T18042] ? __list_del_entry_valid+0x5f/0xe0 [ 729.725446][T18042] ? __rcu_read_unlock+0x4d/0x70 [ 729.730391][T18042] ? __kmalloc_large_node+0x80/0x120 [ 729.735702][T18042] ? kvmalloc_node+0x72/0x160 [ 729.740398][T18042] kvmalloc_node+0x121/0x160 [ 729.745326][T18042] ? xt_alloc_table_info+0x3d/0x80 [ 729.750459][T18042] xt_alloc_table_info+0x3d/0x80 [ 729.755515][T18042] do_arpt_set_ctl+0x615/0x1390 [ 729.760378][T18042] ? _parse_integer+0x27/0x30 [ 729.765067][T18042] ? kstrtoull+0x110/0x140 [ 729.769520][T18042] ? _raw_spin_unlock_bh+0x36/0x40 [ 729.774668][T18042] ? lock_sock_nested+0x10e/0x130 [ 729.779758][T18042] ? tcp_release_cb+0xfe/0x340 [ 729.784593][T18042] nf_setsockopt+0x18d/0x1b0 [ 729.789240][T18042] ip_setsockopt+0xe6/0x100 [ 729.793982][T18042] tcp_setsockopt+0x90/0xa0 [ 729.798767][T18042] sock_common_setsockopt+0x61/0x70 [ 729.803997][T18042] ? sock_common_recvmsg+0xe0/0xe0 [ 729.809232][T18042] __sys_setsockopt+0x1c9/0x230 [ 729.814104][T18042] __x64_sys_setsockopt+0x66/0x80 [ 729.819154][T18042] do_syscall_64+0x41/0xc0 [ 729.823599][T18042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 729.829527][T18042] RIP: 0033:0x7f62c0075389 [ 729.833944][T18042] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.853895][T18042] RSP: 002b:00007f62bf3e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 729.862517][T18042] RAX: ffffffffffffffda RBX: 00007f62c0194f80 RCX: 00007f62c0075389 [ 729.870510][T18042] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 729.878537][T18042] RBP: 00007f62bf3e81d0 R08: 0000000000000438 R09: 0000000000000000 [ 729.886526][T18042] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.894523][T18042] R13: 00007ffc5179495f R14: 00007f62bf3e8300 R15: 0000000000022000 [ 729.902505][T18042] [ 729.905671][T18042] syz-executor.4: vmalloc error: size 536870911, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 729.921386][T18042] CPU: 0 PID: 18042 Comm: syz-executor.4 Not tainted 6.5.0-rc1-syzkaller #0 [ 729.930118][T18042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 729.940288][T18042] Call Trace: [ 729.943573][T18042] [ 729.946572][T18042] dump_stack_lvl+0xda/0x130 [ 729.951212][T18042] dump_stack+0x15/0x20 [ 729.955556][T18042] warn_alloc+0x140/0x1b0 [ 729.959980][T18042] ? kmalloc_node_trace+0x27/0xa0 [ 729.965074][T18042] __vmalloc_node_range+0x31f/0xea0 [ 729.970287][T18042] ? __list_del_entry_valid+0x5f/0xe0 [ 729.975750][T18042] ? __rcu_read_unlock+0x4d/0x70 [ 729.980704][T18042] ? __kmalloc_large_node+0x80/0x120 [ 729.986029][T18042] ? kvmalloc_node+0x72/0x160 [ 729.990819][T18042] kvmalloc_node+0x121/0x160 [ 729.995433][T18042] ? xt_alloc_table_info+0x3d/0x80 [ 730.000583][T18042] xt_alloc_table_info+0x3d/0x80 [ 730.005600][T18042] do_arpt_set_ctl+0x615/0x1390 [ 730.010528][T18042] ? _parse_integer+0x27/0x30 [ 730.015220][T18042] ? kstrtoull+0x110/0x140 [ 730.019718][T18042] ? _raw_spin_unlock_bh+0x36/0x40 [ 730.024917][T18042] ? lock_sock_nested+0x10e/0x130 [ 730.029977][T18042] ? tcp_release_cb+0xfe/0x340 [ 730.034822][T18042] nf_setsockopt+0x18d/0x1b0 [ 730.039509][T18042] ip_setsockopt+0xe6/0x100 [ 730.044025][T18042] tcp_setsockopt+0x90/0xa0 [ 730.048567][T18042] sock_common_setsockopt+0x61/0x70 [ 730.053921][T18042] ? sock_common_recvmsg+0xe0/0xe0 [ 730.059056][T18042] __sys_setsockopt+0x1c9/0x230 [ 730.064008][T18042] __x64_sys_setsockopt+0x66/0x80 [ 730.069060][T18042] do_syscall_64+0x41/0xc0 [ 730.073569][T18042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 730.079597][T18042] RIP: 0033:0x7f62c0075389 [ 730.084013][T18042] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 730.103631][T18042] RSP: 002b:00007f62bf3e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.112109][T18042] RAX: ffffffffffffffda RBX: 00007f62c0194f80 RCX: 00007f62c0075389 [ 730.120176][T18042] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 730.128221][T18042] RBP: 00007f62bf3e81d0 R08: 0000000000000438 R09: 0000000000000000 [ 730.136182][T18042] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.144207][T18042] R13: 00007ffc5179495f R14: 00007f62bf3e8300 R15: 0000000000022000 [ 730.152257][T18042] [ 730.155320][T18042] Mem-Info: [ 730.158539][T18042] active_anon:340 inactive_anon:110913 isolated_anon:0 [ 730.158539][T18042] active_file:11238 inactive_file:9485 isolated_file:0 [ 730.158539][T18042] unevictable:0 dirty:29 writeback:0 [ 730.158539][T18042] slab_reclaimable:6049 slab_unreclaimable:16883 [ 730.158539][T18042] mapped:19905 shmem:1119 pagetables:2699 [ 730.158539][T18042] sec_pagetables:0 bounce:0 [ 730.158539][T18042] kernel_misc_reclaimable:0 [ 730.158539][T18042] free:1778785 free_pcp:2182 free_cma:0 [ 730.203784][T18042] Node 0 active_anon:1360kB inactive_anon:443652kB active_file:44952kB inactive_file:38056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:79620kB dirty:116kB writeback:0kB shmem:4476kB writeback_tmp:0kB kernel_stack:5232kB pagetables:10796kB sec_pagetables:0kB all_unreclaimable? no [ 730.232026][T18042] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.258965][T18042] lowmem_reserve[]: 0 2894 7872 7872 02:20:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x5000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:10 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0x200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) sendfile(r0, r0, 0x0, 0x67) 02:20:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x1c, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:10 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x5421, 0x0) [ 730.264376][T18042] Node 0 DMA32 free:2963416kB boost:0kB min:4168kB low:7128kB high:10088kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2966996kB mlocked:0kB bounce:0kB free_pcp:3580kB local_pcp:92kB free_cma:0kB [ 730.292877][T18042] lowmem_reserve[]: 0 0 4978 4978 [ 730.298024][T18042] Node 0 Normal free:4235624kB boost:0kB min:7172kB low:12268kB high:17364kB reserved_highatomic:0KB active_anon:1360kB inactive_anon:443536kB active_file:44952kB inactive_file:35620kB unevictable:0kB writepending:116kB present:5242880kB managed:5098224kB mlocked:0kB bounce:0kB free_pcp:5344kB local_pcp:4572kB free_cma:0kB [ 730.328862][T18042] lowmem_reserve[]: 0 0 0 0 [ 730.333457][T18042] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 730.346390][T18042] Node 0 DMA32: 2*4kB (M) 0*8kB 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 1*2048kB (M) 722*4096kB (M) = 2963416kB [ 730.362271][T18042] Node 0 Normal: 4422*4kB (UME) 3121*8kB (UM) 1974*16kB (UME) 1383*32kB (UME) 971*64kB (UME) 697*128kB (UM) 542*256kB (UME) 460*512kB (UME) 450*1024kB (UME) 110*2048kB (UME) 694*4096kB (UM) = 4172832kB [ 730.382347][T18042] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 730.391711][T18042] 21270 total pagecache pages [ 730.396407][T18042] 11 pages in swap cache [ 730.400703][T18042] Free swap = 106944kB [ 730.404890][T18042] Total swap = 124996kB [ 730.409074][T18042] 2097051 pages RAM 02:20:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 730.412878][T18042] 0 pages HighMem/MovableOnly [ 730.417621][T18042] 76906 pages reserved 02:20:10 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x5450, 0x0) 02:20:10 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x5451, 0x0) 02:20:10 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x5452, 0x0) 02:20:10 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x5460, 0x0) 02:20:10 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0x200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) sendfile(r0, r0, 0x0, 0x67) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0x200) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b00f7) (async) sendfile(r0, r0, 0x0, 0x67) (async) 02:20:10 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x40049409, 0x0) 02:20:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x6000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:11 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x40086602, 0x0) 02:20:11 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0x200) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b00f7) (async) sendfile(r0, r0, 0x0, 0x67) 02:20:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x1e, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 731.377131][ T26] audit: type=1400 audit(1688955611.295:367): avc: denied { setattr } for pid=18579 comm="syz-executor.5" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 02:20:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:11 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x40087602, 0x0) 02:20:11 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x401c5820, 0x0) 02:20:11 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x4020940d, 0x0) 02:20:11 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x2, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000400)={r5, 0x9}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8906, r8, 0x1, 0x0, 0x6, @dev}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r10, &(0x7f00000002c0)=ANY=[], 0xc1) ftruncate(r10, 0x401) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r10, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x97, &(0x7f0000000240)=""/151, 0x40f00, 0x10, '\x00', r8, 0x0, r2, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xb, 0xfffffff7, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r9, r1, r0, r10, r2, r11]}, 0x80) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f00000003c0)) sendfile(r1, r2, 0x0, 0xf03b00f7) sendfile(r1, r0, 0x0, 0x8000000000004) 02:20:11 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x80086601, 0x0) [ 731.574604][ T26] audit: type=1400 audit(1688955611.495:368): avc: denied { create } for pid=18697 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 02:20:11 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x80087601, 0x0) [ 731.645206][ T26] audit: type=1400 audit(1688955611.525:369): avc: denied { ioctl } for pid=18697 comm="syz-executor.0" path="socket:[73381]" dev="sockfs" ino=73381 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 02:20:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x7000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:12 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x801c581f, 0x0) 02:20:12 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) (async) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r3, 0x29, 0x2, &(0x7f0000000480), &(0x7f00000004c0)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000400)={r5, 0x9}) (async) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8906, r8, 0x1, 0x0, 0x6, @dev}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r10, &(0x7f00000002c0)=ANY=[], 0xc1) (async) ftruncate(r10, 0x401) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r10, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x97, &(0x7f0000000240)=""/151, 0x40f00, 0x10, '\x00', r8, 0x0, r2, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xb, 0xfffffff7, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r9, r1, r0, r10, r2, r11]}, 0x80) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f00000003c0)) (async) sendfile(r1, r2, 0x0, 0xf03b00f7) sendfile(r1, r0, 0x0, 0x8000000000004) 02:20:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x22, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:12 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xc0045878, 0x0) 02:20:12 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r3, 0x29, 0x2, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000400)={r5, 0x9}) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8906, r8, 0x1, 0x0, 0x6, @dev}, 0x14) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r10, &(0x7f00000002c0)=ANY=[], 0xc1) (async) ftruncate(r10, 0x401) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r10, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x97, &(0x7f0000000240)=""/151, 0x40f00, 0x10, '\x00', r8, 0x0, r2, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xb, 0xfffffff7, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r9, r1, r0, r10, r2, r11]}, 0x80) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f00000003c0)) (async) sendfile(r1, r2, 0x0, 0xf03b00f7) sendfile(r1, r0, 0x0, 0x8000000000004) 02:20:12 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xc0045878, 0x0) 02:20:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x3, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:12 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xc0189436, 0x0) 02:20:12 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="48000000000101010000000000000000020000012c000d8014000400fe8000000000000000000000000000aa140004005f80000000000000000000000000003606001240000000001795e514618faae3209a7cca489eaceaa049a76e8bc94ac421bf5ed446195bdbff32ddafc088888aca9780e1a6f1b11b4335a0bb824efa03b32dc593f53dec1e520c11a2b1d9e30985bb1c4b335b96a6552a01135ae78d86d8080d04f1c4119853d0855090c5"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x400c010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r0, 0x0, 0x8000000000004) recvmmsg(r3, &(0x7f0000003340)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/226, 0xe2}], 0x1, &(0x7f0000000400)=""/156, 0x9c}, 0x9}, {{&(0x7f00000004c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/236, 0xec}], 0x4, &(0x7f0000000840)=""/90, 0x5a}, 0x10001}, {{&(0x7f00000008c0)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/69, 0x45}, {&(0x7f00000009c0)=""/3, 0x3}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/149, 0x95}, {&(0x7f0000000c40)=""/254, 0xfe}], 0x6}, 0x9}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/82, 0x52}, {&(0x7f0000000ec0)=""/2, 0x2}, {&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)}], 0x4}, 0x81}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000fc0)=""/40, 0x28}, {&(0x7f0000001000)=""/170, 0xaa}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/229, 0xe5}, {&(0x7f00000021c0)=""/103, 0x67}, {&(0x7f0000002240)=""/62, 0x3e}, {&(0x7f0000002280)=""/38, 0x26}], 0x7, &(0x7f0000002340)=""/4096, 0x1000}}], 0x5, 0x141, &(0x7f0000003480)) [ 733.224629][T18915] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 733.236020][T18915] CPU: 1 PID: 18915 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 733.244702][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 733.254851][T18915] Call Trace: [ 733.258216][T18915] [ 733.261191][T18915] dump_stack_lvl+0xda/0x130 [ 733.265791][T18915] dump_stack+0x15/0x20 [ 733.270088][T18915] dump_header+0x95/0x3c0 [ 733.274427][T18915] oom_kill_process+0xe3/0x3e0 [ 733.279321][T18915] out_of_memory+0x9ca/0xc00 [ 733.283976][T18915] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 733.290161][T18915] mem_cgroup_out_of_memory+0x139/0x190 [ 733.295865][T18915] try_charge_memcg+0x75c/0xd20 [ 733.300829][T18915] ? __alloc_pages+0x193/0x340 [ 733.305620][T18915] charge_memcg+0x51/0x200 [ 733.310178][T18915] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 733.316253][T18915] __read_swap_cache_async+0x2fe/0x560 [ 733.321765][T18915] swap_cluster_readahead+0x2a3/0x4f0 [ 733.327146][T18915] swapin_readahead+0x8d/0x700 [ 733.332001][T18915] ? __filemap_get_folio+0x47c/0x500 [ 733.337274][T18915] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 733.342833][T18915] ? swap_cache_get_folio+0x6e/0x210 [ 733.348189][T18915] do_swap_page+0x4d7/0x1550 [ 733.352768][T18915] ? pte_offset_map_nolock+0x11f/0x1c0 [ 733.358240][T18915] handle_mm_fault+0x9ec/0x2c10 [ 733.363082][T18915] ? mt_find+0x1d1/0x300 [ 733.367343][T18915] exc_page_fault+0x24d/0x650 [ 733.372020][T18915] asm_exc_page_fault+0x26/0x30 [ 733.376873][T18915] RIP: 0033:0x7fb036a9283c [ 733.381317][T18915] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 733.401004][T18915] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 733.407151][T18915] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 733.415178][T18915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.423144][T18915] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 733.431103][T18915] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b3068 [ 733.439058][T18915] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 733.447019][T18915] [ 733.450172][T18915] memory: usage 307200kB, limit 307200kB, failcnt 68835 [ 733.457365][T18915] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 733.465349][T18915] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 733.472677][T18915] Memory cgroup stats for /syz1: [ 733.473324][T18915] cache 0 [ 733.481339][T18915] rss 4096 [ 733.484440][T18915] shmem 0 [ 733.487407][T18915] mapped_file 0 [ 733.490877][T18915] dirty 0 [ 733.493830][T18915] writeback 0 [ 733.497129][T18915] workingset_refault_anon 19781 [ 733.502081][T18915] workingset_refault_file 5392 [ 733.506871][T18915] swap 733184 [ 733.510166][T18915] pgpgin 109575 [ 733.513618][T18915] pgpgout 109574 [ 733.517219][T18915] pgfault 86756 [ 733.520740][T18915] pgmajfault 8863 [ 733.524444][T18915] inactive_anon 0 [ 733.528162][T18915] active_anon 4096 [ 733.531956][T18915] inactive_file 0 [ 733.535580][T18915] active_file 0 [ 733.539099][T18915] unevictable 0 [ 733.542551][T18915] hierarchical_memory_limit 314572800 [ 733.547973][T18915] hierarchical_memsw_limit 9223372036854771712 [ 733.554124][T18915] total_cache 0 [ 733.557684][T18915] total_rss 4096 [ 733.561231][T18915] total_shmem 0 [ 733.564684][T18915] total_mapped_file 0 [ 733.568742][T18915] total_dirty 0 [ 733.572190][T18915] total_writeback 0 [ 733.576050][T18915] total_workingset_refault_anon 19781 [ 733.581541][T18915] total_workingset_refault_file 5392 [ 733.586867][T18915] total_swap 733184 [ 733.590760][T18915] total_pgpgin 109575 [ 733.594738][T18915] total_pgpgout 109574 [ 733.598872][T18915] total_pgfault 86756 [ 733.602849][T18915] total_pgmajfault 8863 [ 733.607072][T18915] total_inactive_anon 0 [ 733.611231][T18915] total_active_anon 4096 [ 733.615572][T18915] total_inactive_file 0 [ 733.619799][T18915] total_active_file 0 [ 733.623782][T18915] total_unevictable 0 [ 733.627838][T18915] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18915,uid=0 [ 733.643277][T18915] Memory cgroup out of memory: Killed process 18915 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 733.700717][ T3094] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 733.711876][ T3094] CPU: 0 PID: 3094 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 733.720509][ T3094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 733.730562][ T3094] Call Trace: [ 733.733841][ T3094] [ 733.736822][ T3094] dump_stack_lvl+0xda/0x130 [ 733.741421][ T3094] dump_stack+0x15/0x20 [ 733.745617][ T3094] dump_header+0x95/0x3c0 [ 733.750014][ T3094] oom_kill_process+0xe3/0x3e0 [ 733.754837][ T3094] out_of_memory+0x9ca/0xc00 [ 733.759531][ T3094] mem_cgroup_out_of_memory+0x139/0x190 [ 733.765133][ T3094] try_charge_memcg+0x75c/0xd20 [ 733.770049][ T3094] ? __alloc_pages+0x193/0x340 [ 733.774882][ T3094] charge_memcg+0x51/0x200 [ 733.779291][ T3094] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 733.785331][ T3094] __read_swap_cache_async+0x2fe/0x560 [ 733.790818][ T3094] swap_cluster_readahead+0x2a3/0x4f0 [ 733.796228][ T3094] swapin_readahead+0x8d/0x700 [ 733.800985][ T3094] ? __filemap_get_folio+0x47c/0x500 [ 733.806444][ T3094] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 733.812038][ T3094] ? swap_cache_get_folio+0x6e/0x210 [ 733.817391][ T3094] do_swap_page+0x4d7/0x1550 [ 733.822036][ T3094] ? pte_offset_map_nolock+0x11f/0x1c0 [ 733.827511][ T3094] handle_mm_fault+0x9ec/0x2c10 [ 733.832358][ T3094] ? mt_find+0x1d1/0x300 [ 733.836730][ T3094] exc_page_fault+0x24d/0x650 [ 733.841401][ T3094] asm_exc_page_fault+0x26/0x30 [ 733.846335][ T3094] RIP: 0033:0x7ffc045f6ac9 [ 733.850914][ T3094] Code: 48 89 55 d0 31 c0 48 81 fa 00 ca 9a 3b 72 18 48 81 c2 00 36 65 c4 48 89 55 d0 ff c0 48 81 fa ff c9 9a 3b 77 ea 89 c0 4c 01 f0 <48> 89 06 48 89 56 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f [ 733.870686][ T3094] RSP: 002b:00007ffc045c9ef8 EFLAGS: 00010206 [ 733.876912][ T3094] RAX: 00000000000002dd RBX: 000000000001e502 RCX: 0000000000000018 [ 733.884893][ T3094] RDX: 0000000028e057de RSI: 00007ffc045ca040 RDI: 7fffffffffffffff [ 733.892853][ T3094] RBP: 00007ffc045c9f50 R08: 0000000000000010 R09: 00007ffc045f20b0 [ 733.900827][ T3094] R10: 00007ffc045f2080 R11: 000000000001e502 R12: 0000000000745aed [ 733.908784][ T3094] R13: 00000000000b3115 R14: 00000000000002dd R15: 0027f008a4b62837 [ 733.916781][ T3094] [ 733.919903][ T3094] memory: usage 307200kB, limit 307200kB, failcnt 54341 [ 733.926863][ T3094] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 733.934752][ T3094] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 733.942068][ T3094] Memory cgroup stats for /syz3: [ 733.961052][ T3094] cache 28672 [ 733.969338][ T3094] rss 0 [ 733.972110][ T3094] shmem 0 [ 733.975031][ T3094] mapped_file 0 [ 733.978512][ T3094] dirty 0 [ 733.981453][ T3094] writeback 4096 [ 733.984996][ T3094] workingset_refault_anon 14863 [ 733.989972][ T3094] workingset_refault_file 24689 [ 733.994805][ T3094] swap 389120 [ 733.998145][ T3094] pgpgin 760523 [ 734.001642][ T3094] pgpgout 760506 [ 734.005171][ T3094] pgfault 85043 [ 734.008650][ T3094] pgmajfault 6329 [ 734.012275][ T3094] inactive_anon 0 [ 734.015895][ T3094] active_anon 0 [ 734.019443][ T3094] inactive_file 61440 [ 734.023484][ T3094] active_file 0 [ 734.026952][ T3094] unevictable 0 [ 734.030469][ T3094] hierarchical_memory_limit 314572800 [ 734.035889][ T3094] hierarchical_memsw_limit 9223372036854771712 [ 734.042107][ T3094] total_cache 28672 [ 734.045903][ T3094] total_rss 0 [ 734.049206][ T3094] total_shmem 0 [ 734.052699][ T3094] total_mapped_file 0 [ 734.056692][ T3094] total_dirty 0 [ 734.060143][ T3094] total_writeback 4096 [ 734.064216][ T3094] total_workingset_refault_anon 14863 [ 734.069638][ T3094] total_workingset_refault_file 24689 [ 734.074994][ T3094] total_swap 389120 [ 734.078933][ T3094] total_pgpgin 760523 [ 734.082902][ T3094] total_pgpgout 760506 [ 734.087061][ T3094] total_pgfault 85043 [ 734.091027][ T3094] total_pgmajfault 6329 [ 734.095160][ T3094] total_inactive_anon 0 [ 734.099315][ T3094] total_active_anon 0 [ 734.103310][ T3094] total_inactive_file 61440 [ 734.107827][ T3094] total_active_file 0 02:20:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x8000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x4, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:14 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xc020660b, 0x0) 02:20:14 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="48000000000101010000000000000000020000012c000d8014000400fe8000000000000000000000000000aa140004005f80000000000000000000000000003606001240000000001795e514618faae3209a7cca489eaceaa049a76e8bc94ac421bf5ed446195bdbff32ddafc088888aca9780e1a6f1b11b4335a0bb824efa03b32dc593f53dec1e520c11a2b1d9e30985bb1c4b335b96a6552a01135ae78d86d8080d04f1c4119853d0855090c5"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x400c010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r0, 0x0, 0x8000000000004) recvmmsg(r3, &(0x7f0000003340)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/226, 0xe2}], 0x1, &(0x7f0000000400)=""/156, 0x9c}, 0x9}, {{&(0x7f00000004c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/236, 0xec}], 0x4, &(0x7f0000000840)=""/90, 0x5a}, 0x10001}, {{&(0x7f00000008c0)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/69, 0x45}, {&(0x7f00000009c0)=""/3, 0x3}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/149, 0x95}, {&(0x7f0000000c40)=""/254, 0xfe}], 0x6}, 0x9}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/82, 0x52}, {&(0x7f0000000ec0)=""/2, 0x2}, {&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)}], 0x4}, 0x81}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000fc0)=""/40, 0x28}, {&(0x7f0000001000)=""/170, 0xaa}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/229, 0xe5}, {&(0x7f00000021c0)=""/103, 0x67}, {&(0x7f0000002240)=""/62, 0x3e}, {&(0x7f0000002280)=""/38, 0x26}], 0x7, &(0x7f0000002340)=""/4096, 0x1000}}], 0x5, 0x141, &(0x7f0000003480)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="48000000000101010000000000000000020000012c000d8014000400fe8000000000000000000000000000aa140004005f80000000000000000000000000003606001240000000001795e514618faae3209a7cca489eaceaa049a76e8bc94ac421bf5ed446195bdbff32ddafc088888aca9780e1a6f1b11b4335a0bb824efa03b32dc593f53dec1e520c11a2b1d9e30985bb1c4b335b96a6552a01135ae78d86d8080d04f1c4119853d0855090c5"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x400c010) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) sendfile(r2, r3, 0x0, 0xf03b00f7) (async) sendfile(r2, r0, 0x0, 0x8000000000004) (async) recvmmsg(r3, &(0x7f0000003340)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/226, 0xe2}], 0x1, &(0x7f0000000400)=""/156, 0x9c}, 0x9}, {{&(0x7f00000004c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/236, 0xec}], 0x4, &(0x7f0000000840)=""/90, 0x5a}, 0x10001}, {{&(0x7f00000008c0)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/69, 0x45}, {&(0x7f00000009c0)=""/3, 0x3}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/149, 0x95}, {&(0x7f0000000c40)=""/254, 0xfe}], 0x6}, 0x9}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/82, 0x52}, {&(0x7f0000000ec0)=""/2, 0x2}, {&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)}], 0x4}, 0x81}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000fc0)=""/40, 0x28}, {&(0x7f0000001000)=""/170, 0xaa}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/229, 0xe5}, {&(0x7f00000021c0)=""/103, 0x67}, {&(0x7f0000002240)=""/62, 0x3e}, {&(0x7f0000002280)=""/38, 0x26}], 0x7, &(0x7f0000002340)=""/4096, 0x1000}}], 0x5, 0x141, &(0x7f0000003480)) (async) [ 734.111860][ T3094] total_unevictable 0 [ 734.115886][ T3094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18811,uid=0 [ 734.131268][ T3094] Memory cgroup out of memory: Killed process 18811 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:14 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x2) 02:20:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x6, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:14 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="48000000000101010000000000000000020000012c000d8014000400fe8000000000000000000000000000aa140004005f80000000000000000000000000003606001240000000001795e514618faae3209a7cca489eaceaa049a76e8bc94ac421bf5ed446195bdbff32ddafc088888aca9780e1a6f1b11b4335a0bb824efa03b32dc593f53dec1e520c11a2b1d9e30985bb1c4b335b96a6552a01135ae78d86d8080d04f1c4119853d0855090c5"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x400c010) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r0, 0x0, 0x8000000000004) (async) recvmmsg(r3, &(0x7f0000003340)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/226, 0xe2}], 0x1, &(0x7f0000000400)=""/156, 0x9c}, 0x9}, {{&(0x7f00000004c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/236, 0xec}], 0x4, &(0x7f0000000840)=""/90, 0x5a}, 0x10001}, {{&(0x7f00000008c0)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/69, 0x45}, {&(0x7f00000009c0)=""/3, 0x3}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/149, 0x95}, {&(0x7f0000000c40)=""/254, 0xfe}], 0x6}, 0x9}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/82, 0x52}, {&(0x7f0000000ec0)=""/2, 0x2}, {&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)}], 0x4}, 0x81}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000fc0)=""/40, 0x28}, {&(0x7f0000001000)=""/170, 0xaa}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/229, 0xe5}, {&(0x7f00000021c0)=""/103, 0x67}, {&(0x7f0000002240)=""/62, 0x3e}, {&(0x7f0000002280)=""/38, 0x26}], 0x7, &(0x7f0000002340)=""/4096, 0x1000}}], 0x5, 0x141, &(0x7f0000003480)) 02:20:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x29, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x8, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:14 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x2000000) 02:20:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000f593c591c4060b01bf3364fcb23f1c46", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e915cb28b4d427c"]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) [ 734.998620][T19142] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 735.010031][T19142] CPU: 0 PID: 19142 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 735.018775][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.028833][T19142] Call Trace: [ 735.032121][T19142] [ 735.035057][T19142] dump_stack_lvl+0xda/0x130 [ 735.039700][T19142] dump_stack+0x15/0x20 [ 735.043901][T19142] dump_header+0x95/0x3c0 [ 735.048304][T19142] oom_kill_process+0xe3/0x3e0 [ 735.053154][T19142] out_of_memory+0x9ca/0xc00 [ 735.057823][T19142] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 735.063924][T19142] mem_cgroup_out_of_memory+0x139/0x190 [ 735.069501][T19142] try_charge_memcg+0x75c/0xd20 [ 735.074439][T19142] ? __alloc_pages+0x193/0x340 [ 735.079212][T19142] charge_memcg+0x51/0x200 [ 735.083824][T19142] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 735.089886][T19142] __read_swap_cache_async+0x2fe/0x560 [ 735.095528][T19142] swap_cluster_readahead+0x2a3/0x4f0 [ 735.100950][T19142] swapin_readahead+0x8d/0x700 [ 735.105807][T19142] ? __filemap_get_folio+0x47c/0x500 [ 735.111111][T19142] ? swap_cache_get_folio+0x6e/0x210 [ 735.116414][T19142] do_swap_page+0x4d7/0x1550 [ 735.121067][T19142] ? pte_offset_map_nolock+0x11f/0x1c0 [ 735.126582][T19142] handle_mm_fault+0x9ec/0x2c10 [ 735.131447][T19142] ? mt_find+0x1d1/0x300 [ 735.135700][T19142] exc_page_fault+0x24d/0x650 [ 735.140449][T19142] asm_exc_page_fault+0x26/0x30 [ 735.145343][T19142] RIP: 0033:0x7fb036a9283c [ 735.149754][T19142] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 735.171474][T19142] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 735.177558][T19142] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 735.185536][T19142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.193574][T19142] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 735.201560][T19142] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b3724 [ 735.209546][T19142] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 735.217527][T19142] [ 735.220621][T19142] memory: usage 307200kB, limit 307200kB, failcnt 69394 [ 735.227726][T19142] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 735.235611][T19142] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 735.242943][T19142] Memory cgroup stats for /syz1: [ 735.246051][T19142] cache 0 [ 735.254002][T19142] rss 0 [ 735.256812][T19142] shmem 0 [ 735.259767][T19142] mapped_file 0 [ 735.263295][T19142] dirty 0 [ 735.266226][T19142] writeback 12288 [ 735.269881][T19142] workingset_refault_anon 19830 [ 735.274812][T19142] workingset_refault_file 5392 [ 735.279592][T19142] swap 720896 [ 735.282867][T19142] pgpgin 109650 [ 735.286328][T19142] pgpgout 109646 [ 735.289933][T19142] pgfault 86900 [ 735.293380][T19142] pgmajfault 8877 [ 735.297033][T19142] inactive_anon 0 [ 735.300666][T19142] active_anon 0 [ 735.304114][T19142] inactive_file 0 [ 735.307765][T19142] active_file 0 [ 735.311214][T19142] unevictable 0 [ 735.314658][T19142] hierarchical_memory_limit 314572800 [ 735.320147][T19142] hierarchical_memsw_limit 9223372036854771712 [ 735.326288][T19142] total_cache 0 [ 735.329766][T19142] total_rss 0 [ 735.333038][T19142] total_shmem 0 [ 735.336545][T19142] total_mapped_file 0 [ 735.340512][T19142] total_dirty 0 [ 735.343963][T19142] total_writeback 12288 [ 735.348233][T19142] total_workingset_refault_anon 19830 [ 735.353593][T19142] total_workingset_refault_file 5392 [ 735.358892][T19142] total_swap 720896 [ 735.362680][T19142] total_pgpgin 109650 [ 735.366733][T19142] total_pgpgout 109646 [ 735.370824][T19142] total_pgfault 86900 [ 735.374781][T19142] total_pgmajfault 8877 [ 735.378950][T19142] total_inactive_anon 0 [ 735.383089][T19142] total_active_anon 0 [ 735.387088][T19142] total_inactive_file 0 [ 735.391245][T19142] total_active_file 0 [ 735.395241][T19142] total_unevictable 0 [ 735.399245][T19142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19142,uid=0 [ 735.414682][T19142] Memory cgroup out of memory: Killed process 19142 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 735.451817][T19363] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 735.462041][T19363] CPU: 0 PID: 19363 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 735.470723][T19363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.480779][T19363] Call Trace: [ 735.484050][T19363] [ 735.486976][T19363] dump_stack_lvl+0xda/0x130 [ 735.491575][T19363] dump_stack+0x15/0x20 [ 735.495734][T19363] dump_header+0x95/0x3c0 [ 735.500071][T19363] oom_kill_process+0xe3/0x3e0 [ 735.505282][T19363] out_of_memory+0x9ca/0xc00 [ 735.509880][T19363] mem_cgroup_out_of_memory+0x139/0x190 [ 735.515615][T19363] try_charge_memcg+0x75c/0xd20 [ 735.520476][T19363] ? read_pages+0x320/0x560 [ 735.524982][T19363] charge_memcg+0x51/0x200 [ 735.529490][T19363] __mem_cgroup_charge+0x29/0xa0 [ 735.534438][T19363] __filemap_add_folio+0x454/0x730 [ 735.539559][T19363] ? workingset_activation+0x2e0/0x2e0 [ 735.545024][T19363] filemap_add_folio+0x6f/0x150 [ 735.549875][T19363] filemap_get_pages+0x5cf/0xea0 [ 735.554825][T19363] filemap_splice_read+0x23a/0x810 [ 735.559950][T19363] ext4_file_splice_read+0x95/0xb0 [ 735.565065][T19363] ? ext4_release_file+0x1c0/0x1c0 [ 735.570179][T19363] splice_direct_to_actor+0x28c/0x690 [ 735.575556][T19363] ? direct_file_splice_eof+0x70/0x70 [ 735.580982][T19363] do_splice_direct+0x10d/0x190 [ 735.585856][T19363] ? do_splice_direct+0x190/0x190 [ 735.590890][T19363] do_sendfile+0x3b6/0x9a0 [ 735.595320][T19363] __x64_sys_sendfile64+0x110/0x150 [ 735.600524][T19363] do_syscall_64+0x41/0xc0 [ 735.604938][T19363] ? syscall_exit_to_user_mode+0x26/0x140 [ 735.610659][T19363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 735.616560][T19363] RIP: 0033:0x7f074fb53389 [ 735.621007][T19363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.640706][T19363] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 735.649099][T19363] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 735.657051][T19363] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 735.665003][T19363] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 735.672952][T19363] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 735.680905][T19363] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 735.688859][T19363] [ 735.692086][T19363] memory: usage 307196kB, limit 307200kB, failcnt 55989 [ 735.699033][T19363] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 735.706924][T19363] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 735.714199][T19363] Memory cgroup stats for /syz3: [ 735.714685][T19363] cache 36864 [ 735.722963][T19363] rss 0 [ 735.725701][T19363] shmem 0 [ 735.728646][T19363] mapped_file 0 [ 735.732093][T19363] dirty 0 [ 735.735003][T19363] writeback 0 [ 735.738288][T19363] workingset_refault_anon 14928 [ 735.743126][T19363] workingset_refault_file 25087 [ 735.747981][T19363] swap 479232 [ 735.751253][T19363] pgpgin 763027 [ 735.754687][T19363] pgpgout 763018 [ 735.758232][T19363] pgfault 85198 [ 735.761699][T19363] pgmajfault 6355 [ 735.765306][T19363] inactive_anon 0 [ 735.768951][T19363] active_anon 0 [ 735.772398][T19363] inactive_file 36864 [ 735.776352][T19363] active_file 0 [ 735.779810][T19363] unevictable 0 [ 735.783281][T19363] hierarchical_memory_limit 314572800 [ 735.788675][T19363] hierarchical_memsw_limit 9223372036854771712 [ 735.794810][T19363] total_cache 36864 [ 735.798719][T19363] total_rss 0 [ 735.801990][T19363] total_shmem 0 [ 735.805424][T19363] total_mapped_file 0 [ 735.809400][T19363] total_dirty 0 [ 735.812857][T19363] total_writeback 0 [ 735.816954][T19363] total_workingset_refault_anon 14928 [ 735.822315][T19363] total_workingset_refault_file 25087 [ 735.827685][T19363] total_swap 479232 [ 735.831481][T19363] total_pgpgin 763027 [ 735.835437][T19363] total_pgpgout 763018 [ 735.839511][T19363] total_pgfault 85198 [ 735.843532][T19363] total_pgmajfault 6355 [ 735.847689][T19363] total_inactive_anon 0 02:20:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x9000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:15 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x200000000000000) 02:20:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x9, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000f593c591c4060b01bf3364fcb23f1c46", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e915cb28b4d427c"]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) sendfile(r2, r3, 0x0, 0xf03b00f7) (async) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) 02:20:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 735.851914][T19363] total_active_anon 0 [ 735.855878][T19363] total_inactive_file 36864 [ 735.860477][T19363] total_active_file 0 [ 735.864452][T19363] total_unevictable 0 [ 735.868433][T19363] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19288,uid=0 [ 735.883780][T19363] Memory cgroup out of memory: Killed process 19288 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:15 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x968, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r1}, "206d23d4d8b17d58bf51a0e36a6af393331dba4facae68d66965cbeafd3a37055e486d1de419f80fe1793d7e034f0024ea92db5d902bceb269566a0704cfdbe734cb34db023c9b24025e7ca7dafadf52dac807843ff67d44c57d02f9ff0a1e1d57dfa14f1ae028896dd4a748b63ec7c06bb014602c855ffeda8e0555b380a66475041949b809abc30eb9a6116b6085d298c7b3d28274aad3802bb00f5ef24808addf5bd0e2896393f6fb5c10533427022f177e9a4d3f686c1262b890f8feb4f18199f8fda780fbf5d8317ab88f25c30457c83a63e38ef95f3541624760e00029ea575a6d47e57b0124fc210aa1fa56aa3250edd2d34d637c0a73a08e42033c4795c5425da2f67ae5087d1da2b0437e570efc98ed2534c5b608c436ff918f49906c019560c7ac28b0a021aae7f8e8f49f7dec2a106f125beebd1ad1af3e4bcfd5a2aa95ef99e292036a91febdcb041a09caaea3ac3af21c8acd8c714476dcd96439092928da98b5660b6fb89ef3a5b6481a233e8c2950838639d1af6d5bed7a2294919e138f846e2f3f6b95d11abbd679aadcf906f45118ae4eec5601dbff6ea40aeb19dcbfbf99355dad2867923e9c0cda909c45c5c505476a1b8f081b5052881d1cdae666f20352b2aef3c3964913ca1d70801b10e85b9817928b03ed9d8fec86de5472ad7aa9714d01b3486570b3947fd2aaead3e087ee8b5ec2d3eb264957c1f2f5d36f70228d3d99d69a16f1cfdf09fec62cd36cda99cd188db49418e691e01a61ac1ce99a48c98cf0b652e113aeeeacf7dba6ba63a4e240123200654086ca013fc3fd087443e2e6ac5185bb41b3a552d560ce32d69a142a510c7f05ac3b76ed837b5eb84bdbdc6e70dbaf69700c81f359d5d6426e1fccd659b6d82baa1591884022a5225f6400774fb2bc5b1264b56fee2f3f5e36d886aa729aa1f5a30b45dfb7fb4290751b0dcb9331fcbb52486c127059d33d035fb360a72772b15cf4ec7ce0b726ed4e721b11634547e310be38327c066bc6f1dee1b704a7443dae88ce37ba3924bbab6952bea3f663726f28b33ab1d7e6584d299cfe10113aae796173daa38c7337747de9e86f15071228796e3f8c4212d8dc35eff529cf99cae2507801fb6dacce62b3ca47d01dd9581c3e5a1a7e453a1648d0892bd45196520afe0649193ec121bc88a0034bb32d571073d7b7d4131161847fb78375ef54c202d779e7af77564917df1732cc0250fe5cbb370fdba8b0236e53a0126e016bf8f9dc0d17542081fef30f4076be529ecdca2802bc98af3500111c7ed1278efe8c31b50e4b5f8811d261a06a84683e9ebcfe6db9e88cf2ed5f1a42a87e100a0dd51f8b51953a4af189a30ece6bfe9acd29fa77172a080907a9738844cb7ebe33c105a54fd7460c8adaf5304976891f621bb65964c73dae8a3d69fa56a8c07ef6d1167a14cd177196808eabd7c565a350d7ba54f1101f6851797fde9978f18b66599a45964825f335162a8ee4e2b9c018ac9400c1f81d0b5508677945564bbeba6944a31cae8d2cbfe48796d13d7439c14ae689d0b033ed1f481047e663d636d977aed165cc8b448334eec2188e1d8be024a10bd63f1482e430e2e4f7a5e6611a37903dd698bbf8914b6b38e091c9c0e37ea7e88904f2fadbe4a3d55052a9bfb7df549429427f95b8aa44f3022a22ac493f3fd607e4ab2ebae86c76cbbb90e7434bf7755b3d63ebaa383bf7b1195abf737de2a07faa6a118d5fa870e52821d7c5783e8cff584dae2c670d7400937e3b1a4626bb153e06856ac1b37bdabc112a140526fb391bc2803eff5976c5ead9bc39481a828d8426eaae9adf410b7eedd854accca6d0d1c84555a0ec9beffdbe386e7718d378134f91b926f40b46e989fefec63463377b3142c70171b938e84dae302a91f7dece8574850d0e2494e14eaee83bab5963733da72493c6fa2f5679dd4802f11d10f20f9e1c6069ddb8425db656c2751a0dd1adc05146e3ad2cc8c3c0b93775ea5855def60eda1bf564b4e26012ed7cad32a343b31c976c43d99b06d617c8522b4cfd5591f63c29fc77771a776f4b17b9beb75b0177d2c784a897bee1e6a0072e8436e5140e198cdb0a1f1ac5b86c5aefb8d3cbec10806ee8e6a47ac0a490a04048980882af3d848c4627217cc84cfb350674c61857cc611dff42faafe61273e0e4c60db0df594201f5d5f4e79159d46b18c8cf187352a9aeac0a19ba014f24e4d0d9dbcfefc92830666ebcf1fa741c68aabe1fda6bae573e82d008ec19b420992b742abb7f31fbc862f866438046a5a6c4f53f1cf413b8e5e9fa849f86a28f9d6a83db8e21a471607321e1df37e347876535e544b546ef4ec071037663eac236122add02c9b8c0280377867e29fdda9299e5829dda9670ed32d8eea4abf8774d5e659062fc2cdf53a6b0d2e04ec699b8f7d841d9c5e5ff428a9403fa9b1157eef8d239403259b6bf298ff9d81877ddddc73f2f775f7a516c6dd3dffe445f55e3f4aacea6d1b356be3b8f64329ff925c982c82dc02cf33186b768d46abc08220219b1a28100c4422cd9902a3efbdd87ce1d48b1b8e91a50f31a5095676473f9541683d95c781bc28fd6cee1df3240db243c1e870837fc3d29c3e5aad737202f32a6b144899b1e2a31fa93fa1cf140b059b4eef569bad8a7c1b23bb5a08c9ac9322aebdfeeb7d455c464d6d2d94c5349606f32c9312f0d3f605d31594f5650b6c09ab5c79e6baa5235374a70013d984efab2446ca4033b72f8115126b7a9bbf4b9601f5907abe8ba05cf8186d6e05752dac09b0db5f6c2270faa1f8e1be23fe3a9aa07765e392fc2b785e84b59bc102b65bfa5938b861507e388ed50b2108d613633a5353d527b6fb5205034f2ebc00d8786385dea3d3df7305a42667bfaf22471c7d85924fd56efa8fed1df43b6d4c1e1b975b31953c848ebc4977211de020c0b05035cbfd175f65b1335154dd4bf63b228e16feadce704a933518e866fd28124bc45a03645bb888350e5627223335636a66dca9c55fc3c2a74f543e12f6520941fc29ed4c2fcda9d97a62346f96106e1faf9035241608201ce7e91d42870371a3a4b02b8fa583da6cf192354c473b8617eb98f324dc2e8d4053f368ab65d31796edcffecd5ff03d4f07895a6fd4e61b9aea03b4e1b63cea3ff53200d7970f4bc5d9c2a2e5967229a308bffc6fe2ac649df904b2ba5287d8229885eae447f473e8f9da85c44463e0b5b0f6b79b0ea1ffa1bb54310d3c368a28d0ff5dfea620e6bed179b59171c919ee12c22b44193ab1c4a09b11f09fc997a3d02cb7a550ec2bab3f3b5e5730a88727bbd6f8a88bce0d34b347abc3923e1642ef3335aad2aa2585cf688409e33a6403898832e7f959c03ecea05cd2a774240ec24501f7a45356fe849efcb60982915bb9f333ebeb6333dddd07a88ef13f0f4ed2c0e88baf3b61d64d4557b6e03f059d0b05ec31504947438c25339b53881018b79f05b75f3a55f13c3432a5177f4e367005c28ca67b6e6676346bac47dc0b510a5182140c7818ca48e8ff3227028337ad22d6c60c3d163ef27cd593b99c880cc89db5517b5ea60fea62eb7d5f75db4cd998a9b469279f982fc42ac98b73e4f5c81c61435a5a3801a75bdeef98dc8372414e5d5363d3dce06facd911c3e2c3bbe704805f3253d5523c067ea4eccb31e62895b888b80738260477f3cfb7bee115fcb707f18eaf213798171cd37a9d902b463e51f1bbbb12990bae1c57e956400829f137d21a40764dc460f03241a204111cc6807f33b26efe59c634394a983edac2db11241cbc2384039904cfde56e032a037ae2471ea5defed3be326372ad24aa5f37ce96962851b9d9f999f53ebcd1e7edec138ecb2a4cccde5f99268da269d8abe18b8deafcd6a8063808b79f1b585c33ec128346a87b86a8e0d054a572f6b20ca756dd98dd0baff1dfc7b1793f9799efde9fc8cf17691a8dd97c7abecb63f4032341f8780ce8d682e817ab9b8b2fc8f127c462975e522155c4d952c831c88b45225f452bfa9b6a312927f83fd95cc7bd374630b96e1de56fec0c12cb4fdca7c0389f07d2be021f08a4c3823a864920ca45206a37e50ec8bd9145909f4c6711a942d08129269e402b14f9e21033452da5535511ccc1516d8d6519ffbd945d43dc47bd15b6f6dae39b81d64e1d1bffab1cb739ce219e0d6cbbf5c970df499df65e5d270ce97602d587145c6609b2e5bc2e8eb763339a153bbfa72310377ea8f6370c6659c43b1395bca9c0314fa25d080beaa042c028d9a6238e271ca79308846abba70639630c50dc244fd444ff43a610d0bc5b710c16cd022b9400337aca118a4b53936e2f2a2c5db72af36ea13363512ceda8af5e734c1c3cad956c519cd5e013688be42303e0b049e6497afbac9ab8b18222168fe9c2388a65c0c1c0a5e6a3124efc1a1a6cc31427c10470801c76325c7f3281cc40fe61b53c7ac18ae3cae7df7ac50eb8ff8485ab8ad358d6717cf77f790dbff72d990dbd30370e4bf2b576aa477a4f22e512d577b4e5b3dcf7e79f64d23e8838562162d77d523c2e7bca1b9ccf24c134188ede882d7349e1fe00dc7d78e2be1207bcb74c92f2ca0a3585cfacaf5b6a97765c4ac2cb3e30798f755f3f00a280b320aff8ff3d69b53d4e8ab91d2b6b04f9691236708b0c8babbe0cff4c03c6ac1862e00e0e87c28168aaa2ddde665284c2c6efc79b21d2bc0561b8fd9dd91ebebafc088bf7deb895d779df45dcb9d8a48607798425f44cb0c4adcfc2f396ae345fa9abc1819d8cbc70aeb8410f8f1bff223edba2ff3cdeff595995c443db1e138434f99d90a180cfd47520997355f73e69a2c3e77960d706f152d4f2ac42112461d955485efe52042161b69e56c4a5075a625ec335b570116a13afecbdda01e86c0754fee28a7f359083b71f3e6ca5fd8b585fc6265ab8d8854f460f3c070709d0fdd5202318ccbfb0f3a743acffa1095d5333d0b02fa2260f38dad924be7c1cbb0503c163c289d38ebc6cbc1d54b7985a97bb31cf4d5a85b4e86b41f3ec4c091265240800e06b5629a21c6a2759ec3caeede9f46b7590756724d83194419aec99fe8696eaab595065fc99c564f79d59d150b8b24c292e5bf2e085c9e51e7a007d2d2b07ac429ce0b949178b6af9d01241b086d01056e18b0017be88fe6a002815f0400736ff7059ca6ae4e017d6494d3eb092b1c8840f210338c64c871b0456b1b5bf00940ecd29a2c733e85a38263527418a9e2fa8784eb1bb1a682179db34f11d9ae928f57730b651b6c23bb9f51b542f1c7bc0e6fb005106b6149e70ed713e8aba1402a11b42bb5037258a0115bf09548380aaf671a3302cea27bcb9be9936f661f001e83dee18c5ae85209f0d9e01cddb7b76497565ca755bd08f5bddf0ef7cf993af218989017e03071118ae8122a144ad35732a4c54297e9ae20a17ff446aa536875e3f9baaecf485e0f0ac3262f548486229dcd2e0da5bd8c60677517a8049b7efb5de6baa7d9aa3f45023736990639c93b8cd489ec648648e30a5e87522bf9557d3d84936a3f59def50eec3ef05b7dc2809bc75bb826881b935950449463c898f801ae79ae27da2065fbf8a5d2b3ae5f4e0bf91d6728a267e086c86dfd3020c3bbb65e9fc6afd29f73c79fd72ccbf9a2507f4d08a4b15f99d59cc79504ecdad1d40b6d075719f296995af571401723475daa70d959042e3679c2676995e9de17efdfb9205e6cb41eb62c119fb95ba96a672f9a801c7"}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000f593c591c4060b01bf3364fcb23f1c46", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e915cb28b4d427c"]) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) sendfile(r2, r3, 0x0, 0xf03b00f7) (async, rerun: 64) sendfile(r2, r1, 0x0, 0x8000000000004) (rerun: 64) 02:20:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x2c, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:16 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x968, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r1}, "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"}) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r1}, "206d23d4d8b17d58bf51a0e36a6af393331dba4facae68d66965cbeafd3a37055e486d1de419f80fe1793d7e034f0024ea92db5d902bceb269566a0704cfdbe734cb34db023c9b24025e7ca7dafadf52dac807843ff67d44c57d02f9ff0a1e1d57dfa14f1ae028896dd4a748b63ec7c06bb014602c855ffeda8e0555b380a66475041949b809abc30eb9a6116b6085d298c7b3d28274aad3802bb00f5ef24808addf5bd0e2896393f6fb5c10533427022f177e9a4d3f686c1262b890f8feb4f18199f8fda780fbf5d8317ab88f25c30457c83a63e38ef95f3541624760e00029ea575a6d47e57b0124fc210aa1fa56aa3250edd2d34d637c0a73a08e42033c4795c5425da2f67ae5087d1da2b0437e570efc98ed2534c5b608c436ff918f49906c019560c7ac28b0a021aae7f8e8f49f7dec2a106f125beebd1ad1af3e4bcfd5a2aa95ef99e292036a91febdcb041a09caaea3ac3af21c8acd8c714476dcd96439092928da98b5660b6fb89ef3a5b6481a233e8c2950838639d1af6d5bed7a2294919e138f846e2f3f6b95d11abbd679aadcf906f45118ae4eec5601dbff6ea40aeb19dcbfbf99355dad2867923e9c0cda909c45c5c505476a1b8f081b5052881d1cdae666f20352b2aef3c3964913ca1d70801b10e85b9817928b03ed9d8fec86de5472ad7aa9714d01b3486570b3947fd2aaead3e087ee8b5ec2d3eb264957c1f2f5d36f70228d3d99d69a16f1cfdf09fec62cd36cda99cd188db49418e691e01a61ac1ce99a48c98cf0b652e113aeeeacf7dba6ba63a4e240123200654086ca013fc3fd087443e2e6ac5185bb41b3a552d560ce32d69a142a510c7f05ac3b76ed837b5eb84bdbdc6e70dbaf69700c81f359d5d6426e1fccd659b6d82baa1591884022a5225f6400774fb2bc5b1264b56fee2f3f5e36d886aa729aa1f5a30b45dfb7fb4290751b0dcb9331fcbb52486c127059d33d035fb360a72772b15cf4ec7ce0b726ed4e721b11634547e310be38327c066bc6f1dee1b704a7443dae88ce37ba3924bbab6952bea3f663726f28b33ab1d7e6584d299cfe10113aae796173daa38c7337747de9e86f15071228796e3f8c4212d8dc35eff529cf99cae2507801fb6dacce62b3ca47d01dd9581c3e5a1a7e453a1648d0892bd45196520afe0649193ec121bc88a0034bb32d571073d7b7d4131161847fb78375ef54c202d779e7af77564917df1732cc0250fe5cbb370fdba8b0236e53a0126e016bf8f9dc0d17542081fef30f4076be529ecdca2802bc98af3500111c7ed1278efe8c31b50e4b5f8811d261a06a84683e9ebcfe6db9e88cf2ed5f1a42a87e100a0dd51f8b51953a4af189a30ece6bfe9acd29fa77172a080907a9738844cb7ebe33c105a54fd7460c8adaf5304976891f621bb65964c73dae8a3d69fa56a8c07ef6d1167a14cd177196808eabd7c565a350d7ba54f1101f6851797fde9978f18b66599a45964825f335162a8ee4e2b9c018ac9400c1f81d0b5508677945564bbeba6944a31cae8d2cbfe48796d13d7439c14ae689d0b033ed1f481047e663d636d977aed165cc8b448334eec2188e1d8be024a10bd63f1482e430e2e4f7a5e6611a37903dd698bbf8914b6b38e091c9c0e37ea7e88904f2fadbe4a3d55052a9bfb7df549429427f95b8aa44f3022a22ac493f3fd607e4ab2ebae86c76cbbb90e7434bf7755b3d63ebaa383bf7b1195abf737de2a07faa6a118d5fa870e52821d7c5783e8cff584dae2c670d7400937e3b1a4626bb153e06856ac1b37bdabc112a140526fb391bc2803eff5976c5ead9bc39481a828d8426eaae9adf410b7eedd854accca6d0d1c84555a0ec9beffdbe386e7718d378134f91b926f40b46e989fefec63463377b3142c70171b938e84dae302a91f7dece8574850d0e2494e14eaee83bab5963733da72493c6fa2f5679dd4802f11d10f20f9e1c6069ddb8425db656c2751a0dd1adc05146e3ad2cc8c3c0b93775ea5855def60eda1bf564b4e26012ed7cad32a343b31c976c43d99b06d617c8522b4cfd5591f63c29fc77771a776f4b17b9beb75b0177d2c784a897bee1e6a0072e8436e5140e198cdb0a1f1ac5b86c5aefb8d3cbec10806ee8e6a47ac0a490a04048980882af3d848c4627217cc84cfb350674c61857cc611dff42faafe61273e0e4c60db0df594201f5d5f4e79159d46b18c8cf187352a9aeac0a19ba014f24e4d0d9dbcfefc92830666ebcf1fa741c68aabe1fda6bae573e82d008ec19b420992b742abb7f31fbc862f866438046a5a6c4f53f1cf413b8e5e9fa849f86a28f9d6a83db8e21a471607321e1df37e347876535e544b546ef4ec071037663eac236122add02c9b8c0280377867e29fdda9299e5829dda9670ed32d8eea4abf8774d5e659062fc2cdf53a6b0d2e04ec699b8f7d841d9c5e5ff428a9403fa9b1157eef8d239403259b6bf298ff9d81877ddddc73f2f775f7a516c6dd3dffe445f55e3f4aacea6d1b356be3b8f64329ff925c982c82dc02cf33186b768d46abc08220219b1a28100c4422cd9902a3efbdd87ce1d48b1b8e91a50f31a5095676473f9541683d95c781bc28fd6cee1df3240db243c1e870837fc3d29c3e5aad737202f32a6b144899b1e2a31fa93fa1cf140b059b4eef569bad8a7c1b23bb5a08c9ac9322aebdfeeb7d455c464d6d2d94c5349606f32c9312f0d3f605d31594f5650b6c09ab5c79e6baa5235374a70013d984efab2446ca4033b72f8115126b7a9bbf4b9601f5907abe8ba05cf8186d6e05752dac09b0db5f6c2270faa1f8e1be23fe3a9aa07765e392fc2b785e84b59bc102b65bfa5938b861507e388ed50b2108d613633a5353d527b6fb5205034f2ebc00d8786385dea3d3df7305a42667bfaf22471c7d85924fd56efa8fed1df43b6d4c1e1b975b31953c848ebc4977211de020c0b05035cbfd175f65b1335154dd4bf63b228e16feadce704a933518e866fd28124bc45a03645bb888350e5627223335636a66dca9c55fc3c2a74f543e12f6520941fc29ed4c2fcda9d97a62346f96106e1faf9035241608201ce7e91d42870371a3a4b02b8fa583da6cf192354c473b8617eb98f324dc2e8d4053f368ab65d31796edcffecd5ff03d4f07895a6fd4e61b9aea03b4e1b63cea3ff53200d7970f4bc5d9c2a2e5967229a308bffc6fe2ac649df904b2ba5287d8229885eae447f473e8f9da85c44463e0b5b0f6b79b0ea1ffa1bb54310d3c368a28d0ff5dfea620e6bed179b59171c919ee12c22b44193ab1c4a09b11f09fc997a3d02cb7a550ec2bab3f3b5e5730a88727bbd6f8a88bce0d34b347abc3923e1642ef3335aad2aa2585cf688409e33a6403898832e7f959c03ecea05cd2a774240ec24501f7a45356fe849efcb60982915bb9f333ebeb6333dddd07a88ef13f0f4ed2c0e88baf3b61d64d4557b6e03f059d0b05ec31504947438c25339b53881018b79f05b75f3a55f13c3432a5177f4e367005c28ca67b6e6676346bac47dc0b510a5182140c7818ca48e8ff3227028337ad22d6c60c3d163ef27cd593b99c880cc89db5517b5ea60fea62eb7d5f75db4cd998a9b469279f982fc42ac98b73e4f5c81c61435a5a3801a75bdeef98dc8372414e5d5363d3dce06facd911c3e2c3bbe704805f3253d5523c067ea4eccb31e62895b888b80738260477f3cfb7bee115fcb707f18eaf213798171cd37a9d902b463e51f1bbbb12990bae1c57e956400829f137d21a40764dc460f03241a204111cc6807f33b26efe59c634394a983edac2db11241cbc2384039904cfde56e032a037ae2471ea5defed3be326372ad24aa5f37ce96962851b9d9f999f53ebcd1e7edec138ecb2a4cccde5f99268da269d8abe18b8deafcd6a8063808b79f1b585c33ec128346a87b86a8e0d054a572f6b20ca756dd98dd0baff1dfc7b1793f9799efde9fc8cf17691a8dd97c7abecb63f4032341f8780ce8d682e817ab9b8b2fc8f127c462975e522155c4d952c831c88b45225f452bfa9b6a312927f83fd95cc7bd374630b96e1de56fec0c12cb4fdca7c0389f07d2be021f08a4c3823a864920ca45206a37e50ec8bd9145909f4c6711a942d08129269e402b14f9e21033452da5535511ccc1516d8d6519ffbd945d43dc47bd15b6f6dae39b81d64e1d1bffab1cb739ce219e0d6cbbf5c970df499df65e5d270ce97602d587145c6609b2e5bc2e8eb763339a153bbfa72310377ea8f6370c6659c43b1395bca9c0314fa25d080beaa042c028d9a6238e271ca79308846abba70639630c50dc244fd444ff43a610d0bc5b710c16cd022b9400337aca118a4b53936e2f2a2c5db72af36ea13363512ceda8af5e734c1c3cad956c519cd5e013688be42303e0b049e6497afbac9ab8b18222168fe9c2388a65c0c1c0a5e6a3124efc1a1a6cc31427c10470801c76325c7f3281cc40fe61b53c7ac18ae3cae7df7ac50eb8ff8485ab8ad358d6717cf77f790dbff72d990dbd30370e4bf2b576aa477a4f22e512d577b4e5b3dcf7e79f64d23e8838562162d77d523c2e7bca1b9ccf24c134188ede882d7349e1fe00dc7d78e2be1207bcb74c92f2ca0a3585cfacaf5b6a97765c4ac2cb3e30798f755f3f00a280b320aff8ff3d69b53d4e8ab91d2b6b04f9691236708b0c8babbe0cff4c03c6ac1862e00e0e87c28168aaa2ddde665284c2c6efc79b21d2bc0561b8fd9dd91ebebafc088bf7deb895d779df45dcb9d8a48607798425f44cb0c4adcfc2f396ae345fa9abc1819d8cbc70aeb8410f8f1bff223edba2ff3cdeff595995c443db1e138434f99d90a180cfd47520997355f73e69a2c3e77960d706f152d4f2ac42112461d955485efe52042161b69e56c4a5075a625ec335b570116a13afecbdda01e86c0754fee28a7f359083b71f3e6ca5fd8b585fc6265ab8d8854f460f3c070709d0fdd5202318ccbfb0f3a743acffa1095d5333d0b02fa2260f38dad924be7c1cbb0503c163c289d38ebc6cbc1d54b7985a97bb31cf4d5a85b4e86b41f3ec4c091265240800e06b5629a21c6a2759ec3caeede9f46b7590756724d83194419aec99fe8696eaab595065fc99c564f79d59d150b8b24c292e5bf2e085c9e51e7a007d2d2b07ac429ce0b949178b6af9d01241b086d01056e18b0017be88fe6a002815f0400736ff7059ca6ae4e017d6494d3eb092b1c8840f210338c64c871b0456b1b5bf00940ecd29a2c733e85a38263527418a9e2fa8784eb1bb1a682179db34f11d9ae928f57730b651b6c23bb9f51b542f1c7bc0e6fb005106b6149e70ed713e8aba1402a11b42bb5037258a0115bf09548380aaf671a3302cea27bcb9be9936f661f001e83dee18c5ae85209f0d9e01cddb7b76497565ca755bd08f5bddf0ef7cf993af218989017e03071118ae8122a144ad35732a4c54297e9ae20a17ff446aa536875e3f9baaecf485e0f0ac3262f548486229dcd2e0da5bd8c60677517a8049b7efb5de6baa7d9aa3f45023736990639c93b8cd489ec648648e30a5e87522bf9557d3d84936a3f59def50eec3ef05b7dc2809bc75bb826881b935950449463c898f801ae79ae27da2065fbf8a5d2b3ae5f4e0bf91d6728a267e086c86dfd3020c3bbb65e9fc6afd29f73c79fd72ccbf9a2507f4d08a4b15f99d59cc79504ecdad1d40b6d075719f296995af571401723475daa70d959042e3679c2676995e9de17efdfb9205e6cb41eb62c119fb95ba96a672f9a801c7"}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xd, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80000) creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r1, 0x0, 0x8000000000004) [ 736.699668][T19474] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 736.711231][T19474] CPU: 0 PID: 19474 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 736.719911][T19474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 736.729967][T19474] Call Trace: [ 736.733248][T19474] [ 736.736200][T19474] dump_stack_lvl+0xda/0x130 [ 736.740815][T19474] dump_stack+0x15/0x20 [ 736.744976][T19474] dump_header+0x95/0x3c0 [ 736.749384][T19474] oom_kill_process+0xe3/0x3e0 [ 736.754260][T19474] out_of_memory+0x9ca/0xc00 [ 736.758884][T19474] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 736.764952][T19474] mem_cgroup_out_of_memory+0x139/0x190 [ 736.770585][T19474] try_charge_memcg+0x75c/0xd20 [ 736.775510][T19474] ? __alloc_pages+0x193/0x340 [ 736.780319][T19474] charge_memcg+0x51/0x200 [ 736.784807][T19474] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 736.790798][T19474] __read_swap_cache_async+0x2fe/0x560 [ 736.796394][T19474] swap_cluster_readahead+0x2a3/0x4f0 [ 736.801791][T19474] swapin_readahead+0x8d/0x700 [ 736.806623][T19474] ? __filemap_get_folio+0x47c/0x500 [ 736.811948][T19474] ? swap_cache_get_folio+0x6e/0x210 [ 736.817280][T19474] do_swap_page+0x4d7/0x1550 [ 736.821906][T19474] ? pte_offset_map_nolock+0x11f/0x1c0 [ 736.827382][T19474] handle_mm_fault+0x9ec/0x2c10 [ 736.832276][T19474] ? mt_find+0x1d1/0x300 [ 736.836591][T19474] exc_page_fault+0x24d/0x650 [ 736.841319][T19474] asm_exc_page_fault+0x26/0x30 [ 736.846418][T19474] RIP: 0033:0x7fb036a9283c [ 736.850856][T19474] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 736.870486][T19474] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 736.876866][T19474] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 736.884848][T19474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.892985][T19474] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 736.900961][T19474] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b3dfe [ 736.908943][T19474] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 736.917037][T19474] [ 736.920187][T19474] memory: usage 307200kB, limit 307200kB, failcnt 69585 [ 736.927147][T19474] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 736.935122][T19474] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 736.942466][T19474] Memory cgroup stats for /syz1: [ 736.942634][T19474] cache 0 [ 736.950526][T19474] rss 8192 [ 736.953541][T19474] shmem 0 [ 736.956539][T19474] mapped_file 0 [ 736.960008][T19474] dirty 0 [ 736.962937][T19474] writeback 4096 [ 736.966480][T19474] workingset_refault_anon 19874 [ 736.971360][T19474] workingset_refault_file 5392 [ 736.976144][T19474] swap 724992 [ 736.979558][T19474] pgpgin 109720 [ 736.983007][T19474] pgpgout 109717 [ 736.986595][T19474] pgfault 87028 [ 736.990123][T19474] pgmajfault 8895 [ 736.993745][T19474] inactive_anon 0 [ 736.997444][T19474] active_anon 0 [ 737.000901][T19474] inactive_file 0 [ 737.004539][T19474] active_file 0 [ 737.008026][T19474] unevictable 0 [ 737.011500][T19474] hierarchical_memory_limit 314572800 [ 737.016900][T19474] hierarchical_memsw_limit 9223372036854771712 [ 737.023102][T19474] total_cache 0 [ 737.026599][T19474] total_rss 12288 [ 737.030226][T19474] total_shmem 0 [ 737.033682][T19474] total_mapped_file 0 [ 737.037839][T19474] total_dirty 0 [ 737.041292][T19474] total_writeback 0 [ 737.045092][T19474] total_workingset_refault_anon 19874 [ 737.050517][T19474] total_workingset_refault_file 5392 [ 737.055792][T19474] total_swap 724992 [ 737.059702][T19474] total_pgpgin 109720 [ 737.063686][T19474] total_pgpgout 109717 [ 737.067785][T19474] total_pgfault 87028 [ 737.071762][T19474] total_pgmajfault 8895 [ 737.076152][T19474] total_inactive_anon 0 [ 737.080332][T19474] total_active_anon 0 [ 737.084366][T19474] total_inactive_file 0 [ 737.088545][T19474] total_active_file 0 [ 737.092520][T19474] total_unevictable 0 [ 737.096607][T19474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19474,uid=0 [ 737.111974][T19474] Memory cgroup out of memory: Killed process 19474 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 737.154504][T19786] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 737.168096][T19786] CPU: 1 PID: 19786 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 737.176773][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 737.186819][T19786] Call Trace: [ 737.190090][T19786] [ 737.193012][T19786] dump_stack_lvl+0xda/0x130 [ 737.197736][T19786] dump_stack+0x15/0x20 [ 737.201886][T19786] dump_header+0x95/0x3c0 [ 737.206346][T19786] oom_kill_process+0xe3/0x3e0 [ 737.211345][T19786] out_of_memory+0x9ca/0xc00 [ 737.215936][T19786] mem_cgroup_out_of_memory+0x139/0x190 [ 737.221487][T19786] try_charge_memcg+0x75c/0xd20 [ 737.226465][T19786] obj_cgroup_charge_pages+0xab/0x130 [ 737.231867][T19786] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 737.237421][T19786] __alloc_pages+0x1bb/0x340 [ 737.242090][T19786] alloc_pages+0x3e1/0x4e0 [ 737.246578][T19786] __vmalloc_node_range+0x6d2/0xea0 [ 737.251773][T19786] kvmalloc_node+0x121/0x160 [ 737.256455][T19786] ? xt_alloc_table_info+0x3d/0x80 [ 737.261656][T19786] xt_alloc_table_info+0x3d/0x80 [ 737.266633][T19786] do_arpt_set_ctl+0x615/0x1390 [ 737.271531][T19786] ? enqueue_task_fair+0x678/0x850 [ 737.276637][T19786] ? check_preempt_wakeup+0x187/0x320 [ 737.282005][T19786] ? _raw_spin_unlock_bh+0x36/0x40 [ 737.287123][T19786] ? lock_sock_nested+0x10e/0x130 [ 737.292142][T19786] ? tcp_release_cb+0xfe/0x340 [ 737.296951][T19786] nf_setsockopt+0x18d/0x1b0 [ 737.301536][T19786] ip_setsockopt+0xe6/0x100 [ 737.306123][T19786] tcp_setsockopt+0x90/0xa0 [ 737.310695][T19786] sock_common_setsockopt+0x61/0x70 [ 737.315919][T19786] ? sock_common_recvmsg+0xe0/0xe0 [ 737.321051][T19786] __sys_setsockopt+0x1c9/0x230 [ 737.325984][T19786] __x64_sys_setsockopt+0x66/0x80 [ 737.331008][T19786] do_syscall_64+0x41/0xc0 [ 737.335419][T19786] ? syscall_exit_to_user_mode+0x26/0x140 [ 737.341195][T19786] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.347135][T19786] RIP: 0033:0x7f074fb53389 [ 737.351605][T19786] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 737.371302][T19786] RSP: 002b:00007f074eec6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 737.379783][T19786] RAX: ffffffffffffffda RBX: 00007f074fc72f80 RCX: 00007f074fb53389 [ 737.387747][T19786] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 737.395710][T19786] RBP: 00007f074fb9e493 R08: 0000000000000438 R09: 0000000000000000 [ 737.403710][T19786] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.411682][T19786] R13: 00007ffc045c9d1f R14: 00007f074eec6300 R15: 0000000000022000 [ 737.419665][T19786] [ 737.422790][T19786] memory: usage 307076kB, limit 307200kB, failcnt 57535 [ 737.429829][T19786] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 737.437793][T19786] kmem: usage 306916kB, limit 9007199254740988kB, failcnt 0 [ 737.445195][T19786] Memory cgroup stats for /syz3: [ 737.454077][T19786] cache 143360 [ 737.462427][T19786] rss 73728 [ 737.465570][T19786] shmem 40960 [ 737.468889][T19786] mapped_file 40960 [ 737.472715][T19786] dirty 0 [ 737.475642][T19786] writeback 0 [ 737.479004][T19786] workingset_refault_anon 15049 [ 737.483845][T19786] workingset_refault_file 25247 [ 737.488705][T19786] swap 450560 [ 737.491975][T19786] pgpgin 765213 [ 737.495488][T19786] pgpgout 765156 [ 737.499049][T19786] pgfault 85518 [ 737.502501][T19786] pgmajfault 6400 [ 737.506123][T19786] inactive_anon 118784 [ 737.510211][T19786] active_anon 0 [ 737.513678][T19786] inactive_file 45056 [ 737.517661][T19786] active_file 57344 [ 737.521457][T19786] unevictable 0 [ 737.524965][T19786] hierarchical_memory_limit 314572800 [ 737.530344][T19786] hierarchical_memsw_limit 9223372036854771712 [ 737.536527][T19786] total_cache 143360 [ 737.540413][T19786] total_rss 73728 [ 737.544070][T19786] total_shmem 40960 [ 737.547922][T19786] total_mapped_file 40960 [ 737.552239][T19786] total_dirty 0 [ 737.555696][T19786] total_writeback 0 [ 737.559561][T19786] total_workingset_refault_anon 15049 [ 737.565079][T19786] total_workingset_refault_file 25247 [ 737.570459][T19786] total_swap 450560 [ 737.574259][T19786] total_pgpgin 765213 [ 737.578254][T19786] total_pgpgout 765156 [ 737.582337][T19786] total_pgfault 85518 [ 737.586318][T19786] total_pgmajfault 6400 [ 737.590496][T19786] total_inactive_anon 118784 [ 737.595202][T19786] total_active_anon 0 [ 737.599229][T19786] total_inactive_file 45056 02:20:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xa000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80000) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) (async, rerun: 32) sendfile(r3, r4, 0x0, 0xf03b00f7) (async, rerun: 32) sendfile(r3, r1, 0x0, 0x8000000000004) 02:20:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x11, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:17 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x968, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r1}, "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"}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 737.603826][T19786] total_active_file 57344 [ 737.608177][T19786] total_unevictable 0 [ 737.612272][T19786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19770,uid=0 [ 737.627567][T19786] Memory cgroup out of memory: Killed process 19786 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x12, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:17 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) 02:20:17 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x2d, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80000) creat(&(0x7f00000000c0)='./file0\x00', 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b00f7) (async) sendfile(r3, r1, 0x0, 0x8000000000004) 02:20:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1a, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 738.405501][T19914] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 738.416928][T19914] CPU: 0 PID: 19914 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 738.425617][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 738.435682][T19914] Call Trace: [ 738.439085][T19914] [ 738.442005][T19914] dump_stack_lvl+0xda/0x130 [ 738.446595][T19914] dump_stack+0x15/0x20 [ 738.450768][T19914] dump_header+0x95/0x3c0 [ 738.455106][T19914] oom_kill_process+0xe3/0x3e0 [ 738.459928][T19914] out_of_memory+0x9ca/0xc00 [ 738.464636][T19914] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 738.470695][T19914] mem_cgroup_out_of_memory+0x139/0x190 [ 738.476344][T19914] try_charge_memcg+0x75c/0xd20 [ 738.481238][T19914] ? __alloc_pages+0x193/0x340 [ 738.485998][T19914] charge_memcg+0x51/0x200 [ 738.490419][T19914] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 738.496477][T19914] __read_swap_cache_async+0x2fe/0x560 [ 738.501997][T19914] swap_cluster_readahead+0x2a3/0x4f0 [ 738.507406][T19914] swapin_readahead+0x8d/0x700 [ 738.512190][T19914] ? __filemap_get_folio+0x47c/0x500 [ 738.517474][T19914] ? swap_cache_get_folio+0x6e/0x210 [ 738.522759][T19914] do_swap_page+0x4d7/0x1550 [ 738.527472][T19914] ? pte_offset_map_nolock+0x11f/0x1c0 [ 738.532932][T19914] handle_mm_fault+0x9ec/0x2c10 [ 738.537785][T19914] ? mt_find+0x1d1/0x300 [ 738.542037][T19914] exc_page_fault+0x24d/0x650 [ 738.546744][T19914] asm_exc_page_fault+0x26/0x30 [ 738.551753][T19914] RIP: 0033:0x7fb036a9283c [ 738.556166][T19914] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 738.575856][T19914] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 738.581975][T19914] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 738.589939][T19914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 738.597903][T19914] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 738.605963][T19914] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b44e9 [ 738.614067][T19914] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 738.622302][T19914] [ 738.625413][T19914] memory: usage 307196kB, limit 307200kB, failcnt 69875 [ 738.632379][T19914] memory+swap: usage 307976kB, limit 9007199254740988kB, failcnt 0 [ 738.640308][T19914] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 738.647629][T19914] Memory cgroup stats for /syz1: [ 738.647791][T19914] cache 0 [ 738.655647][T19914] rss 0 [ 738.658442][T19914] shmem 0 [ 738.661378][T19914] mapped_file 0 [ 738.664832][T19914] dirty 0 [ 738.667791][T19914] writeback 0 [ 738.671068][T19914] workingset_refault_anon 19916 [ 738.675997][T19914] workingset_refault_file 5392 [ 738.680805][T19914] swap 806912 [ 738.684085][T19914] pgpgin 109788 [ 738.687634][T19914] pgpgout 109788 [ 738.691174][T19914] pgfault 87165 [ 738.694626][T19914] pgmajfault 8910 [ 738.698287][T19914] inactive_anon 0 [ 738.701920][T19914] active_anon 0 [ 738.705373][T19914] inactive_file 0 [ 738.709039][T19914] active_file 0 [ 738.712495][T19914] unevictable 0 [ 738.715986][T19914] hierarchical_memory_limit 314572800 [ 738.721396][T19914] hierarchical_memsw_limit 9223372036854771712 [ 738.727567][T19914] total_cache 0 [ 738.731026][T19914] total_rss 0 [ 738.734301][T19914] total_shmem 0 [ 738.737866][T19914] total_mapped_file 0 [ 738.741845][T19914] total_dirty 0 [ 738.745303][T19914] total_writeback 0 [ 738.749144][T19914] total_workingset_refault_anon 19916 [ 738.754597][T19914] total_workingset_refault_file 5392 [ 738.759924][T19914] total_swap 806912 [ 738.763802][T19914] total_pgpgin 109788 [ 738.767813][T19914] total_pgpgout 109788 [ 738.771879][T19914] total_pgfault 87165 [ 738.775942][T19914] total_pgmajfault 8910 [ 738.780124][T19914] total_inactive_anon 0 [ 738.784434][T19914] total_active_anon 0 [ 738.788534][T19914] total_inactive_file 0 [ 738.792694][T19914] total_active_file 0 [ 738.796738][T19914] total_unevictable 0 [ 738.800713][T19914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19914,uid=0 [ 738.816074][T19914] Memory cgroup out of memory: Killed process 19914 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:20:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xb000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:18 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) 02:20:18 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x170bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c849}, 0x4c010) sendfile(r1, r0, 0x0, 0x8000000000004) 02:20:18 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x3b, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x21, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x29, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:19 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) 02:20:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xfe, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x300, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 739.762428][T20204] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 739.773775][T20204] CPU: 0 PID: 20204 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 739.782539][T20204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 739.792604][T20204] Call Trace: [ 739.795879][T20204] [ 739.798805][T20204] dump_stack_lvl+0xda/0x130 [ 739.803482][T20204] dump_stack+0x15/0x20 [ 739.807643][T20204] dump_header+0x95/0x3c0 [ 739.811990][T20204] oom_kill_process+0xe3/0x3e0 [ 739.816817][T20204] out_of_memory+0x9ca/0xc00 [ 739.821441][T20204] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 739.827600][T20204] mem_cgroup_out_of_memory+0x139/0x190 [ 739.833215][T20204] try_charge_memcg+0x75c/0xd20 [ 739.838133][T20204] ? __alloc_pages+0x193/0x340 [ 739.843035][T20204] charge_memcg+0x51/0x200 [ 739.847471][T20204] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 739.853555][T20204] __read_swap_cache_async+0x2fe/0x560 [ 739.859155][T20204] swap_cluster_readahead+0x2a3/0x4f0 [ 739.864725][T20204] swapin_readahead+0x8d/0x700 [ 739.869502][T20204] ? __filemap_get_folio+0x47c/0x500 [ 739.874800][T20204] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 739.880356][T20204] ? swap_cache_get_folio+0x6e/0x210 [ 739.885652][T20204] do_swap_page+0x4d7/0x1550 [ 739.890356][T20204] ? pte_offset_map_nolock+0x11f/0x1c0 [ 739.895910][T20204] handle_mm_fault+0x9ec/0x2c10 [ 739.900795][T20204] ? mt_find+0x1d1/0x300 [ 739.905058][T20204] exc_page_fault+0x24d/0x650 [ 739.909798][T20204] asm_exc_page_fault+0x26/0x30 [ 739.914803][T20204] RIP: 0033:0x7fb036a9283c [ 739.919219][T20204] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 739.939115][T20204] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 739.945218][T20204] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 739.953203][T20204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 739.961237][T20204] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 739.969283][T20204] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b4a4c [ 739.977245][T20204] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 739.985218][T20204] [ 739.988314][T20204] memory: usage 307200kB, limit 307200kB, failcnt 70323 [ 739.995349][T20204] memory+swap: usage 307936kB, limit 9007199254740988kB, failcnt 0 [ 740.003295][T20204] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 740.010725][T20204] Memory cgroup stats for /syz1: [ 740.013391][T20204] cache 0 [ 740.021301][T20204] rss 4096 [ 740.024372][T20204] shmem 0 [ 740.027332][T20204] mapped_file 0 [ 740.030781][T20204] dirty 0 [ 740.033706][T20204] writeback 0 [ 740.036998][T20204] workingset_refault_anon 19958 [ 740.041933][T20204] workingset_refault_file 5392 [ 740.046714][T20204] swap 753664 [ 740.049986][T20204] pgpgin 109856 [ 740.053433][T20204] pgpgout 109853 [ 740.056992][T20204] pgfault 87298 [ 740.060504][T20204] pgmajfault 8925 [ 740.064126][T20204] inactive_anon 8192 [ 740.068028][T20204] active_anon 4096 [ 740.071864][T20204] inactive_file 0 [ 740.075478][T20204] active_file 0 [ 740.078958][T20204] unevictable 0 [ 740.082446][T20204] hierarchical_memory_limit 314572800 [ 740.087826][T20204] hierarchical_memsw_limit 9223372036854771712 [ 740.094107][T20204] total_cache 0 [ 740.097656][T20204] total_rss 4096 [ 740.101199][T20204] total_shmem 0 [ 740.104721][T20204] total_mapped_file 0 [ 740.108758][T20204] total_dirty 0 [ 740.112211][T20204] total_writeback 0 [ 740.116023][T20204] total_workingset_refault_anon 19958 [ 740.121410][T20204] total_workingset_refault_file 5392 [ 740.126703][T20204] total_swap 753664 [ 740.130494][T20204] total_pgpgin 109856 [ 740.134499][T20204] total_pgpgout 109853 [ 740.138623][T20204] total_pgfault 87298 [ 740.142658][T20204] total_pgmajfault 8925 [ 740.146832][T20204] total_inactive_anon 8192 [ 740.151242][T20204] total_active_anon 4096 [ 740.155520][T20204] total_inactive_file 0 [ 740.159705][T20204] total_active_file 0 [ 740.163684][T20204] total_unevictable 0 [ 740.167703][T20204] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20204,uid=0 [ 740.183009][T20204] Memory cgroup out of memory: Killed process 20204 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:20:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xc000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x600, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0x0, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:20 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x170bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c849}, 0x4c010) sendfile(r1, r0, 0x0, 0x8000000000004) (async) sendfile(r1, r0, 0x0, 0x8000000000004) 02:20:20 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x411804}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd28, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x5, 0x0, 0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 02:20:20 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x3e, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0x0, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x900, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:20 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x411804}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd28, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x5, 0x0, 0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 02:20:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0x0, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xd00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 741.115208][T20488] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 741.126605][T20488] CPU: 0 PID: 20488 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 741.135338][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 741.145521][T20488] Call Trace: [ 741.148803][T20488] [ 741.151735][T20488] dump_stack_lvl+0xda/0x130 [ 741.156700][T20488] dump_stack+0x15/0x20 [ 741.160886][T20488] dump_header+0x95/0x3c0 [ 741.165249][T20488] oom_kill_process+0xe3/0x3e0 [ 741.170044][T20488] out_of_memory+0x9ca/0xc00 [ 741.174663][T20488] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 741.180754][T20488] mem_cgroup_out_of_memory+0x139/0x190 [ 741.186404][T20488] try_charge_memcg+0x75c/0xd20 [ 741.191370][T20488] ? __alloc_pages+0x193/0x340 [ 741.196141][T20488] charge_memcg+0x51/0x200 [ 741.200573][T20488] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 741.206579][T20488] __read_swap_cache_async+0x2fe/0x560 [ 741.212267][T20488] swap_cluster_readahead+0x2a3/0x4f0 [ 741.217705][T20488] swapin_readahead+0x8d/0x700 [ 741.222553][T20488] ? __filemap_get_folio+0x47c/0x500 [ 741.228032][T20488] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 741.233697][T20488] ? swap_cache_get_folio+0x6e/0x210 [ 741.239012][T20488] do_swap_page+0x4d7/0x1550 [ 741.243770][T20488] ? pte_offset_map_nolock+0x11f/0x1c0 [ 741.249264][T20488] handle_mm_fault+0x9ec/0x2c10 [ 741.254219][T20488] ? mt_find+0x1d1/0x300 [ 741.258471][T20488] exc_page_fault+0x24d/0x650 [ 741.263329][T20488] asm_exc_page_fault+0x26/0x30 [ 741.268323][T20488] RIP: 0033:0x7fb036a9283c [ 741.272744][T20488] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 741.293264][T20488] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 741.299355][T20488] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 741.307464][T20488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 741.315455][T20488] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 741.323510][T20488] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b4f63 [ 741.331489][T20488] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 741.339477][T20488] [ 741.342608][T20488] memory: usage 307200kB, limit 307200kB, failcnt 70522 [ 741.349680][T20488] memory+swap: usage 307988kB, limit 9007199254740988kB, failcnt 0 [ 741.357607][T20488] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 741.364897][T20488] Memory cgroup stats for /syz1: [ 741.365055][T20488] cache 0 [ 741.372955][T20488] rss 4096 [ 741.376209][T20488] shmem 0 [ 741.379172][T20488] mapped_file 0 [ 741.382682][T20488] dirty 0 [ 741.385616][T20488] writeback 0 [ 741.388979][T20488] workingset_refault_anon 20004 [ 741.393824][T20488] workingset_refault_file 5392 [ 741.398639][T20488] swap 806912 [ 741.401922][T20488] pgpgin 109928 [ 741.405472][T20488] pgpgout 109926 [ 741.409074][T20488] pgfault 87433 [ 741.412526][T20488] pgmajfault 8947 [ 741.416155][T20488] inactive_anon 4096 [ 741.420075][T20488] active_anon 0 [ 741.423546][T20488] inactive_file 0 [ 741.427257][T20488] active_file 0 [ 741.430735][T20488] unevictable 0 [ 741.434196][T20488] hierarchical_memory_limit 314572800 [ 741.439600][T20488] hierarchical_memsw_limit 9223372036854771712 [ 741.445758][T20488] total_cache 0 [ 741.449242][T20488] total_rss 4096 [ 741.452791][T20488] total_shmem 0 [ 741.456254][T20488] total_mapped_file 0 [ 741.460313][T20488] total_dirty 0 [ 741.463765][T20488] total_writeback 0 [ 741.467600][T20488] total_workingset_refault_anon 20004 [ 741.472961][T20488] total_workingset_refault_file 5392 [ 741.478318][T20488] total_swap 806912 [ 741.482130][T20488] total_pgpgin 109928 [ 741.486143][T20488] total_pgpgout 109926 [ 741.490302][T20488] total_pgfault 87433 [ 741.494306][T20488] total_pgmajfault 8947 [ 741.498521][T20488] total_inactive_anon 4096 [ 741.503021][T20488] total_active_anon 0 [ 741.507037][T20488] total_inactive_file 0 [ 741.511202][T20488] total_active_file 0 [ 741.515182][T20488] total_unevictable 0 [ 741.519192][T20488] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20488,uid=0 [ 741.534559][T20488] Memory cgroup out of memory: Killed process 20488 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 741.575458][T20461] syz-executor.3 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 741.589125][T20461] CPU: 1 PID: 20461 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 741.597949][T20461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 741.608056][T20461] Call Trace: [ 741.611323][T20461] [ 741.614251][T20461] dump_stack_lvl+0xda/0x130 [ 741.618875][T20461] dump_stack+0x15/0x20 [ 741.623027][T20461] dump_header+0x95/0x3c0 [ 741.627362][T20461] oom_kill_process+0xe3/0x3e0 [ 741.632130][T20461] out_of_memory+0x9ca/0xc00 [ 741.636806][T20461] mem_cgroup_out_of_memory+0x139/0x190 [ 741.642361][T20461] try_charge_memcg+0x75c/0xd20 [ 741.647255][T20461] obj_cgroup_charge_pages+0xab/0x130 [ 741.652625][T20461] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 741.658217][T20461] __alloc_pages+0x1bb/0x340 [ 741.662853][T20461] alloc_pages+0x3e1/0x4e0 [ 741.667274][T20461] __vmalloc_node_range+0x6d2/0xea0 [ 741.672491][T20461] kvmalloc_node+0x121/0x160 [ 741.677083][T20461] ? xt_alloc_table_info+0x3d/0x80 [ 741.682212][T20461] xt_alloc_table_info+0x3d/0x80 [ 741.687153][T20461] do_arpt_set_ctl+0x615/0x1390 [ 741.691997][T20461] ? enqueue_task_fair+0x678/0x850 [ 741.697138][T20461] ? check_preempt_wakeup+0x187/0x320 [ 741.702533][T20461] ? _raw_spin_unlock_bh+0x36/0x40 [ 741.707641][T20461] ? lock_sock_nested+0x10e/0x130 [ 741.712705][T20461] ? tcp_release_cb+0xfe/0x340 [ 741.717499][T20461] nf_setsockopt+0x18d/0x1b0 [ 741.722082][T20461] ip_setsockopt+0xe6/0x100 [ 741.726579][T20461] tcp_setsockopt+0x90/0xa0 [ 741.731162][T20461] sock_common_setsockopt+0x61/0x70 [ 741.736427][T20461] ? sock_common_recvmsg+0xe0/0xe0 [ 741.741537][T20461] __sys_setsockopt+0x1c9/0x230 [ 741.746472][T20461] __x64_sys_setsockopt+0x66/0x80 [ 741.751549][T20461] do_syscall_64+0x41/0xc0 [ 741.755969][T20461] ? syscall_exit_to_user_mode+0x26/0x140 [ 741.761697][T20461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 741.767596][T20461] RIP: 0033:0x7f074fb53389 [ 741.772062][T20461] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.791833][T20461] RSP: 002b:00007f074eec6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 741.800239][T20461] RAX: ffffffffffffffda RBX: 00007f074fc72f80 RCX: 00007f074fb53389 [ 741.808201][T20461] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 741.816163][T20461] RBP: 00007f074fb9e493 R08: 0000000000000438 R09: 0000000000000000 [ 741.824152][T20461] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.832114][T20461] R13: 00007ffc045c9d1f R14: 00007f074eec6300 R15: 0000000000022000 [ 741.840081][T20461] [ 741.843152][T20461] memory: usage 307200kB, limit 307200kB, failcnt 59997 [ 741.850279][T20461] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 741.858194][T20461] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 741.865714][T20461] Memory cgroup stats for /syz3: [ 741.868830][T20461] cache 77824 [ 741.877259][T20461] rss 0 [ 741.880108][T20461] shmem 0 [ 741.883197][T20461] mapped_file 0 [ 741.886720][T20461] dirty 4096 [ 741.889979][T20461] writeback 8192 [ 741.893595][T20461] workingset_refault_anon 15195 [ 741.898470][T20461] workingset_refault_file 26470 [ 741.903361][T20461] swap 405504 [ 741.906700][T20461] pgpgin 771990 [ 741.910254][T20461] pgpgout 771969 [ 741.913786][T20461] pgfault 86058 [ 741.917330][T20461] pgmajfault 6467 [ 741.920961][T20461] inactive_anon 0 [ 741.924591][T20461] active_anon 0 [ 741.928062][T20461] inactive_file 73728 [ 741.932065][T20461] active_file 4096 [ 741.935788][T20461] unevictable 0 [ 741.939265][T20461] hierarchical_memory_limit 314572800 [ 741.944634][T20461] hierarchical_memsw_limit 9223372036854771712 [ 741.950884][T20461] total_cache 77824 [ 741.954683][T20461] total_rss 0 [ 741.958007][T20461] total_shmem 0 [ 741.961500][T20461] total_mapped_file 0 [ 741.965615][T20461] total_dirty 4096 [ 741.969374][T20461] total_writeback 8192 [ 741.973468][T20461] total_workingset_refault_anon 15195 [ 741.978941][T20461] total_workingset_refault_file 26470 [ 741.984526][T20461] total_swap 405504 [ 741.988373][T20461] total_pgpgin 771990 [ 741.992466][T20461] total_pgpgout 771969 [ 741.996622][T20461] total_pgfault 86058 [ 742.000609][T20461] total_pgmajfault 6467 [ 742.004933][T20461] total_inactive_anon 0 [ 742.009248][T20461] total_active_anon 0 [ 742.013294][T20461] total_inactive_file 73728 [ 742.017821][T20461] total_active_file 4096 [ 742.022108][T20461] total_unevictable 0 02:20:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xd000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:22 executing program 5: syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x411804}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd28, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x5, 0x0, 0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 02:20:22 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b00f7) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x170bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c849}, 0x4c010) (async) sendfile(r1, r0, 0x0, 0x8000000000004) 02:20:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1100, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 742.026100][T20461] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20459,uid=0 [ 742.041625][T20461] Memory cgroup out of memory: Killed process 20459 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:22 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x85, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1200, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:22 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) 02:20:22 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x800) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x20810, r3, 0x5674f000) sendfile(r1, r0, 0x0, 0x8000000000004) move_mount(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x22) 02:20:22 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) 02:20:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 742.983571][T20841] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 742.995006][T20841] CPU: 0 PID: 20841 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 743.003682][T20841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 743.013917][T20841] Call Trace: [ 743.017187][T20841] [ 743.020117][T20841] dump_stack_lvl+0xda/0x130 [ 743.024707][T20841] dump_stack+0x15/0x20 [ 743.028878][T20841] dump_header+0x95/0x3c0 [ 743.033208][T20841] oom_kill_process+0xe3/0x3e0 [ 743.037986][T20841] out_of_memory+0x9ca/0xc00 [ 743.042576][T20841] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 743.048714][T20841] mem_cgroup_out_of_memory+0x139/0x190 [ 743.054258][T20841] try_charge_memcg+0x75c/0xd20 [ 743.059245][T20841] ? __alloc_pages+0x193/0x340 [ 743.064023][T20841] charge_memcg+0x51/0x200 [ 743.068559][T20841] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 743.074574][T20841] __read_swap_cache_async+0x2fe/0x560 [ 743.080104][T20841] swap_cluster_readahead+0x488/0x4f0 [ 743.085583][T20841] swapin_readahead+0x8d/0x700 [ 743.090371][T20841] ? __filemap_get_folio+0x47c/0x500 [ 743.095679][T20841] ? _raw_spin_unlock+0x26/0x40 [ 743.100551][T20841] ? swap_cache_get_folio+0x6e/0x210 [ 743.105928][T20841] do_swap_page+0x4d7/0x1550 [ 743.110616][T20841] ? pte_offset_map_nolock+0x11f/0x1c0 [ 743.116144][T20841] handle_mm_fault+0x9ec/0x2c10 [ 743.121025][T20841] ? mt_find+0x1d1/0x300 [ 743.125280][T20841] exc_page_fault+0x24d/0x650 [ 743.130023][T20841] asm_exc_page_fault+0x26/0x30 [ 743.134929][T20841] RIP: 0033:0x7fb036a92810 [ 743.139335][T20841] Code: 48 f7 f1 48 03 44 24 68 49 39 c4 4c 0f 42 e0 83 3d 8c 61 17 00 00 0f 8e 96 fe ff ff e8 99 02 ff ff 49 39 c4 0f 82 4a 01 00 00 <69> 3d 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 [ 743.159123][T20841] RSP: 002b:00007ffec69faf60 EFLAGS: 00010206 [ 743.165222][T20841] RAX: 00000000000b563b RBX: 00007fb036c08980 RCX: 00000000000b5270 [ 743.173204][T20841] RDX: 00000000000003cb RSI: 00007ffec69faf40 RDI: 7fffffffffffffff [ 743.181176][T20841] RBP: 00007fb036c08980 R08: 0000000000000010 R09: 00007ffec6a550b0 [ 743.189246][T20841] R10: 00007ffec6a55080 R11: 000000000001ea86 R12: 00000000000b563e [ 743.197454][T20841] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 743.205507][T20841] [ 743.208677][T20841] memory: usage 307200kB, limit 307200kB, failcnt 70642 [ 743.215614][T20841] memory+swap: usage 307972kB, limit 9007199254740988kB, failcnt 0 [ 743.223530][T20841] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 743.230854][T20841] Memory cgroup stats for /syz1: [ 743.231012][T20841] cache 0 [ 743.238952][T20841] rss 4096 [ 743.242042][T20841] shmem 0 [ 743.244974][T20841] mapped_file 0 [ 743.248487][T20841] dirty 0 [ 743.251418][T20841] writeback 12288 [ 743.255084][T20841] workingset_refault_anon 20057 [ 743.259951][T20841] workingset_refault_file 5392 [ 743.264711][T20841] swap 802816 [ 743.268165][T20841] pgpgin 110007 [ 743.271723][T20841] pgpgout 110004 [ 743.275326][T20841] pgfault 87563 [ 743.278812][T20841] pgmajfault 8967 [ 743.282442][T20841] inactive_anon 12288 [ 743.286417][T20841] active_anon 0 [ 743.289968][T20841] inactive_file 0 [ 743.293585][T20841] active_file 0 [ 743.297072][T20841] unevictable 0 [ 743.300529][T20841] hierarchical_memory_limit 314572800 [ 743.305908][T20841] hierarchical_memsw_limit 9223372036854771712 [ 743.312081][T20841] total_cache 0 [ 743.315561][T20841] total_rss 12288 [ 743.319286][T20841] total_shmem 0 [ 743.322742][T20841] total_mapped_file 0 [ 743.326749][T20841] total_dirty 0 [ 743.330202][T20841] total_writeback 8192 [ 743.334285][T20841] total_workingset_refault_anon 20057 [ 743.339685][T20841] total_workingset_refault_file 5392 [ 743.345049][T20841] total_swap 790528 [ 743.348914][T20841] total_pgpgin 110007 [ 743.352883][T20841] total_pgpgout 110001 [ 743.356995][T20841] total_pgfault 87561 [ 743.361044][T20841] total_pgmajfault 8967 [ 743.365188][T20841] total_inactive_anon 0 [ 743.369357][T20841] total_active_anon 0 [ 743.373359][T20841] total_inactive_file 0 [ 743.377529][T20841] total_active_file 0 [ 743.381501][T20841] total_unevictable 0 [ 743.385477][T20841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20841,uid=0 [ 743.400886][T20841] Memory cgroup out of memory: Killed process 20841 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8868kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 743.420348][T20902] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 743.431715][T20902] CPU: 0 PID: 20902 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 743.440433][T20902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 743.450481][T20902] Call Trace: [ 743.453791][T20902] [ 743.456731][T20902] dump_stack_lvl+0xda/0x130 [ 743.461382][T20902] dump_stack+0x15/0x20 [ 743.465531][T20902] dump_header+0x95/0x3c0 [ 743.469927][T20902] oom_kill_process+0xe3/0x3e0 [ 743.474687][T20902] out_of_memory+0x9ca/0xc00 [ 743.479275][T20902] mem_cgroup_out_of_memory+0x139/0x190 [ 743.484817][T20902] try_charge_memcg+0x75c/0xd20 [ 743.489663][T20902] ? __alloc_pages+0x193/0x340 [ 743.494427][T20902] charge_memcg+0x51/0x200 [ 743.498836][T20902] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 743.504810][T20902] __read_swap_cache_async+0x2fe/0x560 [ 743.510335][T20902] swap_cluster_readahead+0x2a3/0x4f0 [ 743.515708][T20902] swapin_readahead+0x8d/0x700 [ 743.520528][T20902] ? __filemap_get_folio+0x47c/0x500 [ 743.525949][T20902] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 743.531489][T20902] ? swap_cache_get_folio+0x6e/0x210 [ 743.536811][T20902] do_swap_page+0x4d7/0x1550 [ 743.541395][T20902] ? pte_offset_map_nolock+0x11f/0x1c0 [ 743.546851][T20902] handle_mm_fault+0x9ec/0x2c10 [ 743.551773][T20902] ? mt_find+0x1d1/0x300 [ 743.556083][T20902] exc_page_fault+0x24d/0x650 [ 743.560824][T20902] asm_exc_page_fault+0x26/0x30 [ 743.565671][T20902] RIP: 0033:0x7f074fafd481 [ 743.570084][T20902] Code: 00 00 0f 84 71 02 00 00 41 80 bc 24 94 00 00 00 01 19 c0 83 e0 f8 83 c0 0a 09 c5 bf 0d f0 ad 0b e8 e4 14 ff ff 41 8b 7c 24 24 da 14 ff ff 41 8b 7c 24 28 e8 d0 14 ff ff 44 89 ef e8 c8 14 ff [ 743.589702][T20902] RSP: 002b:00007ffc045c9d50 EFLAGS: 00010283 [ 743.595760][T20902] RAX: 0000001b2c223768 RBX: 00007f074fc72f80 RCX: 0000001b2c220000 [ 743.603737][T20902] RDX: 0000001b2c22376c RSI: 0000000000000000 RDI: 0000000000000002 [ 743.611767][T20902] RBP: 0000000000000001 R08: 0000001b2c620000 R09: 00007ffc045f20b0 [ 743.619730][T20902] R10: 00007ffc045f2080 R11: 000000000001ea9a R12: 00007f074fc72f80 [ 743.627690][T20902] R13: 00000000000003e7 R14: 00007f074fc731f0 R15: 0000000000000032 [ 743.635714][T20902] [ 743.638852][T20902] memory: usage 307200kB, limit 307200kB, failcnt 61591 [ 743.645781][T20902] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 743.653686][T20902] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 743.661029][T20902] Memory cgroup stats for /syz3: [ 743.661167][T20902] cache 16384 [ 743.669404][T20902] rss 0 [ 743.672163][T20902] shmem 0 [ 743.675084][T20902] mapped_file 0 [ 743.678602][T20902] dirty 4096 [ 743.681794][T20902] writeback 8192 [ 743.685327][T20902] workingset_refault_anon 15304 [ 743.690183][T20902] workingset_refault_file 26779 [ 743.695028][T20902] swap 389120 [ 743.698343][T20902] pgpgin 774078 [ 743.701972][T20902] pgpgout 774072 [ 743.705589][T20902] pgfault 86453 [ 743.709072][T20902] pgmajfault 6525 [ 743.712722][T20902] inactive_anon 8192 [ 743.716642][T20902] active_anon 0 [ 743.720159][T20902] inactive_file 12288 [ 743.724161][T20902] active_file 4096 [ 743.727924][T20902] unevictable 0 [ 743.731380][T20902] hierarchical_memory_limit 314572800 [ 743.736804][T20902] hierarchical_memsw_limit 9223372036854771712 [ 743.742978][T20902] total_cache 16384 [ 743.746886][T20902] total_rss 8192 [ 743.750442][T20902] total_shmem 0 [ 743.753909][T20902] total_mapped_file 0 [ 743.757920][T20902] total_dirty 4096 [ 743.761634][T20902] total_writeback 8192 [ 743.765703][T20902] total_workingset_refault_anon 15304 [ 743.771189][T20902] total_workingset_refault_file 26779 [ 743.776607][T20902] total_swap 389120 [ 743.780409][T20902] total_pgpgin 774078 [ 743.784395][T20902] total_pgpgout 774072 [ 743.788484][T20902] total_pgfault 86450 [ 743.792475][T20902] total_pgmajfault 6525 [ 743.796684][T20902] total_inactive_anon 8192 [ 743.801149][T20902] total_active_anon 0 [ 743.805118][T20902] total_inactive_file 12288 [ 743.809635][T20902] total_active_file 4096 [ 743.814038][T20902] total_unevictable 0 [ 743.818084][T20902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20902,uid=0 02:20:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xe000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1a00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:23 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) 02:20:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, 0x0, 0x0) 02:20:23 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x800) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x20810, r3, 0x5674f000) sendfile(r1, r0, 0x0, 0x8000000000004) move_mount(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x22) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b00f7) (async) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x800) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x20810, r3, 0x5674f000) (async) sendfile(r1, r0, 0x0, 0x8000000000004) (async) move_mount(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x22) (async) [ 743.833483][T20902] Memory cgroup out of memory: Killed process 20902 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:24 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x88, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:24 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socketpair(0x1e, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000540)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x9, 0x300) readv(r5, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/87, 0x57}], 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="240725bd7000fedbdf25020000000800030001000000ed4abe1c3ba163252e4fd76bb944b361d8e296a4cf2c9fe78b0912f2ad9bdd6d2dad31679d125e00742e54d914a09872c6f6fc"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x200000d3) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x90, 0x2, 0x80, 0x4, 0xffff]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x60000004) 02:20:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, 0x0, 0x0) 02:20:24 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b00f7) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x800) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x20810, r3, 0x5674f000) (async) sendfile(r1, r0, 0x0, 0x8000000000004) (async) move_mount(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x22) 02:20:24 executing program 5: syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socketpair(0x1e, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000540)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2) syz_open_dev$vcsa(&(0x7f0000000680), 0x9, 0x300) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x9, 0x300) readv(r5, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/87, 0x57}], 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="240725bd7000fedbdf25020000000800030001000000ed4abe1c3ba163252e4fd76bb944b361d8e296a4cf2c9fe78b0912f2ad9bdd6d2dad31679d125e00742e54d914a09872c6f6fc"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x200000d3) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x90, 0x2, 0x80, 0x4, 0xffff]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x60000004) 02:20:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, 0x0, 0x0) [ 744.681839][T21027] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 744.693291][T21027] CPU: 0 PID: 21027 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 744.702090][T21027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 744.712150][T21027] Call Trace: [ 744.715431][T21027] [ 744.718365][T21027] dump_stack_lvl+0xda/0x130 [ 744.722975][T21027] dump_stack+0x15/0x20 [ 744.727135][T21027] dump_header+0x95/0x3c0 [ 744.731518][T21027] oom_kill_process+0xe3/0x3e0 [ 744.736335][T21027] out_of_memory+0x9ca/0xc00 [ 744.740950][T21027] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 744.747019][T21027] mem_cgroup_out_of_memory+0x139/0x190 [ 744.752581][T21027] try_charge_memcg+0x75c/0xd20 [ 744.757451][T21027] ? __alloc_pages+0x193/0x340 [ 744.762226][T21027] charge_memcg+0x51/0x200 [ 744.766726][T21027] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 744.772715][T21027] __read_swap_cache_async+0x2fe/0x560 [ 744.778296][T21027] swap_cluster_readahead+0x2a3/0x4f0 [ 744.783734][T21027] swapin_readahead+0x8d/0x700 [ 744.788502][T21027] ? __filemap_get_folio+0x47c/0x500 [ 744.793805][T21027] ? get_swap_device+0xb3/0x1f0 [ 744.798704][T21027] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 744.804248][T21027] ? swap_cache_get_folio+0x6e/0x210 [ 744.809555][T21027] do_swap_page+0x4d7/0x1550 [ 744.814174][T21027] ? pte_offset_map_nolock+0x11f/0x1c0 [ 744.819813][T21027] handle_mm_fault+0x9ec/0x2c10 [ 744.824727][T21027] ? mt_find+0x1d1/0x300 [ 744.828989][T21027] exc_page_fault+0x24d/0x650 [ 744.833731][T21027] asm_exc_page_fault+0x26/0x30 [ 744.838677][T21027] RIP: 0033:0x7fb036a9283c [ 744.843089][T21027] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 744.862861][T21027] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 744.869048][T21027] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 744.877187][T21027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 744.885176][T21027] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 744.893147][T21027] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b5d2c [ 744.901169][T21027] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 744.909125][T21027] [ 744.912194][T21027] memory: usage 307200kB, limit 307200kB, failcnt 70768 [ 744.919146][T21027] memory+swap: usage 307964kB, limit 9007199254740988kB, failcnt 0 [ 744.927063][T21027] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 744.934331][T21027] Memory cgroup stats for /syz1: [ 744.934537][T21027] cache 0 [ 744.942392][T21027] rss 4096 [ 744.945392][T21027] shmem 0 [ 744.948410][T21027] mapped_file 0 [ 744.951989][T21027] dirty 0 [ 744.955005][T21027] writeback 8192 [ 744.958611][T21027] workingset_refault_anon 20101 [ 744.963546][T21027] workingset_refault_file 5392 [ 744.968333][T21027] swap 782336 [ 744.971607][T21027] pgpgin 110077 [ 744.975060][T21027] pgpgout 110074 [ 744.978627][T21027] pgfault 87705 [ 744.982071][T21027] pgmajfault 8986 [ 744.985681][T21027] inactive_anon 0 [ 744.989338][T21027] active_anon 0 [ 744.992939][T21027] inactive_file 0 [ 744.996574][T21027] active_file 0 [ 745.000072][T21027] unevictable 0 [ 745.003535][T21027] hierarchical_memory_limit 314572800 [ 745.008961][T21027] hierarchical_memsw_limit 9223372036854771712 [ 745.015203][T21027] total_cache 0 [ 745.018701][T21027] total_rss 4096 [ 745.022241][T21027] total_shmem 0 [ 745.025679][T21027] total_mapped_file 0 [ 745.029834][T21027] total_dirty 0 [ 745.033300][T21027] total_writeback 8192 [ 745.037416][T21027] total_workingset_refault_anon 20101 [ 745.042836][T21027] total_workingset_refault_file 5392 [ 745.048155][T21027] total_swap 782336 [ 745.051961][T21027] total_pgpgin 110077 [ 745.055954][T21027] total_pgpgout 110074 [ 745.060027][T21027] total_pgfault 87705 [ 745.064056][T21027] total_pgmajfault 8986 [ 745.068222][T21027] total_inactive_anon 0 [ 745.072369][T21027] total_active_anon 0 [ 745.076345][T21027] total_inactive_file 0 [ 745.080556][T21027] total_active_file 0 [ 745.084526][T21027] total_unevictable 0 [ 745.088513][T21027] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21027,uid=0 [ 745.103830][T21027] Memory cgroup out of memory: Killed process 21027 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 745.148907][T21349] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 745.159214][T21349] CPU: 1 PID: 21349 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 745.167910][T21349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 745.177961][T21349] Call Trace: [ 745.181356][T21349] [ 745.184281][T21349] dump_stack_lvl+0xda/0x130 [ 745.188888][T21349] dump_stack+0x15/0x20 [ 745.193047][T21349] dump_header+0x95/0x3c0 [ 745.197464][T21349] oom_kill_process+0xe3/0x3e0 [ 745.202367][T21349] out_of_memory+0x9ca/0xc00 [ 745.206996][T21349] mem_cgroup_out_of_memory+0x139/0x190 [ 745.212725][T21349] try_charge_memcg+0x75c/0xd20 [ 745.217725][T21349] ? read_pages+0x320/0x560 [ 745.222221][T21349] charge_memcg+0x51/0x200 [ 745.226682][T21349] __mem_cgroup_charge+0x29/0xa0 [ 745.231665][T21349] __filemap_add_folio+0x454/0x730 [ 745.236798][T21349] ? workingset_activation+0x2e0/0x2e0 [ 745.242304][T21349] filemap_add_folio+0x6f/0x150 [ 745.247157][T21349] filemap_get_pages+0x5cf/0xea0 [ 745.252097][T21349] filemap_splice_read+0x23a/0x810 [ 745.257195][T21349] ? pipe_unlock+0x3b/0x40 [ 745.261639][T21349] ext4_file_splice_read+0x95/0xb0 [ 745.266861][T21349] ? ext4_release_file+0x1c0/0x1c0 [ 745.271958][T21349] splice_direct_to_actor+0x28c/0x690 [ 745.277326][T21349] ? direct_file_splice_eof+0x70/0x70 [ 745.282743][T21349] do_splice_direct+0x10d/0x190 [ 745.287651][T21349] ? do_splice_direct+0x190/0x190 [ 745.292752][T21349] do_sendfile+0x3b6/0x9a0 [ 745.297150][T21349] __x64_sys_sendfile64+0x110/0x150 [ 745.302330][T21349] do_syscall_64+0x41/0xc0 [ 745.306855][T21349] ? syscall_exit_to_user_mode+0x26/0x140 [ 745.312589][T21349] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.318468][T21349] RIP: 0033:0x7f074fb53389 [ 745.323006][T21349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 745.342596][T21349] RSP: 002b:00007f074ee84168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 745.351001][T21349] RAX: ffffffffffffffda RBX: 00007f074fc73120 RCX: 00007f074fb53389 [ 745.358955][T21349] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 745.366918][T21349] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 745.374874][T21349] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 745.382834][T21349] R13: 00007ffc045c9d1f R14: 00007f074ee84300 R15: 0000000000022000 [ 745.390795][T21349] [ 745.393985][T21349] memory: usage 307200kB, limit 307200kB, failcnt 62841 [ 745.401084][T21349] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 745.409122][T21349] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 745.416406][T21349] Memory cgroup stats for /syz3: [ 745.418001][T21349] cache 16384 [ 745.426206][T21349] rss 0 [ 745.429066][T21349] shmem 0 [ 745.432095][T21349] mapped_file 0 [ 745.435590][T21349] dirty 4096 [ 745.438803][T21349] writeback 0 [ 745.442076][T21349] workingset_refault_anon 15379 [ 745.446936][T21349] workingset_refault_file 26894 [ 745.451778][T21349] swap 471040 [ 745.455048][T21349] pgpgin 775408 [ 745.458593][T21349] pgpgout 775403 [ 745.462131][T21349] pgfault 86818 [ 745.465579][T21349] pgmajfault 6551 [ 745.469225][T21349] inactive_anon 4096 [ 745.473169][T21349] active_anon 0 [ 745.476823][T21349] inactive_file 16384 [ 745.480848][T21349] active_file 0 [ 745.484300][T21349] unevictable 0 [ 745.487782][T21349] hierarchical_memory_limit 314572800 [ 745.493317][T21349] hierarchical_memsw_limit 9223372036854771712 [ 745.499544][T21349] total_cache 16384 [ 745.503375][T21349] total_rss 0 [ 745.506664][T21349] total_shmem 0 [ 745.510146][T21349] total_mapped_file 0 [ 745.514110][T21349] total_dirty 4096 [ 745.517844][T21349] total_writeback 0 [ 745.521708][T21349] total_workingset_refault_anon 15379 [ 745.527094][T21349] total_workingset_refault_file 26894 [ 745.532512][T21349] total_swap 471040 [ 745.536309][T21349] total_pgpgin 775408 [ 745.540303][T21349] total_pgpgout 775403 [ 745.544360][T21349] total_pgfault 86818 [ 745.548351][T21349] total_pgmajfault 6551 [ 745.552625][T21349] total_inactive_anon 4096 [ 745.557047][T21349] total_active_anon 0 [ 745.561092][T21349] total_inactive_file 16384 [ 745.565583][T21349] total_active_file 0 [ 745.569583][T21349] total_unevictable 0 [ 745.573557][T21349] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21217,uid=0 [ 745.588888][T21349] Memory cgroup out of memory: Killed process 21217 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xf000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2100, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)="5080d92e04efc7c675e85256bc2aca667b427b1782b2dc3eab79316f7af1edcd3c8baf3fdb2437485c4bf28ae1bfb2a9beefbe6435301329e3112e042ce34ff66d5d992d8e7be5cac1b5f0a4dcc7e2ba11431fd8f8f59d82016e028aeb30668696006f075694961439fe652604a81fc84f18eadc839dfab91dd62d4442c5de98267d24a3afd9a7a90551f495af10685a50f0b524d81528783e5d1b988d287185d72b531baf4dede111924ba95cd4a16c54a6d1f507072a6584bcb840046e74100b9842481356b5c569d587cf39992379713e8fcfdf8338758e19b68903d5e4ad52dc44d8c71b25b20cfbdcb81f2822", 0xef, r0}, 0x68) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) 02:20:25 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x2c, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:25 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) socketpair(0x1e, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000540)) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x9, 0x300) readv(r5, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/87, 0x57}], 0x4) (async) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="240725bd7000fedbdf25020000000800030001000000ed4abe1c3ba163252e4fd76bb944b361d8e296a4cf2c9fe78b0912f2ad9bdd6d2dad31679d125e00742e54d914a09872c6f6fc"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x200000d3) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x90, 0x2, 0x80, 0x4, 0xffff]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x60000004) 02:20:25 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0xfe, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2900, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:25 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) listen(r1, 0xfff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000140)=0xfffffffa, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) socket$key(0xf, 0x3, 0x2) accept(r1, &(0x7f0000000200)=@l2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)="5080d92e04efc7c675e85256bc2aca667b427b1782b2dc3eab79316f7af1edcd3c8baf3fdb2437485c4bf28ae1bfb2a9beefbe6435301329e3112e042ce34ff66d5d992d8e7be5cac1b5f0a4dcc7e2ba11431fd8f8f59d82016e028aeb30668696006f075694961439fe652604a81fc84f18eadc839dfab91dd62d4442c5de98267d24a3afd9a7a90551f495af10685a50f0b524d81528783e5d1b988d287185d72b531baf4dede111924ba95cd4a16c54a6d1f507072a6584bcb840046e74100b9842481356b5c569d587cf39992379713e8fcfdf8338758e19b68903d5e4ad52dc44d8c71b25b20cfbdcb81f2822", 0xef, r0}, 0x68) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)="5080d92e04efc7c675e85256bc2aca667b427b1782b2dc3eab79316f7af1edcd3c8baf3fdb2437485c4bf28ae1bfb2a9beefbe6435301329e3112e042ce34ff66d5d992d8e7be5cac1b5f0a4dcc7e2ba11431fd8f8f59d82016e028aeb30668696006f075694961439fe652604a81fc84f18eadc839dfab91dd62d4442c5de98267d24a3afd9a7a90551f495af10685a50f0b524d81528783e5d1b988d287185d72b531baf4dede111924ba95cd4a16c54a6d1f507072a6584bcb840046e74100b9842481356b5c569d587cf39992379713e8fcfdf8338758e19b68903d5e4ad52dc44d8c71b25b20cfbdcb81f2822", 0xef, r0}, 0x68) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) sendfile(r2, r3, 0x0, 0xf03b00f7) (async) sendfile(r2, r1, 0x0, 0x8000000000004) (async) 02:20:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x3f00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x4000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xfeff, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x10000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)="5080d92e04efc7c675e85256bc2aca667b427b1782b2dc3eab79316f7af1edcd3c8baf3fdb2437485c4bf28ae1bfb2a9beefbe6435301329e3112e042ce34ff66d5d992d8e7be5cac1b5f0a4dcc7e2ba11431fd8f8f59d82016e028aeb30668696006f075694961439fe652604a81fc84f18eadc839dfab91dd62d4442c5de98267d24a3afd9a7a90551f495af10685a50f0b524d81528783e5d1b988d287185d72b531baf4dede111924ba95cd4a16c54a6d1f507072a6584bcb840046e74100b9842481356b5c569d587cf39992379713e8fcfdf8338758e19b68903d5e4ad52dc44d8c71b25b20cfbdcb81f2822", 0xef, r0}, 0x68) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)="5080d92e04efc7c675e85256bc2aca667b427b1782b2dc3eab79316f7af1edcd3c8baf3fdb2437485c4bf28ae1bfb2a9beefbe6435301329e3112e042ce34ff66d5d992d8e7be5cac1b5f0a4dcc7e2ba11431fd8f8f59d82016e028aeb30668696006f075694961439fe652604a81fc84f18eadc839dfab91dd62d4442c5de98267d24a3afd9a7a90551f495af10685a50f0b524d81528783e5d1b988d287185d72b531baf4dede111924ba95cd4a16c54a6d1f507072a6584bcb840046e74100b9842481356b5c569d587cf39992379713e8fcfdf8338758e19b68903d5e4ad52dc44d8c71b25b20cfbdcb81f2822", 0xef, r0}, 0x68) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) sendfile(r2, r3, 0x0, 0xf03b00f7) (async) sendfile(r2, r1, 0x0, 0x8000000000004) (async) 02:20:26 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) (async, rerun: 32) listen(r1, 0xfff) (async, rerun: 32) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000140)=0xfffffffa, 0x4) (async) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) socket$key(0xf, 0x3, 0x2) (async) accept(r1, &(0x7f0000000200)=@l2, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xfffe, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:26 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x2c, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) [ 747.065272][T21872] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 747.075517][T21872] CPU: 0 PID: 21872 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 747.084195][T21872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 747.094249][T21872] Call Trace: [ 747.097530][T21872] [ 747.100454][T21872] dump_stack_lvl+0xda/0x130 [ 747.105049][T21872] dump_stack+0x15/0x20 [ 747.109203][T21872] dump_header+0x95/0x3c0 [ 747.118683][T21872] oom_kill_process+0xe3/0x3e0 [ 747.123479][T21872] out_of_memory+0x9ca/0xc00 [ 747.128082][T21872] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 747.134156][T21872] mem_cgroup_out_of_memory+0x139/0x190 [ 747.139720][T21872] try_charge_memcg+0x75c/0xd20 [ 747.144581][T21872] ? read_pages+0x320/0x560 [ 747.149089][T21872] charge_memcg+0x51/0x200 [ 747.153525][T21872] __mem_cgroup_charge+0x29/0xa0 [ 747.158471][T21872] __filemap_add_folio+0x454/0x730 [ 747.163585][T21872] ? workingset_activation+0x2e0/0x2e0 [ 747.169142][T21872] filemap_add_folio+0x6f/0x150 [ 747.173995][T21872] filemap_get_pages+0x5cf/0xea0 [ 747.178940][T21872] filemap_splice_read+0x23a/0x810 [ 747.184058][T21872] ext4_file_splice_read+0x95/0xb0 [ 747.189267][T21872] ? ext4_release_file+0x1c0/0x1c0 [ 747.194377][T21872] splice_direct_to_actor+0x28c/0x690 [ 747.199847][T21872] ? direct_file_splice_eof+0x70/0x70 [ 747.205221][T21872] do_splice_direct+0x10d/0x190 [ 747.210081][T21872] ? do_splice_direct+0x190/0x190 [ 747.215107][T21872] do_sendfile+0x3b6/0x9a0 [ 747.219515][T21872] __x64_sys_sendfile64+0x110/0x150 [ 747.224705][T21872] do_syscall_64+0x41/0xc0 [ 747.229124][T21872] ? syscall_exit_to_user_mode+0x26/0x140 [ 747.234839][T21872] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.240733][T21872] RIP: 0033:0x7f074fb53389 [ 747.245138][T21872] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.264757][T21872] RSP: 002b:00007f074eea5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 747.273170][T21872] RAX: ffffffffffffffda RBX: 00007f074fc73050 RCX: 00007f074fb53389 [ 747.281133][T21872] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 747.289097][T21872] RBP: 00007f074fb9e493 R08: 0000000000000000 R09: 0000000000000000 [ 747.297057][T21872] R10: 00000000f03b00f7 R11: 0000000000000246 R12: 0000000000000000 [ 747.305019][T21872] R13: 00007ffc045c9d1f R14: 00007f074eea5300 R15: 0000000000022000 [ 747.312981][T21872] [ 747.316159][T21872] memory: usage 307200kB, limit 307200kB, failcnt 64038 [ 747.323134][T21872] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 747.331035][T21872] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 747.338342][T21872] Memory cgroup stats for /syz3: [ 747.349639][T21872] cache 49152 [ 747.357971][T21872] rss 0 [ 747.360725][T21872] shmem 0 [ 747.363654][T21872] mapped_file 0 [ 747.367123][T21872] dirty 4096 [ 747.370319][T21872] writeback 8192 [ 747.373853][T21872] workingset_refault_anon 15466 [ 747.378717][T21872] workingset_refault_file 27071 [ 747.383557][T21872] swap 385024 [ 747.386849][T21872] pgpgin 777305 [ 747.390294][T21872] pgpgout 777291 [ 747.393828][T21872] pgfault 87067 [ 747.397301][T21872] pgmajfault 6598 [ 747.400923][T21872] inactive_anon 0 [ 747.404548][T21872] active_anon 0 [ 747.408025][T21872] inactive_file 45056 [ 747.411998][T21872] active_file 4096 [ 747.415708][T21872] unevictable 0 [ 747.419178][T21872] hierarchical_memory_limit 314572800 [ 747.424536][T21872] hierarchical_memsw_limit 9223372036854771712 [ 747.430727][T21872] total_cache 49152 [ 747.434529][T21872] total_rss 0 [ 747.437830][T21872] total_shmem 0 [ 747.441274][T21872] total_mapped_file 0 [ 747.445245][T21872] total_dirty 4096 [ 747.448979][T21872] total_writeback 8192 [ 747.453039][T21872] total_workingset_refault_anon 15466 [ 747.458424][T21872] total_workingset_refault_file 27071 [ 747.463786][T21872] total_swap 385024 [ 747.467614][T21872] total_pgpgin 777305 [ 747.471591][T21872] total_pgpgout 777291 [ 747.475652][T21872] total_pgfault 87067 [ 747.479652][T21872] total_pgmajfault 6598 [ 747.483805][T21872] total_inactive_anon 0 [ 747.487995][T21872] total_active_anon 0 [ 747.491964][T21872] total_inactive_file 45056 [ 747.496451][T21872] total_active_file 4096 [ 747.500717][T21872] total_unevictable 0 [ 747.504687][T21872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21670,uid=0 [ 747.519995][T21872] Memory cgroup out of memory: Killed process 21670 (syz-executor.3) total-vm:48796kB, anon-rss:348kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:27 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) listen(r1, 0xfff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000140)=0xfffffffa, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) socket$key(0xf, 0x3, 0x2) accept(r1, &(0x7f0000000200)=@l2, 0x0) (async) accept(r1, &(0x7f0000000200)=@l2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x20000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000040a010200000000000000000a0000060900030073797a31000000000900030073797a32000080000000000000007a310000000009d389dadce66800030073797a3100000000090001007379"], 0x50}, 0x1, 0x0, 0x0, 0x44050}, 0x4004040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r3, &(0x7f0000000000)='\"', 0x1) recvmmsg(r3, &(0x7f0000000780), 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c080}, 0x40000) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0x0, 0x80000) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r4}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)="ba034c90f681ceb8a447de79d7c64220152e4a5dfd6b137484713c9da2f27c68a3f1", 0x22}, {&(0x7f0000000500)="52b693876bb27b009ed374053f9f683f5d37fb8a8da26c07c265d0c364169378163d", 0x22}, {&(0x7f0000000540)="ba163bf5d113fbb7d352d1874e52c17d7164a4c14badd8064f70262e2de074c7a44e95cf5abd11cbb4649cdfc1e1d229c18643184f60746f64debdb12861c2d39f74755fb814d5f91d310812f4dce5ebdbebfc8ef87abd54cb04b28a9d1eb3e5dd7ba88677a127a3d82376753e38d6641236d1ea568e6ad84e39d712a4d22fd2d46848760eff2be3d1ad26898a4b53", 0x8f}, {&(0x7f0000000600)="a13a7136cf25ecd343cc437433c492854f353dbf2da35d3ee56b634751b3ec4c6e12e4669bc2ca82ca40c8511ada711d2c7c3128cb6a0b2bfb5ee014be2fdeb108aad68921e1f2d7b81bd82d1638d0df75a8a45bfa0013a4174cb0ebee56d8408607392778d1539a9adaf318ed55ba6bf1dda9f8b08da5ca2537e9e1a3e116007f2c071196923f5714ef5095c4f8a42165f5e28a897f7c27f64a3ca7a5228bb771cbf9762531aec7a90d888ed19571942dafa68264df0469ed42dcd4cce2a1", 0xbf}], 0x4}}, {{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="6e092bac788b2f0713335d7be4ac665d41aebf7707b97f3143bed99459129b55da28f88e772934f591b2940b21b5fdb89c2e74b3e692ad6dbe64bee41e4e03f81fb0d95a991855c9f100df2994eda9d5ac93aa6f07403174e6f4b81b3030d10774b58b6f151f6e5c6b2cb1721750e9e494be43b226bf2e7779b9a1055fda92709a793d7f95a465a34bc6dbed3528d85c0e2c9386d9832ca67e3cb558775185d52eb452c649f216e146ea1c6066325478ff64fbfd1e9c4bf4ef8e28825bedc7c24c1d40e0ef3cc22763d40600964714e1", 0xd0}], 0x1, &(0x7f0000000a40)=[@rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8, 0x2400c410}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="55dab392d9", 0x5}, {&(0x7f0000000c00)="29816d499548957da8b4f919d304052f937902abb72f2df0492b72ccad78ba5ca73ceddae81ebb7d6b25c5e226e900490e454eb3b1f13944ad203ae482d47eccc5d838eceab5804147aa1172adc8f76ede2aede0b473f273e918b08932046e948e53654d4778fbb357361acfac446c3f3f796e221813d387e4eabe4c85e3bbe93d1625d75fea2bb843f5729b6113438d98248bc64c883e9c", 0x98}, {&(0x7f0000000cc0)="61de522e5767a3e11998081595900e70e62b57b8a8160fa471977889bc3a518fa01bce5ff2986588349646c8dcfc1853e96bf76f3a16725aab4a0573ddfb361d1639ac8cb0f05228c2e17ca1a28595c48a50e87265497fed", 0x58}, {&(0x7f0000000d40)="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", 0xfa}], 0x4, &(0x7f0000000f00), 0x0, 0x24000000}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f00000010c0)="540e67152800135e62260a538ee1dc280c461f2339303ef17cacf62633ddc52161", 0x21}, {&(0x7f0000001100)="e04f4fc650c349b2afc7e8c647031c06c8864b39496d20516debffdfadb66455a367b59ac0fee107528b001329d34584c4d416e0a9b6310f", 0x38}], 0x2}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000001200)="cad0e10e5e050560e8feacd05ed114c5130658ce5d06ce404313af35345ed2c41c06ffec3ae8a6df4ce3541db7ab75b7b20c651d8872f072d76205597c24b0221d26787356c98ed648ea78cc507403c6122f3b4a67b4653d54ce98", 0x5b}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="9b9afa6d0ccfd95aa941da170e71d2ceb0b837f501", 0x15}, {&(0x7f00000022c0)="b1dbdde6b1db52b88fb3f890b563962dd3d24490f1af5c0f14f1a8961a51a65a20f48a856529f48ddfb383a9833aeb5d4df2a0347d5a37746a76f8dd612f90991c6bc94dd507b91fbb3a5a116e7034cb10428e0fcf5049724e795aad53cd05e0309ea8f14456cbe96e1eb18a142751e8d2b57104523226e8d1e55404b568dc2cb29fb18d250b1390536515908d4cb680ea9e352ea633059000e92e53789466c465035fd7894efe6948ca1a5aef47b03b4d58f772d3e381a245526afb9b2247c948bd1819fa4733f5b1c87db5c08f275e7239da7b076fd58a2d9e4f6f2f69b7adf08c1a0d43d82dc3ffae26cece85cf4520bee174", 0xf4}, {&(0x7f00000023c0)="521a0d55d37c080f3951b63382ce04f19e581b19865742646ec0cae3949ed94c8b06db0991f37efbf5e526c365e637b8882c8cf9e5e8d4cf47e0438f63fca9ca2c032becc629bfaa2cbc19c08e0567aa98e305bb6564b29ef12d8e07b9ababff7f525811853de611b4ee1b39f3f0ffccac50e1629f8ae3fcc894", 0x7a}, {&(0x7f0000002440)}, {&(0x7f0000002480)="f5bb9400d0b0abb6e3c0cf527a76d3b61465e3c3f90754c2294f26d088b985d2b790af6a15e07e79fa765bcec85d40ef2c94faa07870a38fe5a4eb648b255817bb9b5c5e4d2b89e48718db4ee0e01bc904f65c8e8f1ad31c63e5c56b9915fc8c840f473558f7b9b8e7c22f2ecb0cc4bb2edf8627acc27149a0c9ace6c1b241c34704e58c0bdee5ccc787a09861f5ceb13039bc76c246929486a14c02713da988bb3baf15608e7987603b0d24e27fe5029cdf7bbf4da942f9acc512fbb0d8aa0e96d818d178b614e397f7c3", 0xcb}], 0x7, &(0x7f0000002600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee00}}}], 0x60, 0x20000091}}], 0x5, 0x8801) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r8, 0x300, 0x70bd23, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8c, 0x3f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000400)=0x40) sendfile(r2, r7, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) 02:20:27 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x2c, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x11000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:27 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x300, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x40000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000040a010200000000000000000a0000060900030073797a31000000000900030073797a32000080000000000000007a310000000009d389dadce66800030073797a3100000000090001007379"], 0x50}, 0x1, 0x0, 0x0, 0x44050}, 0x4004040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r3, &(0x7f0000000000)='\"', 0x1) recvmmsg(r3, &(0x7f0000000780), 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c080}, 0x40000) (async) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c080}, 0x40000) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0x0, 0x80000) (async) ptrace$setopts(0x4200, r4, 0x0, 0x80000) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r4}) (async) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r4}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0x7) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)="ba034c90f681ceb8a447de79d7c64220152e4a5dfd6b137484713c9da2f27c68a3f1", 0x22}, {&(0x7f0000000500)="52b693876bb27b009ed374053f9f683f5d37fb8a8da26c07c265d0c364169378163d", 0x22}, {&(0x7f0000000540)="ba163bf5d113fbb7d352d1874e52c17d7164a4c14badd8064f70262e2de074c7a44e95cf5abd11cbb4649cdfc1e1d229c18643184f60746f64debdb12861c2d39f74755fb814d5f91d310812f4dce5ebdbebfc8ef87abd54cb04b28a9d1eb3e5dd7ba88677a127a3d82376753e38d6641236d1ea568e6ad84e39d712a4d22fd2d46848760eff2be3d1ad26898a4b53", 0x8f}, {&(0x7f0000000600)="a13a7136cf25ecd343cc437433c492854f353dbf2da35d3ee56b634751b3ec4c6e12e4669bc2ca82ca40c8511ada711d2c7c3128cb6a0b2bfb5ee014be2fdeb108aad68921e1f2d7b81bd82d1638d0df75a8a45bfa0013a4174cb0ebee56d8408607392778d1539a9adaf318ed55ba6bf1dda9f8b08da5ca2537e9e1a3e116007f2c071196923f5714ef5095c4f8a42165f5e28a897f7c27f64a3ca7a5228bb771cbf9762531aec7a90d888ed19571942dafa68264df0469ed42dcd4cce2a1", 0xbf}], 0x4}}, {{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="6e092bac788b2f0713335d7be4ac665d41aebf7707b97f3143bed99459129b55da28f88e772934f591b2940b21b5fdb89c2e74b3e692ad6dbe64bee41e4e03f81fb0d95a991855c9f100df2994eda9d5ac93aa6f07403174e6f4b81b3030d10774b58b6f151f6e5c6b2cb1721750e9e494be43b226bf2e7779b9a1055fda92709a793d7f95a465a34bc6dbed3528d85c0e2c9386d9832ca67e3cb558775185d52eb452c649f216e146ea1c6066325478ff64fbfd1e9c4bf4ef8e28825bedc7c24c1d40e0ef3cc22763d40600964714e1", 0xd0}], 0x1, &(0x7f0000000a40)=[@rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8, 0x2400c410}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="55dab392d9", 0x5}, {&(0x7f0000000c00)="29816d499548957da8b4f919d304052f937902abb72f2df0492b72ccad78ba5ca73ceddae81ebb7d6b25c5e226e900490e454eb3b1f13944ad203ae482d47eccc5d838eceab5804147aa1172adc8f76ede2aede0b473f273e918b08932046e948e53654d4778fbb357361acfac446c3f3f796e221813d387e4eabe4c85e3bbe93d1625d75fea2bb843f5729b6113438d98248bc64c883e9c", 0x98}, {&(0x7f0000000cc0)="61de522e5767a3e11998081595900e70e62b57b8a8160fa471977889bc3a518fa01bce5ff2986588349646c8dcfc1853e96bf76f3a16725aab4a0573ddfb361d1639ac8cb0f05228c2e17ca1a28595c48a50e87265497fed", 0x58}, {&(0x7f0000000d40)="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", 0xfa}], 0x4, &(0x7f0000000f00), 0x0, 0x24000000}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f00000010c0)="540e67152800135e62260a538ee1dc280c461f2339303ef17cacf62633ddc52161", 0x21}, {&(0x7f0000001100)="e04f4fc650c349b2afc7e8c647031c06c8864b39496d20516debffdfadb66455a367b59ac0fee107528b001329d34584c4d416e0a9b6310f", 0x38}], 0x2}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000001200)="cad0e10e5e050560e8feacd05ed114c5130658ce5d06ce404313af35345ed2c41c06ffec3ae8a6df4ce3541db7ab75b7b20c651d8872f072d76205597c24b0221d26787356c98ed648ea78cc507403c6122f3b4a67b4653d54ce98", 0x5b}, {&(0x7f0000001280)="54ffc4fe309d8600d66c67645f6aa0dbaa9b9e198a9dc31468038f93a18d1be4c8fe65e95f343abbcce6172a0352c9362e2615805f5f0030544bfa28bd31e70cbe7bce555446dc45e49ac47113f6881ae924680ce425ca686dd4c993611051d7ed2fff60a6652a04557e5bef481132c89f37dd61cee2006aec7f4bacbfaf837a5980e465db20c694d53afa90bfc48a5b359a0c04b2ecc29f0f3d368df2f104407113a5f7bc591596974564ac25842294a1304b8aa6a81e302cf61cc9bf20613b57902e08ccc50cff6cbc0591c9b1a7a24d93c5f97f8691c02b8d55c89ae3d29917f3a8d59cdbf6a79e0bfda692861f79003a186ae1c68d59964115f0612b76d0e6fc0a43b51418071f6d6035da77638dd330f2f768dd04c10d7ac083d7e36efe620550c7a023b420eacd8fc25281c13ea5974a69129a4b441d89d6b07377f106080e7d3d816fc337fcb249cd6572302bad030514d9f2f6295a0295dbe4b67f0d572e97974fd91566ef35964713d6c9441d36192b4e0e157eeda9f0d751c8545ae19bfeaf3338f0cfda6845caade10492e26fa8e4793a82ed9e29c9db6de7d0d17b58d33c42a3696e96367113521453691ca9f3f44782aad8df4af52b95ebcc25b1a7f8d2d5dff18c507d6408c89ecd179fad3495bd67860ae0740f9191dcda7ae8d2579a105f3048f23bef65ff5ae8ed202e214a64ba785b54ef05acbfa77f5bd4cb0bfa783fcc93b97e40c1c0c0fc8b95f9026312121ae6486381106a0ed53651f036f1e4a2c5aba15a5d14a18e8fe3b61512b5e52896a593c12f941ccea57261c3bec2dd6963da1b65744e7cc3ecf5cd1b3eb888e92429755081e1f2fa45852b720235b160f3cd95c266f446849129a8f647223412ed7e6a7ec838d42fba9143831f795f88cae26405d3f42a1afe8281f71b5d0f3468441bd59002fb94edc30db0c5fd2a557f6788639adcd2f602baf6e364b8620d0cd7435fc9d324a3eb41981b099a5a7187ff573b3a3d3dc7b46b5c8e09c6b4d64ade0c9b2a24b84c19279884130fb584fb5c44da04ce551b381015f4d60a86d3ff408528c8e257049a5a01c626dda4795010a1b89b2a31e13b208b2056b1a29770f889d648ffe121fb541bc302cf291e1286a34df44ac112b122ca17eab6777663f138f622f8f87428a6d75febae90dcd034b09067c21b3b47a6ac7a2d9f896bc2fa1b3056d579f293d2f1d75ff4cca0f14496d5855b59568719b51d6a6a13b621004855453ed7b482f42ff9bee745e933d74bf9411bb9966e60298eec3213abcde76b3ab5476b1b210791fe349dcdd36b64f764a2f5752cbf9bc613c49eef217eda691d3e7e93510359e88d7bb3917773fb0cdaa7dda9ede70877b24658a96fef74a948138b05912296065a3e3cfea4a625465165d705bddefb9641698c4a38729a860db672b526ecb368e93119aef0429576f73c1bf7ab6eb603f5bb6d604e52305b96e33116fd06ecc784f32b919423c175eddf109daf399b014f58c036af28f2fab2df86279c8d99f421b1fb15a8be552d285c2152e16148d4f8a94f6909372424b53d27699a971c72b774a6df55fe7c785cf11695757d28ccf43b7107e78739a717e6f06a2e8cd909ec0f4e0dd861c35ba56ae7cd6698390a41aea310db8ec6997b8e5de95f09cf23e751ca9b7786e84ddf89310b5711ee23d0b7bc87f1fce0b5784694f0bab1ea0dc94876fee2ef149cd0128403257bab4f30afafc67ff5de7ad4127b0c647f2b8b972ca6e17351547a7d3c3da60413a38d22b84d7067e9c1fad653616bf280ecac5b3e93e1ca9ffafd21ea8868b7e1e296cda19326bac786f53fca60bee2ec07d20d8f15dee74eaa6b95d321f8cb69637bd04aa701db722f5d9f12975db7d6d11f145f0e45320c6dcdff8034a260aca28ecb2c38ce14e8447ef60ab426ec3b620efad64dc9b91ad8dcbfe06f09a5bb233dc869173e504d8852c15bd33891c998ebcfc36490196d2a879c62a7021b5056f1f3a286c470ca99ba7d9e625bf50d6f98f6f03f7fe00f3f57003da9993106b54a5187da365e72a219a3b503249e2a02c682c4835d783693b63ad49fea77d3660877345c2c20e33769e20eea39861aaaa50e17f499f95641d8bbf0cb127bc4a8ba78ca4052ae5bbd8f30c4a859c70ba5a2c1c08521dccce0269cccc88d2b8d47ff71fa2db560a409173ca07eda6b11ca701181330a9ab6d3609c1c734ea5eb64b918653884ce5cf8f27e21d9b21a616fbeb90d494ca700b880c27717543cb36d1388a0a947b7cc927b8371365b8f13158bbfe4da2811a95e3bba11015f94a33e58ca68369c1ce9756ec0f1f76d109282a730f4faab6111c37631d1f982722ccbe8448ffa14b80b68dd66228a4390b54578a2eeb72f82c5f7c1169ff044bd3ee16841465948b60433f49428a744314e786dbef8672f34daebfe0aba4b78a2c7f7f601f4cb6ae4b2deaa9c2b3ece7651dd5217c641348de43eddd4c9db50d1bf24ec53b127d028bfefbc6619d92b1b4be7900b4365b8d897a89c1861d0ff6ab62e75597e48771dbd81586d30bc833f159b1048e7f910a47440da29c1a3a3561761fa1fc147b2007830a8721829d7ced177fce6bf46acd623d6752fbcc7dec6beee9276077db13569fb8fd324e209d4285fc9511c8273e6b1cab3660cd9ed3d72aae32c520a94ef979f9d061bcfe44b9b754be7df471eeac7550b42e1e9c2d6730d53f2d8f6d61e906e6388c92fb059444cdf4753d52c2026d9685e9bc5eaf0324411a4dbbdcc17c643edcccbc6dd7f204ddc3e8e0f12628ee1f3d504314cff548b41d6d536b77dbc2dac59ddf2dc423ab3c6ba6684e4d80f397a0d442e5a1fcd42d1f49e8ab2ff279ebc7b3724d15e41571bdd933108df6716f0fa10b30b31d1953917e679c32a7ab04c521b866e2a6c7cb139dcdbc0adb074bc2d0d1b3456a51d1345a4141af4dbde22e913fa29bd01bc6f12145b41094250ec983e2aa49c768befc62611f50793b2063ad7158eea6b60b053fc285a7d1690975b9cb20d971b28d1c37fd1e217f0c90653e4e745fe07e2bc64605da44bc3f73bba7a6975cfb0558eb12064157ae2bad42c1b9404234631c7603b249dd7d71131da9f1e6b64c757d47ff09a8cf9b2a25dda94f654fe06bd03f57e03cf767502feffce2a5a81be781744752a2cfcd8fda2e5cd7141df82fbbc36d08198c840325f7e526064090d23f856b47a3df041ec9f9d9788be0f6445e5c0accd0d77f6e9b55c6b7be20f40a9986136dbe70c135cab18a155e459aa3e53317e15ad9e1578bb069d94283621637ea50547c0738c5b11e86bdb928534f835d986d9a2fe33b8b2ebc564cce8e2ee10203ae48300f9feb706726945ef840697332bdfe98db030cb680ad77f4418e0b92e9b734617ff6ffec8181ff123332c70b9bd90765758caf3c8f6883e5c5f01027eac135e1d7c6b6a53e452384647ac3b4ef7cc3a395058ea90f3f95ac211d9a7cedeec5a07d266e555bca9f293c490a8f00163813ec366086ab48134c6a8e9ea560013f36615130819ceb376f5f70960f68b9315f451e43f84ce8f48b4edd5ee942ca79f2936a4ba28ad03baa855ed6a4b2be19b63caa94a3a638278f05375e9c07d78e4d4bbe4b6802249fa025c1ce72771493e76ee0731af4aee5439e4eb14296835936acbc1d299f97ad763e9e81ee429ea20d0ac07695516c5fa5fc805edd36338d8c99def34e91096c30d3ffdcba35142c4ea17eaf8c8ba7d9a1785bd1e7dacef09643dfc82e7ee7902ecc1ca1a960a5c21f78cbc9c0ce34c769641467115cdd78452357ab307c220453f18cf1416d9ed1da06e6904a87e89eeaed23772625fedd4cdec5792c1a582e4c522c12ca4f7396a709869c18107ca410ebb955428c2e47b7108cabaed52f9803ba8654e4ab4a55eb65e51ce82834482264a85ba805aa10df8ae26115b18d2b38ee6b43629b8ca7e763a677e5a46186781002a6c5ae5b8da4e062783df31b7807eae576b68c44cee5ad6bae484ab7ccab87a73615d529d45177390ecfe218bcdd735a121e5aa00fed39d2b4024f95d83e586e13fd25f67db61bd4ca501ddd5d55fa4adc599a070b0cfb2524c9f65f2a503b6d85f017e394fd846c303991d9fd64555d8ef9d935a8e1fdcf902207c17af234f3f6f1fdecacfad539da407e876d2aa8f761ff8ee70d6b70be866786c8e08282d29ef4efb5dee169e266f7611c47972b56a6a9e41497a84feb7c09d9924c7fca5dcf0c7173e516adf9632daa1f8ed743b2c4e11b8393bd33cfc92b0759056e03dabe3fb5e12c2db22c8a4b2d5bb8bcad286d4b24c95db5e5098b604557295c5688e83151612d150dc1fbd3b0339ac2b11a91b6ebe66f79eb40e913860657d296898ad6b7bb7b3036ddfd4b2372172c1c2da6aedf0679197fbb214bb8e6940baac23354d8d492934785853ed28b406d9d2f02d6bb4fbcba50a0887088356c629d58e6e431285446cb469d36fe960f5021f9effd04abdb03de078734d8872d8bb306a0158d226c559e1ae92fb9a547a990c6d249909fe9b7bb4bcf2bbcde3d59aaf7c4a8331c73973a73fd2770f2f9c4826f9cc4190bf48060197ee29f3acdbfe2fd4e7178e4badb880809fae169b1088c7c073fa243935dd267ba31626178f2fbaac411ce93d8b714ef00455d1bbd06faf51c1bde87bb330442670233cc36a5d0145e8339f2063c7b6e35a5c873937b88694327a4e81826aba9ea1c406444868c165d1de533ad8ff686efbe331e1a1268eb6e36210da6e11543c6258f7ba48bd477d5bc48ffe6040bd0c0e2d8e41f8276fe34dee180bc0649cf6b29a06903507033f4b12238f49d1cc8ee7b8bf04d5748041f6338f00df1b2698ed7eecb319707581fb526d90d423cecd7794d956490e5c5250ac58d0fa628421d38c591e39017b4b408401e46058c859bdd090a34379487416ebf4e197ecc5f4df376ab532522185fa4b7bdf978ec904310cc8caf130d61f717a721c6a89b183a11bc6c6bf60c837df51c5f3e6887acb838b8cf9c21ea5daa4308cbff49759b46970e4dae4fe989f9fbc1ad7915156b39c82e7b53520c76be32a7c19a5617f7680f3804f36dd95775c4ab8a0eb6201ed7942bdf4b883950f778a178f0e14fbfa1f717487c1ded172b14174d3b590d9f9ee371382841b431b2fa8596a5db0d97411639f240661b6f2f96400e95c9d835932b5d4b3bc47b01eae0a781a2dfedf5ec6481e3d2d3d0d2eac71ea43044dfafa4b25a05e74db4be06fecb9ff28d0d6e38805fe1a10f63292a0ddf5820572bad80ffc4060f70cf1a8b6f57fcc8a6a604f62402657cc1808b7b72870394e4b559963c8975fb752f0205545082b1d78073c51b97ea185229bd87744a137754b38437f3b70405fcbceedd1e950606f9b446d86516e6194719bf05dd6f8c6329cd62b2c78a080230af764e1307c62de92e945dd902fc3b365f4af82717529d226e21e25978e91d8fd9d08718083ee7d12dda4039f5a4d237330d62c60c7a3005c04ff50f12c44f6702f932f9abc2703f9b64a1d2afa7ee085602c4ecfc9bd32149333d0999cd7dc8df5e86d48e58353173c251e38fa1c1c7dad81fc0144501a956ddb42f829c063bcf4f190bd4b595459895d5242e0e81bbb59a6a4feea1a40e6dde4101747f74180da7f80b8e8b5e6a2696d73168c7667fa4c3dbada84c99d56f947082145fccc4d5afeea4728505474e443174f7bb1cf2dd4ec73c3d6dd4feb457fd12b0fc7afe275eb", 0x1000}, {&(0x7f0000002280)="9b9afa6d0ccfd95aa941da170e71d2ceb0b837f501", 0x15}, {&(0x7f00000022c0)="b1dbdde6b1db52b88fb3f890b563962dd3d24490f1af5c0f14f1a8961a51a65a20f48a856529f48ddfb383a9833aeb5d4df2a0347d5a37746a76f8dd612f90991c6bc94dd507b91fbb3a5a116e7034cb10428e0fcf5049724e795aad53cd05e0309ea8f14456cbe96e1eb18a142751e8d2b57104523226e8d1e55404b568dc2cb29fb18d250b1390536515908d4cb680ea9e352ea633059000e92e53789466c465035fd7894efe6948ca1a5aef47b03b4d58f772d3e381a245526afb9b2247c948bd1819fa4733f5b1c87db5c08f275e7239da7b076fd58a2d9e4f6f2f69b7adf08c1a0d43d82dc3ffae26cece85cf4520bee174", 0xf4}, {&(0x7f00000023c0)="521a0d55d37c080f3951b63382ce04f19e581b19865742646ec0cae3949ed94c8b06db0991f37efbf5e526c365e637b8882c8cf9e5e8d4cf47e0438f63fca9ca2c032becc629bfaa2cbc19c08e0567aa98e305bb6564b29ef12d8e07b9ababff7f525811853de611b4ee1b39f3f0ffccac50e1629f8ae3fcc894", 0x7a}, {&(0x7f0000002440)}, {&(0x7f0000002480)="f5bb9400d0b0abb6e3c0cf527a76d3b61465e3c3f90754c2294f26d088b985d2b790af6a15e07e79fa765bcec85d40ef2c94faa07870a38fe5a4eb648b255817bb9b5c5e4d2b89e48718db4ee0e01bc904f65c8e8f1ad31c63e5c56b9915fc8c840f473558f7b9b8e7c22f2ecb0cc4bb2edf8627acc27149a0c9ace6c1b241c34704e58c0bdee5ccc787a09861f5ceb13039bc76c246929486a14c02713da988bb3baf15608e7987603b0d24e27fe5029cdf7bbf4da942f9acc512fbb0d8aa0e96d818d178b614e397f7c3", 0xcb}], 0x7, &(0x7f0000002600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee00}}}], 0x60, 0x20000091}}], 0x5, 0x8801) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r8, 0x300, 0x70bd23, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8c, 0x3f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000400)=0x40) sendfile(r2, r7, 0x0, 0xf03b00f7) (async) sendfile(r2, r7, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) [ 747.755608][T22198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=22198 comm=syz-executor.0 02:20:27 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000000000000184b000007000000000000000000000005977b13f3cc08ca651e7c5b64d53a03201d2c8f700b94fdb0992c22035f3bbfaa0ef67f6e0fb6ee4dfd222f05f445416cb0caf8175e32f6f7"], &(0x7f0000000080)='syzkaller\x00', 0x80000003, 0x80, &(0x7f0000000180)=""/128, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x6, 0x6, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1]}, 0x80) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) 02:20:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x80000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:27 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000000000000184b000007000000000000000000000005977b13f3cc08ca651e7c5b64d53a03201d2c8f700b94fdb0992c22035f3bbfaa0ef67f6e0fb6ee4dfd222f05f445416cb0caf8175e32f6f7"], &(0x7f0000000080)='syzkaller\x00', 0x80000003, 0x80, &(0x7f0000000180)=""/128, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x6, 0x6, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1]}, 0x80) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000000000000184b000007000000000000000000000005977b13f3cc08ca651e7c5b64d53a03201d2c8f700b94fdb0992c22035f3bbfaa0ef67f6e0fb6ee4dfd222f05f445416cb0caf8175e32f6f7"], &(0x7f0000000080)='syzkaller\x00', 0x80000003, 0x80, &(0x7f0000000180)=""/128, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x6, 0x6, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1]}, 0x80) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async) 02:20:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x101000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000040a010200000000000000000a0000060900030073797a31000000000900030073797a32000080000000000000007a310000000009d389dadce66800030073797a3100000000090001007379"], 0x50}, 0x1, 0x0, 0x0, 0x44050}, 0x4004040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async, rerun: 64) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async, rerun: 64) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) (async) write(r3, &(0x7f0000000000)='\"', 0x1) (async) recvmmsg(r3, &(0x7f0000000780), 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c080}, 0x40000) (async, rerun: 64) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async, rerun: 32) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r4) (async) ptrace$setopts(0x4200, r4, 0x0, 0x80000) (async, rerun: 32) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x20, 0x1, r4}) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4000) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)="ba034c90f681ceb8a447de79d7c64220152e4a5dfd6b137484713c9da2f27c68a3f1", 0x22}, {&(0x7f0000000500)="52b693876bb27b009ed374053f9f683f5d37fb8a8da26c07c265d0c364169378163d", 0x22}, {&(0x7f0000000540)="ba163bf5d113fbb7d352d1874e52c17d7164a4c14badd8064f70262e2de074c7a44e95cf5abd11cbb4649cdfc1e1d229c18643184f60746f64debdb12861c2d39f74755fb814d5f91d310812f4dce5ebdbebfc8ef87abd54cb04b28a9d1eb3e5dd7ba88677a127a3d82376753e38d6641236d1ea568e6ad84e39d712a4d22fd2d46848760eff2be3d1ad26898a4b53", 0x8f}, {&(0x7f0000000600)="a13a7136cf25ecd343cc437433c492854f353dbf2da35d3ee56b634751b3ec4c6e12e4669bc2ca82ca40c8511ada711d2c7c3128cb6a0b2bfb5ee014be2fdeb108aad68921e1f2d7b81bd82d1638d0df75a8a45bfa0013a4174cb0ebee56d8408607392778d1539a9adaf318ed55ba6bf1dda9f8b08da5ca2537e9e1a3e116007f2c071196923f5714ef5095c4f8a42165f5e28a897f7c27f64a3ca7a5228bb771cbf9762531aec7a90d888ed19571942dafa68264df0469ed42dcd4cce2a1", 0xbf}], 0x4}}, {{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="6e092bac788b2f0713335d7be4ac665d41aebf7707b97f3143bed99459129b55da28f88e772934f591b2940b21b5fdb89c2e74b3e692ad6dbe64bee41e4e03f81fb0d95a991855c9f100df2994eda9d5ac93aa6f07403174e6f4b81b3030d10774b58b6f151f6e5c6b2cb1721750e9e494be43b226bf2e7779b9a1055fda92709a793d7f95a465a34bc6dbed3528d85c0e2c9386d9832ca67e3cb558775185d52eb452c649f216e146ea1c6066325478ff64fbfd1e9c4bf4ef8e28825bedc7c24c1d40e0ef3cc22763d40600964714e1", 0xd0}], 0x1, &(0x7f0000000a40)=[@rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8, 0x2400c410}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="55dab392d9", 0x5}, {&(0x7f0000000c00)="29816d499548957da8b4f919d304052f937902abb72f2df0492b72ccad78ba5ca73ceddae81ebb7d6b25c5e226e900490e454eb3b1f13944ad203ae482d47eccc5d838eceab5804147aa1172adc8f76ede2aede0b473f273e918b08932046e948e53654d4778fbb357361acfac446c3f3f796e221813d387e4eabe4c85e3bbe93d1625d75fea2bb843f5729b6113438d98248bc64c883e9c", 0x98}, {&(0x7f0000000cc0)="61de522e5767a3e11998081595900e70e62b57b8a8160fa471977889bc3a518fa01bce5ff2986588349646c8dcfc1853e96bf76f3a16725aab4a0573ddfb361d1639ac8cb0f05228c2e17ca1a28595c48a50e87265497fed", 0x58}, {&(0x7f0000000d40)="58fb42431be19d8480697f8412fb5c2f95a180c59a4cb6b58eac8593ed6120e9625363f5c4714c84be84354d34d81cc0ecdddc8e123ffcef3d1f32dbd6cc03db4eade013f173e29f858e5a24cf04a3a5220bc3a98c8fcdca9bf41e67a5ba9343d182f2955d092de5353ce50fec1e3a1e12fdf1f9d7c845afcbc74298046ba598860e690e9d5949d55108f3e2f22efbed339dd99bbf5c3167b245a0bdb89bf8dfea4acb0e9ce4eea083216f0e26ed196893528a7db1b5bdb644ad909e12d48813c725e02a994c534806147b938358006077676341601cc917a31abe114579d20cc78440c3ad055c89cc86a6824574b5da5c1109452dafd3fc9b39", 0xfa}], 0x4, &(0x7f0000000f00), 0x0, 0x24000000}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f00000010c0)="540e67152800135e62260a538ee1dc280c461f2339303ef17cacf62633ddc52161", 0x21}, {&(0x7f0000001100)="e04f4fc650c349b2afc7e8c647031c06c8864b39496d20516debffdfadb66455a367b59ac0fee107528b001329d34584c4d416e0a9b6310f", 0x38}], 0x2}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000001200)="cad0e10e5e050560e8feacd05ed114c5130658ce5d06ce404313af35345ed2c41c06ffec3ae8a6df4ce3541db7ab75b7b20c651d8872f072d76205597c24b0221d26787356c98ed648ea78cc507403c6122f3b4a67b4653d54ce98", 0x5b}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="9b9afa6d0ccfd95aa941da170e71d2ceb0b837f501", 0x15}, {&(0x7f00000022c0)="b1dbdde6b1db52b88fb3f890b563962dd3d24490f1af5c0f14f1a8961a51a65a20f48a856529f48ddfb383a9833aeb5d4df2a0347d5a37746a76f8dd612f90991c6bc94dd507b91fbb3a5a116e7034cb10428e0fcf5049724e795aad53cd05e0309ea8f14456cbe96e1eb18a142751e8d2b57104523226e8d1e55404b568dc2cb29fb18d250b1390536515908d4cb680ea9e352ea633059000e92e53789466c465035fd7894efe6948ca1a5aef47b03b4d58f772d3e381a245526afb9b2247c948bd1819fa4733f5b1c87db5c08f275e7239da7b076fd58a2d9e4f6f2f69b7adf08c1a0d43d82dc3ffae26cece85cf4520bee174", 0xf4}, {&(0x7f00000023c0)="521a0d55d37c080f3951b63382ce04f19e581b19865742646ec0cae3949ed94c8b06db0991f37efbf5e526c365e637b8882c8cf9e5e8d4cf47e0438f63fca9ca2c032becc629bfaa2cbc19c08e0567aa98e305bb6564b29ef12d8e07b9ababff7f525811853de611b4ee1b39f3f0ffccac50e1629f8ae3fcc894", 0x7a}, {&(0x7f0000002440)}, {&(0x7f0000002480)="f5bb9400d0b0abb6e3c0cf527a76d3b61465e3c3f90754c2294f26d088b985d2b790af6a15e07e79fa765bcec85d40ef2c94faa07870a38fe5a4eb648b255817bb9b5c5e4d2b89e48718db4ee0e01bc904f65c8e8f1ad31c63e5c56b9915fc8c840f473558f7b9b8e7c22f2ecb0cc4bb2edf8627acc27149a0c9ace6c1b241c34704e58c0bdee5ccc787a09861f5ceb13039bc76c246929486a14c02713da988bb3baf15608e7987603b0d24e27fe5029cdf7bbf4da942f9acc512fbb0d8aa0e96d818d178b614e397f7c3", 0xcb}], 0x7, &(0x7f0000002600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee00}}}], 0x60, 0x20000091}}], 0x5, 0x8801) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r8, 0x300, 0x70bd23, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8c, 0x3f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000400)=0x40) (async) sendfile(r2, r7, 0x0, 0xf03b00f7) (async, rerun: 32) sendfile(r2, r1, 0x0, 0x8000000000004) (rerun: 32) 02:20:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1ff000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:27 executing program 5: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000000000000184b000007000000000000000000000005977b13f3cc08ca651e7c5b64d53a03201d2c8f700b94fdb0992c22035f3bbfaa0ef67f6e0fb6ee4dfd222f05f445416cb0caf8175e32f6f7"], &(0x7f0000000080)='syzkaller\x00', 0x80000003, 0x80, &(0x7f0000000180)=""/128, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x6, 0x6, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1]}, 0x80) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) [ 748.043003][T22278] ================================================================== [ 748.051149][T22278] BUG: KCSAN: data-race in drain_all_stock / drain_stock [ 748.058213][T22278] [ 748.060544][T22278] write to 0xffff888237c2a300 of 4 bytes by task 22195 on cpu 0: [ 748.068282][T22278] drain_stock+0x48/0xf0 [ 748.072543][T22278] __refill_stock+0x33/0xb0 [ 748.077074][T22278] try_charge_memcg+0x9ee/0xd20 [ 748.081949][T22278] obj_cgroup_charge_pages+0xab/0x130 [ 748.087344][T22278] obj_cgroup_charge+0xec/0x140 [ 748.092210][T22278] slab_pre_alloc_hook+0x112/0x180 [ 748.097440][T22278] kmem_cache_alloc_node+0x54/0x240 [ 748.102658][T22278] dup_task_struct+0x60/0x480 [ 748.107342][T22278] copy_process+0x3ac/0x2180 [ 748.111929][T22278] kernel_clone+0x169/0x560 [ 748.116429][T22278] __x64_sys_clone+0xe8/0x120 [ 748.121095][T22278] do_syscall_64+0x41/0xc0 [ 748.125522][T22278] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.131443][T22278] [ 748.133756][T22278] read to 0xffff888237c2a300 of 4 bytes by task 22278 on cpu 1: [ 748.141385][T22278] drain_all_stock+0xd3/0x2d0 [ 748.146074][T22278] try_charge_memcg+0x6c5/0xd20 [ 748.150936][T22278] obj_cgroup_charge_pages+0xab/0x130 [ 748.156323][T22278] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 748.161874][T22278] __alloc_pages+0x1bb/0x340 [ 748.166461][T22278] alloc_pages+0x3e1/0x4e0 [ 748.170875][T22278] __vmalloc_node_range+0x6d2/0xea0 [ 748.176060][T22278] kvmalloc_node+0x121/0x160 [ 748.180647][T22278] xt_alloc_table_info+0x3d/0x80 [ 748.185587][T22278] do_arpt_set_ctl+0x615/0x1390 [ 748.190437][T22278] nf_setsockopt+0x18d/0x1b0 [ 748.195025][T22278] ip_setsockopt+0xe6/0x100 [ 748.199605][T22278] tcp_setsockopt+0x90/0xa0 [ 748.204126][T22278] sock_common_setsockopt+0x61/0x70 [ 748.209338][T22278] __sys_setsockopt+0x1c9/0x230 [ 748.214194][T22278] __x64_sys_setsockopt+0x66/0x80 [ 748.219228][T22278] do_syscall_64+0x41/0xc0 [ 748.223657][T22278] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.229561][T22278] [ 748.231880][T22278] value changed: 0x0000003c -> 0x0000003f [ 748.237581][T22278] [ 748.239904][T22278] Reported by Kernel Concurrency Sanitizer on: [ 748.246055][T22278] CPU: 1 PID: 22278 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 748.254737][T22278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 748.264798][T22278] ================================================================== 02:20:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (fail_nth: 1) [ 748.462291][T22830] FAULT_INJECTION: forcing a failure. [ 748.462291][T22830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.475405][T22830] CPU: 1 PID: 22830 Comm: syz-executor.2 Not tainted 6.5.0-rc1-syzkaller #0 [ 748.484092][T22830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 748.494155][T22830] Call Trace: [ 748.497439][T22830] [ 748.500365][T22830] dump_stack_lvl+0xda/0x130 [ 748.505020][T22830] dump_stack+0x15/0x20 [ 748.509184][T22830] should_fail_ex+0x21f/0x230 [ 748.513865][T22830] should_fail+0xb/0x10 [ 748.518038][T22830] should_fail_usercopy+0x1a/0x20 [ 748.523070][T22830] _copy_from_user+0x1e/0xd0 [ 748.527661][T22830] move_addr_to_kernel+0x82/0x110 [ 748.532700][T22830] __sys_connect+0x74/0x1b0 [ 748.537304][T22830] __x64_sys_connect+0x41/0x50 [ 748.542088][T22830] do_syscall_64+0x41/0xc0 [ 748.546588][T22830] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.552608][T22830] RIP: 0033:0x7f4dea8ce389 [ 748.557111][T22830] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.576824][T22830] RSP: 002b:00007f4de9c41168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 748.585316][T22830] RAX: ffffffffffffffda RBX: 00007f4dea9edf80 RCX: 00007f4dea8ce389 [ 748.593347][T22830] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 748.601403][T22830] RBP: 00007f4de9c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.609380][T22830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.617364][T22830] R13: 00007ffe581cc1bf R14: 00007f4de9c41300 R15: 0000000000022000 [ 748.625431][T22830] 02:20:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x12000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:28 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x42a, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xf01f00, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:28 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/138, 0x8a}, {&(0x7f0000001300)=""/177, 0xb1}, {&(0x7f00000013c0)=""/120, 0x78}], 0x6, 0x400, 0x61) syz_open_dev$MSR(&(0x7f0000000040), 0x9f13, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:28 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="36b23ed46975c9bb47e5865063c4", 0xe}, {&(0x7f0000000240)="ab5aa974b99553bf348ac8a106c8d268e62faca79c4738c484f0bbd3cabe34796d0825551166388a9fee2537e08c0151224679f2c87b422b24c2c87f95d8bcecf4e2684da4b8f30f7129e2b71d1e5f3a9d56f8ff083d918df3b5c6e876540dd66cd8cf7d02bcfc72fa9e552725663a56c68c853c593e93326764c3b7c480886d20db0cd9c5e9bba7fbce1720f767342db680feb12b20ceebf44c5f93666a", 0x9e}, {&(0x7f0000000300)="d3f405390eed90399f4dca677a65d5956f43f50c20f455cbd1a622fa4fe02c73441184c87699102451a0aeeda920ada28199de05b00d4abfa2457f33a64b108d6684b33bc2e75f5889959a2640e8f3b396e145dffc2f8397a8ae5b695a0c676effa6fa762a1abf1dffea6672781536c6c5157595e2ff918def7c1e2279d4d038aa03256e508feb59455d2d6f527b286d5c357f456621f81a2f0fe399068d4e1ed4b29aba7a68d7509e32ccfad4649c565615b81196877b05fe2d85dbd0c9d6dcdea199d72c422fd2ab5188a8b3c2dbbffa6048", 0xd3}, {&(0x7f00000000c0)="46b216d6da3c3f46c0bdcb0c6e8168eb9276368a8ee106598aa6f44a947d58e5672b998fb7d758985cf0c1b88dca3063999f8114973c6e9a390b1785af1b9b64c100c03f846308c57804d9edb5cfc2d61a3bbb1aac11f7e667d35176c2e12ffe654379bdc55177a09416", 0x6a}, {&(0x7f0000000400)="79b7b1f93bec4804b2aad8891231e1b208d8ce792b976e32277a5a2189e141ea7a8e5728a04dec91a4d1b6c1cf8741d8ba3901985bf98ff6e39593f990f42eae2e51d1cb5de2b2c471cc218aec08b0d5724b047ac0ee46d94a0ea4a052879c581d375c1f483003d921a83d408df33d276375c24e5da102f6609d7310f6ffcbcf4d6455bc05cda0344dae38b00588853de00ff0c6208d7e1c46dc2d30e3e44f71af87290a35d74eb6673d91690736bdd4e9c3940f543fb51f669ef24e6c0e42ef4c716757", 0xc4}], 0x5, 0x2, 0x4) r4 = eventfd(0x200) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendfile(r1, r0, 0x0, 0x8000000000004) ioctl$RTC_AIE_ON(r0, 0x7001) 02:20:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (fail_nth: 2) 02:20:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 748.788350][T22841] FAULT_INJECTION: forcing a failure. [ 748.788350][T22841] name failslab, interval 1, probability 0, space 0, times 0 [ 748.801033][T22841] CPU: 0 PID: 22841 Comm: syz-executor.2 Not tainted 6.5.0-rc1-syzkaller #0 [ 748.809830][T22841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 748.819895][T22841] Call Trace: [ 748.823178][T22841] [ 748.826180][T22841] dump_stack_lvl+0xda/0x130 [ 748.830789][T22841] dump_stack+0x15/0x20 02:20:28 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="36b23ed46975c9bb47e5865063c4", 0xe}, {&(0x7f0000000240)="ab5aa974b99553bf348ac8a106c8d268e62faca79c4738c484f0bbd3cabe34796d0825551166388a9fee2537e08c0151224679f2c87b422b24c2c87f95d8bcecf4e2684da4b8f30f7129e2b71d1e5f3a9d56f8ff083d918df3b5c6e876540dd66cd8cf7d02bcfc72fa9e552725663a56c68c853c593e93326764c3b7c480886d20db0cd9c5e9bba7fbce1720f767342db680feb12b20ceebf44c5f93666a", 0x9e}, {&(0x7f0000000300)="d3f405390eed90399f4dca677a65d5956f43f50c20f455cbd1a622fa4fe02c73441184c87699102451a0aeeda920ada28199de05b00d4abfa2457f33a64b108d6684b33bc2e75f5889959a2640e8f3b396e145dffc2f8397a8ae5b695a0c676effa6fa762a1abf1dffea6672781536c6c5157595e2ff918def7c1e2279d4d038aa03256e508feb59455d2d6f527b286d5c357f456621f81a2f0fe399068d4e1ed4b29aba7a68d7509e32ccfad4649c565615b81196877b05fe2d85dbd0c9d6dcdea199d72c422fd2ab5188a8b3c2dbbffa6048", 0xd3}, {&(0x7f00000000c0)="46b216d6da3c3f46c0bdcb0c6e8168eb9276368a8ee106598aa6f44a947d58e5672b998fb7d758985cf0c1b88dca3063999f8114973c6e9a390b1785af1b9b64c100c03f846308c57804d9edb5cfc2d61a3bbb1aac11f7e667d35176c2e12ffe654379bdc55177a09416", 0x6a}, {&(0x7f0000000400)="79b7b1f93bec4804b2aad8891231e1b208d8ce792b976e32277a5a2189e141ea7a8e5728a04dec91a4d1b6c1cf8741d8ba3901985bf98ff6e39593f990f42eae2e51d1cb5de2b2c471cc218aec08b0d5724b047ac0ee46d94a0ea4a052879c581d375c1f483003d921a83d408df33d276375c24e5da102f6609d7310f6ffcbcf4d6455bc05cda0344dae38b00588853de00ff0c6208d7e1c46dc2d30e3e44f71af87290a35d74eb6673d91690736bdd4e9c3940f543fb51f669ef24e6c0e42ef4c716757", 0xc4}], 0x5, 0x2, 0x4) eventfd(0x200) (async) r4 = eventfd(0x200) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendfile(r1, r0, 0x0, 0x8000000000004) (async) sendfile(r1, r0, 0x0, 0x8000000000004) ioctl$RTC_AIE_ON(r0, 0x7001) 02:20:28 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/138, 0x8a}, {&(0x7f0000001300)=""/177, 0xb1}, {&(0x7f00000013c0)=""/120, 0x78}], 0x6, 0x400, 0x61) syz_open_dev$MSR(&(0x7f0000000040), 0x9f13, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/138, 0x8a}, {&(0x7f0000001300)=""/177, 0xb1}, {&(0x7f00000013c0)=""/120, 0x78}], 0x6, 0x400, 0x61) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x9f13, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) [ 748.835030][T22841] should_fail_ex+0x21f/0x230 [ 748.839709][T22841] __should_failslab+0x92/0xa0 [ 748.844733][T22841] should_failslab+0x9/0x20 [ 748.849301][T22841] slab_pre_alloc_hook+0x38/0x180 [ 748.854378][T22841] kmem_cache_alloc+0x52/0x220 [ 748.859166][T22841] ? __inet_hash_connect+0x5a3/0xf60 [ 748.864494][T22841] __inet_hash_connect+0x5a3/0xf60 [ 748.869644][T22841] ? inet_hash_connect+0x90/0x90 [ 748.874595][T22841] ? xfrm_lookup_route+0xc9/0x100 [ 748.880088][T22841] inet_hash_connect+0x80/0x90 02:20:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x2000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 748.884891][T22841] tcp_v4_connect+0x761/0xa80 [ 748.889731][T22841] ? selinux_socket_connect_helper+0x403/0x430 [ 748.895920][T22841] __inet_stream_connect+0x15d/0x720 [ 748.901224][T22841] ? _raw_spin_unlock_bh+0x36/0x40 [ 748.906354][T22841] ? release_sock+0x108/0x110 [ 748.911206][T22841] ? _raw_spin_unlock_bh+0x36/0x40 [ 748.916398][T22841] ? lock_sock_nested+0x10e/0x130 [ 748.921453][T22841] ? selinux_netlbl_socket_connect+0xea/0x100 [ 748.927548][T22841] inet_stream_connect+0x48/0x70 [ 748.932555][T22841] ? __inet_stream_connect+0x720/0x720 [ 748.938061][T22841] __sys_connect+0x1a1/0x1b0 [ 748.942657][T22841] __x64_sys_connect+0x41/0x50 [ 748.947418][T22841] do_syscall_64+0x41/0xc0 [ 748.951829][T22841] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.957778][T22841] RIP: 0033:0x7f4dea8ce389 [ 748.962188][T22841] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:20:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x3000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 748.981863][T22841] RSP: 002b:00007f4de9c41168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 748.990368][T22841] RAX: ffffffffffffffda RBX: 00007f4dea9edf80 RCX: 00007f4dea8ce389 [ 748.998338][T22841] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 749.006339][T22841] RBP: 00007f4de9c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.014325][T22841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.022366][T22841] R13: 00007ffe581cc1bf R14: 00007f4de9c41300 R15: 0000000000022000 [ 749.030347][T22841] 02:20:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (fail_nth: 3) [ 749.115079][T23058] FAULT_INJECTION: forcing a failure. [ 749.115079][T23058] name failslab, interval 1, probability 0, space 0, times 0 [ 749.127723][T23058] CPU: 0 PID: 23058 Comm: syz-executor.2 Not tainted 6.5.0-rc1-syzkaller #0 [ 749.136438][T23058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 749.147229][T23058] Call Trace: [ 749.150555][T23058] [ 749.153495][T23058] dump_stack_lvl+0xda/0x130 [ 749.158189][T23058] dump_stack+0x15/0x20 [ 749.162413][T23058] should_fail_ex+0x21f/0x230 [ 749.167132][T23058] __should_failslab+0x92/0xa0 [ 749.171964][T23058] should_failslab+0x9/0x20 [ 749.176620][T23058] slab_pre_alloc_hook+0x38/0x180 [ 749.181725][T23058] kmem_cache_alloc+0x52/0x220 [ 749.186648][T23058] ? __inet_hash_connect+0xa38/0xf60 [ 749.191956][T23058] __inet_hash_connect+0xa38/0xf60 [ 749.197166][T23058] inet_hash_connect+0x80/0x90 [ 749.202071][T23058] tcp_v4_connect+0x761/0xa80 [ 749.206791][T23058] ? selinux_socket_connect_helper+0x403/0x430 [ 749.213101][T23058] __inet_stream_connect+0x15d/0x720 [ 749.218480][T23058] ? _raw_spin_unlock_bh+0x36/0x40 [ 749.223603][T23058] ? release_sock+0x108/0x110 [ 749.228290][T23058] ? _raw_spin_unlock_bh+0x36/0x40 [ 749.233439][T23058] ? lock_sock_nested+0x10e/0x130 [ 749.238488][T23058] ? selinux_netlbl_socket_connect+0xea/0x100 [ 749.244590][T23058] inet_stream_connect+0x48/0x70 [ 749.249559][T23058] ? __inet_stream_connect+0x720/0x720 [ 749.255024][T23058] __sys_connect+0x1a1/0x1b0 [ 749.259622][T23058] __x64_sys_connect+0x41/0x50 [ 749.264402][T23058] do_syscall_64+0x41/0xc0 [ 749.268818][T23058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 749.274755][T23058] RIP: 0033:0x7f4dea8ce389 [ 749.279162][T23058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 749.298852][T23058] RSP: 002b:00007f4de9c41168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 749.307300][T23058] RAX: ffffffffffffffda RBX: 00007f4dea9edf80 RCX: 00007f4dea8ce389 [ 749.315261][T23058] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 749.323244][T23058] RBP: 00007f4de9c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.331204][T23058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.339164][T23058] R13: 00007ffe581cc1bf R14: 00007f4de9c41300 R15: 0000000000022000 [ 749.347126][T23058] 02:20:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x13000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:29 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x500, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:29 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/138, 0x8a}, {&(0x7f0000001300)=""/177, 0xb1}, {&(0x7f00000013c0)=""/120, 0x78}], 0x6, 0x400, 0x61) syz_open_dev$MSR(&(0x7f0000000040), 0x9f13, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x9f13, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 02:20:29 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="36b23ed46975c9bb47e5865063c4", 0xe}, {&(0x7f0000000240)="ab5aa974b99553bf348ac8a106c8d268e62faca79c4738c484f0bbd3cabe34796d0825551166388a9fee2537e08c0151224679f2c87b422b24c2c87f95d8bcecf4e2684da4b8f30f7129e2b71d1e5f3a9d56f8ff083d918df3b5c6e876540dd66cd8cf7d02bcfc72fa9e552725663a56c68c853c593e93326764c3b7c480886d20db0cd9c5e9bba7fbce1720f767342db680feb12b20ceebf44c5f93666a", 0x9e}, {&(0x7f0000000300)="d3f405390eed90399f4dca677a65d5956f43f50c20f455cbd1a622fa4fe02c73441184c87699102451a0aeeda920ada28199de05b00d4abfa2457f33a64b108d6684b33bc2e75f5889959a2640e8f3b396e145dffc2f8397a8ae5b695a0c676effa6fa762a1abf1dffea6672781536c6c5157595e2ff918def7c1e2279d4d038aa03256e508feb59455d2d6f527b286d5c357f456621f81a2f0fe399068d4e1ed4b29aba7a68d7509e32ccfad4649c565615b81196877b05fe2d85dbd0c9d6dcdea199d72c422fd2ab5188a8b3c2dbbffa6048", 0xd3}, {&(0x7f00000000c0)="46b216d6da3c3f46c0bdcb0c6e8168eb9276368a8ee106598aa6f44a947d58e5672b998fb7d758985cf0c1b88dca3063999f8114973c6e9a390b1785af1b9b64c100c03f846308c57804d9edb5cfc2d61a3bbb1aac11f7e667d35176c2e12ffe654379bdc55177a09416", 0x6a}, {&(0x7f0000000400)="79b7b1f93bec4804b2aad8891231e1b208d8ce792b976e32277a5a2189e141ea7a8e5728a04dec91a4d1b6c1cf8741d8ba3901985bf98ff6e39593f990f42eae2e51d1cb5de2b2c471cc218aec08b0d5724b047ac0ee46d94a0ea4a052879c581d375c1f483003d921a83d408df33d276375c24e5da102f6609d7310f6ffcbcf4d6455bc05cda0344dae38b00588853de00ff0c6208d7e1c46dc2d30e3e44f71af87290a35d74eb6673d91690736bdd4e9c3940f543fb51f669ef24e6c0e42ef4c716757", 0xc4}], 0x5, 0x2, 0x4) r4 = eventfd(0x200) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendfile(r1, r0, 0x0, 0x8000000000004) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_AIE_ON(r0, 0x7001) 02:20:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x4000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (fail_nth: 4) [ 749.723332][T23068] FAULT_INJECTION: forcing a failure. [ 749.723332][T23068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.736557][T23068] CPU: 0 PID: 23068 Comm: syz-executor.2 Not tainted 6.5.0-rc1-syzkaller #0 [ 749.745256][T23068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 749.755418][T23068] Call Trace: [ 749.758721][T23068] [ 749.761662][T23068] dump_stack_lvl+0xda/0x130 [ 749.766263][T23068] dump_stack+0x15/0x20 [ 749.770441][T23068] should_fail_ex+0x21f/0x230 [ 749.775157][T23068] should_fail+0xb/0x10 [ 749.779537][T23068] should_fail_usercopy+0x1a/0x20 [ 749.784581][T23068] _copy_to_user+0x1e/0x90 [ 749.789008][T23068] simple_read_from_buffer+0xa0/0x110 [ 749.794411][T23068] proc_fail_nth_read+0xfc/0x140 [ 749.799389][T23068] ? proc_fault_inject_write+0x210/0x210 [ 749.805080][T23068] vfs_read+0x19f/0x5c0 [ 749.809264][T23068] ? __fget_files+0x1c4/0x200 [ 749.814001][T23068] ? mutex_lock+0xd/0x30 [ 749.818264][T23068] ksys_read+0xeb/0x1a0 [ 749.822450][T23068] __x64_sys_read+0x42/0x50 [ 749.826979][T23068] do_syscall_64+0x41/0xc0 [ 749.831468][T23068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 749.837494][T23068] RIP: 0033:0x7f4dea88009c [ 749.841924][T23068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 749.861733][T23068] RSP: 002b:00007f4de9c41160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 02:20:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x6000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 749.870263][T23068] RAX: ffffffffffffffda RBX: 00007f4dea9edf80 RCX: 00007f4dea88009c [ 749.878245][T23068] RDX: 000000000000000f RSI: 00007f4de9c411e0 RDI: 0000000000000004 [ 749.886293][T23068] RBP: 00007f4de9c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.894280][T23068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.902335][T23068] R13: 00007ffe581cc1bf R14: 00007f4de9c41300 R15: 0000000000022000 [ 749.910320][T23068] 02:20:29 executing program 5: r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000040)) 02:20:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) mmap(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x1000007, 0x2010, r2, 0x5dee2000) mmap(&(0x7f00000eb000/0x4000)=nil, 0x4000, 0xa, 0x8010, r2, 0x3e7de000) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x12) sendfile(r3, r5, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) 02:20:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x8000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:29 executing program 5: r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) (async) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000040)) (async) 02:20:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x14000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r0, 0x406, r0) (async) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) mmap(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x1000007, 0x2010, r2, 0x5dee2000) (async) mmap(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x1000007, 0x2010, r2, 0x5dee2000) mmap(&(0x7f00000eb000/0x4000)=nil, 0x4000, 0xa, 0x8010, r2, 0x3e7de000) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x12) (async) write$cgroup_int(r6, &(0x7f0000000200), 0x12) sendfile(r3, r5, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) 02:20:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x9000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:30 executing program 5: r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000040)) 02:20:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x7, 0x0, @remote}, 0x10) 02:20:30 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x52a, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) 02:20:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0xc, 0x0, @remote}, 0x10) 02:20:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xd000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) (async) mmap(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x1000007, 0x2010, r2, 0x5dee2000) mmap(&(0x7f00000eb000/0x4000)=nil, 0x4000, 0xa, 0x8010, r2, 0x3e7de000) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x12) sendfile(r3, r5, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) 02:20:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x11000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 751.402939][T23389] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 751.414390][T23389] CPU: 0 PID: 23389 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 751.423140][T23389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 751.433183][T23389] Call Trace: [ 751.436451][T23389] [ 751.439421][T23389] dump_stack_lvl+0xda/0x130 [ 751.444093][T23389] dump_stack+0x15/0x20 [ 751.448306][T23389] dump_header+0x95/0x3c0 [ 751.452650][T23389] oom_kill_process+0xe3/0x3e0 [ 751.457411][T23389] out_of_memory+0x9ca/0xc00 [ 751.462039][T23389] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 751.468104][T23389] mem_cgroup_out_of_memory+0x139/0x190 [ 751.473726][T23389] try_charge_memcg+0x75c/0xd20 [ 751.478647][T23389] ? __alloc_pages+0x193/0x340 [ 751.483417][T23389] charge_memcg+0x51/0x200 [ 751.487840][T23389] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 751.493926][T23389] __read_swap_cache_async+0x2fe/0x560 [ 751.499386][T23389] swap_cluster_readahead+0x2a3/0x4f0 [ 751.504834][T23389] swapin_readahead+0x8d/0x700 [ 751.509597][T23389] ? __filemap_get_folio+0x47c/0x500 [ 751.514969][T23389] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 751.520605][T23389] ? swap_cache_get_folio+0x6e/0x210 [ 751.525932][T23389] do_swap_page+0x4d7/0x1550 [ 751.530677][T23389] ? pte_offset_map_nolock+0x11f/0x1c0 [ 751.536138][T23389] handle_mm_fault+0x9ec/0x2c10 [ 751.541022][T23389] ? mt_find+0x1d1/0x300 [ 751.545340][T23389] exc_page_fault+0x24d/0x650 [ 751.550037][T23389] asm_exc_page_fault+0x26/0x30 [ 751.554884][T23389] RIP: 0033:0x7fb036a9283c [ 751.559292][T23389] Code: 76 de c9 00 e8 03 00 00 48 8d 1d 5f 47 17 00 e8 ea 4a 05 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 b9 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 ef ee ff ff eb [ 751.578979][T23389] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 751.585106][T23389] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 0000000000000000 [ 751.593093][T23389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.601148][T23389] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 751.609109][T23389] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b77c3 [ 751.617069][T23389] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 751.625116][T23389] [ 751.628360][T23389] memory: usage 307200kB, limit 307200kB, failcnt 71163 [ 751.635293][T23389] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 751.643277][T23389] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 751.650584][T23389] Memory cgroup stats for /syz1: [ 751.655439][T23389] cache 0 [ 751.663428][T23389] rss 0 [ 751.666185][T23389] shmem 0 [ 751.669236][T23389] mapped_file 0 [ 751.672687][T23389] dirty 0 [ 751.675614][T23389] writeback 4096 [ 751.679164][T23389] workingset_refault_anon 20360 [ 751.684003][T23389] workingset_refault_file 5392 [ 751.688827][T23389] swap 737280 [ 751.692106][T23389] pgpgin 110492 [ 751.695548][T23389] pgpgout 110490 [ 751.699135][T23389] pgfault 88453 [ 751.702581][T23389] pgmajfault 9102 [ 751.706206][T23389] inactive_anon 0 [ 751.709886][T23389] active_anon 0 [ 751.713344][T23389] inactive_file 0 [ 751.717052][T23389] active_file 0 [ 751.720497][T23389] unevictable 0 [ 751.724082][T23389] hierarchical_memory_limit 314572800 [ 751.729489][T23389] hierarchical_memsw_limit 9223372036854771712 [ 751.735786][T23389] total_cache 0 [ 751.739280][T23389] total_rss 0 [ 751.742561][T23389] total_shmem 0 [ 751.746006][T23389] total_mapped_file 0 [ 751.750086][T23389] total_dirty 0 [ 751.753608][T23389] total_writeback 4096 [ 751.757714][T23389] total_workingset_refault_anon 20360 [ 751.763087][T23389] total_workingset_refault_file 5392 [ 751.768389][T23389] total_swap 737280 [ 751.772272][T23389] total_pgpgin 110492 [ 751.776322][T23389] total_pgpgout 110490 [ 751.780470][T23389] total_pgfault 88453 [ 751.784505][T23389] total_pgmajfault 9102 [ 751.788687][T23389] total_inactive_anon 0 [ 751.792830][T23389] total_active_anon 0 [ 751.796850][T23389] total_inactive_file 0 [ 751.800996][T23389] total_active_file 0 [ 751.805024][T23389] total_unevictable 0 [ 751.809030][T23389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23389,uid=0 [ 751.824394][T23389] Memory cgroup out of memory: Killed process 23389 (syz-executor.1) total-vm:46484kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 752.050013][T23426] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 752.061403][T23426] CPU: 0 PID: 23426 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 752.070213][T23426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 752.080360][T23426] Call Trace: [ 752.083647][T23426] [ 752.086581][T23426] dump_stack_lvl+0xda/0x130 [ 752.091259][T23426] dump_stack+0x15/0x20 [ 752.095407][T23426] dump_header+0x95/0x3c0 [ 752.099797][T23426] oom_kill_process+0xe3/0x3e0 [ 752.104648][T23426] out_of_memory+0x9ca/0xc00 [ 752.109299][T23426] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 752.115477][T23426] mem_cgroup_out_of_memory+0x139/0x190 [ 752.121086][T23426] try_charge_memcg+0x75c/0xd20 [ 752.125952][T23426] ? __alloc_pages+0x193/0x340 [ 752.130726][T23426] charge_memcg+0x51/0x200 [ 752.135147][T23426] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 752.141142][T23426] __read_swap_cache_async+0x2fe/0x560 [ 752.146624][T23426] swap_cluster_readahead+0x488/0x4f0 [ 752.152011][T23426] swapin_readahead+0x8d/0x700 [ 752.156807][T23426] ? __filemap_get_folio+0x47c/0x500 [ 752.162151][T23426] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 752.167821][T23426] ? swap_cache_get_folio+0x6e/0x210 [ 752.173135][T23426] do_swap_page+0x4d7/0x1550 [ 752.177779][T23426] ? mas_state_walk+0x267/0x5d0 [ 752.182644][T23426] ? pte_offset_map_nolock+0x11f/0x1c0 [ 752.188129][T23426] handle_mm_fault+0x9ec/0x2c10 [ 752.193067][T23426] ? mt_find+0x1d1/0x300 [ 752.197331][T23426] exc_page_fault+0x24d/0x650 [ 752.202111][T23426] asm_exc_page_fault+0x26/0x30 [ 752.206982][T23426] RIP: 0033:0x7f074fb004ff [ 752.211404][T23426] Code: ff eb 27 0f 1f 84 00 00 00 00 00 4c 89 f7 e8 58 05 ff ff 40 08 c5 0f 85 ff 01 00 00 41 83 c5 01 45 39 6f 04 0f 86 c4 00 00 00 <48> 8b 0c 24 44 89 ee 4c 89 f0 4d 8b 77 28 4c 03 34 f1 44 89 f3 81 [ 752.231045][T23426] RSP: 002b:00007ffc045c9cf0 EFLAGS: 00010202 [ 752.237232][T23426] RAX: 00000000816ba04c RBX: 00000000816ba04b RCX: 0000000080000000 02:20:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x15000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:32 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x3, 0x11, 0xbb37, 0x3, "094994951a11d9e9800065fb3d58c33304fd1c3d3a17940000000000ff0100"}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) syncfs(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f0000000100)=@md5={0x1, "9858367680c1f2f38a298e9eabd5692e"}, 0x11, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) sendmmsg$inet6(r1, &(0x7f0000001680)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x3, @private2, 0xffffffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000240)="65d88c1df3a439ecf463bc734d14d7963899efce18f7a7359f823d43696588e2be9ed848a61cf87b788f5595901b805e24f8b607eacc78d3513714af11729a847963be80e4b7ae716420e9aa85daa415351e04dfdbed92fd151d42a229cc9ab95f12330a799847e0039dd27854b09cbda391414f", 0x74}, {&(0x7f00000002c0)="ddea91e47faa069183e4530eca5991a8a004a6d765a7fc763a4011c958795639d59109", 0x23}, {&(0x7f0000000300)="9d91b71e2b62f0a2941cc1007ffaa65d39fd3c69ca91e705641ec04e48c5557f4994660010c54417f60b77175ff7c1af21a384e48dfc6b05fc0596cb174c46b97fdbdf2312b1d88e1c60e489a36e9351ab5207bbf7d6db657f0a9b9be0e78cc2ad75c1c66e6ec6598439fd02f82670101f8f0581317a17f22546f8e3cc4802a07ac19ce35cadfbe3f8b9034756d1df01efbd4a5388d393c28ec8efd09e31b44354c15350e5658cca34a43fab8235d3e9e303f70d73d63ca34f19dcd36e2b3247aae28be50adfed3fd9d2fd0fe75a88478f19ef453af72a5ff8e497f24ea76a051e71834733b7fe9a57922d489c7b12e0f0e571901db599c8", 0xf8}], 0x3, &(0x7f0000000440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0xe521}}, @hopopts_2292={{0x1118, 0x29, 0x36, {0x2c, 0x21f, '\x00', [@generic={0x0, 0x1000, "21d537a194a514af82b90ce7819c59d57edfc29d4b91abd036bdccf9667d8394418b6eedcab94e97270d90e46e6078e41c9c40cfb92145d80ecd47a63945234d84905e60e6f98b80462ec0576eade448e0883fa3f3d256684db4a100eb540c199cc2b24a3adf053d00c8b4e1b64430c28a62b9aada24565a4f4dd4b5624f7af9022bf3949c08d40a2a06266c513e18ea484ed002c468e844a35948e1663077162eea723eaba44dff49f55768cf9990cae0dd3c0e408fe178461e411a25d5d8f7e5e60f727f4c2bc4edcf72d78e1d829e4657745c2748e33885867d957cfd3aa1cb122ae3645d4b8d847b755ed44e9d9950761ac1709edc17fc1d0b7be6d016690fab770d69caed5f8daa02c00507758c2669b63b3e671e69601e77af78c3ecc9f5a1bcac2e301156d6c740b04d7448dc25ea2b7293a21ff5949d48d1f638b9f23a5671d2d9b0aa3d75a08565d19b35c6e2a1515ee0e1a0e8b9436b29210094e9adfe498decb927d6b1e21ba110b1992310a83ac9a931a1b55fa34d986fb3b035be90f985c1276b0fda2a2df7c71328081562107c380a9b25b67c0de163281a7e6953e96be2abf4aaf2181b0e4fd5f7d19a68e87436d1145e1fd8fad99a49b183f027d51fdb889282f208bb2476d3d1bcef9ee956c8512c2cb3ab19c65f61b1442c0f4745fb58fd278c46dacd7be28a04d67052d6659a313570887282d1ab8b41e96a53ed2f9cd124c1dfa8f186c6be5543e2a886f4c35235efa69a47fafd31d4850a01a989e5d12488d2a2bee330c2862187cf0449aa43f146bb39d0cd030d1086823ae0a425c397ecda651408845ad26c31a2fa1d0f70ba85d69459d1e429579b1a42e604f59122a2c62aedc67bd513c86f9c941f97895d937ddb811f9445daae7f950483f7c9c8c3ef87bbf9e797cdd2ff60b2a606ff79dd22d0663cea61ad9973c3f776c48be15476d47c8f4770fa07a9f6dd3e3914425e931806635cef93934db222543c0f1526d3bab11dca0c3ce6aad1b04431e3e1cfc6bd1d74f0ccd4e8e233865f9c5b5633da176b04784cf992fd110caee39ca080d42840fef2f8b9ef48aefd7bb3997a2bc8f1411c62756c1e2578937d1114184302f9cec75fbda33c525528d31f874004617d28647c9b772cfa6628f16d1d56aa06671ebc1ed28d994b6b33629537c86cbc190d1f6a9c5e87a143ab7f813cc0b4f7554ce51eee6a7ee33e0cc40b6ffe658796996046714fc05255804d225ef2411976a3b0b244cbb5841ccbc531ed5f25d42e29f568716ac4daf129a6a2ed5d650cc17df4b2d9d12344d23962504475196387a20171b0444eebd2a3d916ad4425bfa0f67c23311ef95036e296650fc524793429b7fc80ff3bce165c53f5f26eb8736c2965ce00cbccdf2f93d7af41bd0cfcbe84319df9e136f85f6c90fac212d240bb7b931ef6b54c7b68f3b8a28e8fb99be37816f5c39322d7bce5ce9011b95325a18c8bcde56693f345541c0f940720fe2770a1981bad4226a81e79ff4c3bec1e27dd8a15c0c887743f6281ef94aa9d85d3e2014722a8fdeb22d0cd93caa750de3feab9aaac85c8db8f734750a5fe9f5de9dc12a374314d276a32cf16405ea4ffcf9197921bf75ac2fbde661f47e7c4e3d859d472396552848965750822341b5ea4fb2c0379f7ecffbb964e6a39d937cb21c9024e854603c63eef48d30bca4cadbc59872bc94c5e91d1d6986a394f0b50ac66715237f98d95e5567a20c3a34300fb54bdfcd72f7ed1d39a531cbeb65e402f6511fc9bd3cb2d92d699d7291fdfdc62fb6e934b9355faf0d6301cdc1789a7bd4ac30418fd5e4258a62ccce5ec22d1a146d4058957e0d4f91121dea5388d0ed7bf56970acc1065a48985fff163cddd1c9c616d6d039075ac08bad5557f1503892c55d60f52c59880ee461e8f147ec5c5d2d5fa0112f0ace99d84670ef56f42205c4d2e17caab416e0c855c68e800982bb03ccf47b184a24f3d52575744c02228340d320a47f1c1eaed4c8475f1ed2c029577a6ffd2b1bdb8ebfbacd18ff1346cc466c961009930ab3a178b2aeed18d1706e8f0b9032a41d202fab8d17052e3471d9ff87b899eb3121ff9f75d7b6981f45d19b61dec7eaa60aa876780e978722af0bc2e669c0a70fb7a3c417a24c21fbe2318eacebf179d67f527de4c4382677f646d1fd7997e289ec9eddd6102d6299d3a6ef422124e9524ef0c3c910a6657fb58435504c426f7314d07144c5dacf9383c8d5763d7ac40f87c39c7bcfd608c614e3a5b4fa3fcf0e13d027de728c0d17f1d4b4c8c5bce2e8b3891d4ad49af613edcc7998d23e9ad91b82d9521621b11ceab2a3294aabef0958b1c196388e72809cd49577d89d72cc0c93c9e924362e800b34acdfb91bb31236cdce02e1376c10e03dd9a4efdbed48e857fc554216e311f256f124f2adb28a4f38bbd89ca4bbb6a29aa5c21072a9474a2193b1676702174dfb0baefd54b9a92783e40de225e42dac8cf521c7070070fd5b3aa9c9b471c6d56f33526539bc5064ae4761bb2efe3e9c0729e31d186568db0c932a999f13fc0068f366b352a50ff3734262d6c5283900e8da5edb0a733eb9e10d0e0d50b61abb9541b848396f991846ac5caaa9edb5f4939292a2e043e16925362e69cdac387d0e185eea59eecc61259df9471cf7e1b42226449ea9d27d5b80476c1cf1a51a812e151f16df8e3beb396d2ceae70f3d0254334ffa510627a1b8a0d7d316604c56b3bb65b0eff84357b9e921ea747ec14558a5920c0293c1f698a6cf5add93c93e4fddeac3fa9a77113ed8ebbc3638f8d6c5486ddfa6b4a352a4ff4a68a63766ba6f9f10da5a97ad2c6f9707fd69999568111ba02e0963687defdb432cc4e60d8526ecf25cd2e28f30a82843a8ed0b4e1d41f5436bf8446001ed50f64ec4006ead1b02ca15b13595988689ba3fb7c385d60fe0abf0ae83d6ff92e91a197ed46e0a9c5aa926c5a07de730690b95847355268e8bbb78ef49173cec6e4e98dca5cff783407e842cc6b343d70a0a569035927f4efb81e6ccd3cb5b3efbae16b9b6db88a3645769880c217e2f59681282716a9ec68e61517652931c5c7e2307aa8a82f5d7ca70babe508deb4e3460bddbec852ffc68a5a57fee1c237f986badf79c60a60a116b5efefb574b03d37b6a50e17185b7d8b0196ec3b609ea80ef0d7d4323bb79fe9319beb01d55143b37c8eb26c43b5fe767be5d26a430f658bb3e2be994da04f0d4cbe12baa264bf2cc8a98d5c64b5ecbdcce3a1bcae73d0d6a6a8bfefda50e76f7e12e728398cdb5fd9afa7aa2f952ed233ccf087fb73c37e11131df1180d1aeee00ba47bb5ae390db300dac80fb0fce11b03736add921ea32b0175b58b459e0e0f5354fadb5844e196d871b41d721665d96f99591bfd70193a96a8c45fb72a5bed49bccc73e9da1d2734ef2b7c453024f51dcc6c6127b2d66c8c89d2cffe07ec69ac10f6ae9b8b928dce5607f26986a7d50feafc9b3216cae2e5a045983384b430f944c4f31c178df88a5d94082cc4eb015217c46e7827ff07d0f6b72afaac6ef8fa7aabeef67177bd61caa5577eeb9f8f41fd661d5f5fc0e5e39278d87e6c59847a6a07e5e2a18433facfd3efd7f970ce75fa31232dd1b4d9a1e62140629399fc768b13cf9c018c9a0a374d5c2fd6c469ea5d1c53898082e93c26135029873c78dd47c24ef5e34355abad73722ac71dce77422c59b3626cda0160b21a7e8021af492c67755f175831fbb5568aab9ad4ce93995519b067a9cdd6df5c86cd9eb8c0ecc8f2e284981415b6cf05245dc2ea65d6862cc6a27b7cb5157bd0d541f0c2914f25aadf67b76b2eb3c1dc3bb7babe7b5d3d83c5747f7520582b558026706fe9a17b1e3a0bd3bc33e63ec83a88eba321fd36fa77e3d6f8f993f8161f3f713a8482152ea6630fa8272ee7a0a392e0c2855e23ab71b6d9a1f1650af902d326f74a744adc1a00a66a9ea3abe4779e09c7b1835b2c3fde685c63acc1d93391eeae60bd2b6ee261658759e7b9ff7dbeed952fe9b1ecb278abf1636e3c7204fc19075f55eb336e963cfd109ca96ac94ea002224b478ad2b48197251445fa13c23713dbe131e59118df2b16675ec568063b4d055006dbda4635bd01f1eb90a7711a19e7b6bcd3e1f50f415975810ff2b4a0d284b074c465a602aa2732a7e7123e4ba2f60a513cdaffb02e7c8fdd8a80d2230cc604ba033dfd0be36ca4694d21d9c6c911d05818db0a55164e920c48c8968b4ade82fb971caa250d53dcaa9d7f65e4d9eddecaaae45200fe2de8bf745c4f64675850ee7656593a7b34b101b69faa7f4a6e9654d146fc496770486dfc63897bfb063471e50e31ca89503fe84318fb5339c0f5474e48566c60e7c141ca06f77df001778299e709606c58509ee4f9292ce68faa94a0e223f068532e1394f1f09ba8495dbb0993ce5722e0a21481e935a8257c8c522d6c7339b592f5e834d20d330589d513551262cdb8ccfc899f27fba038c39164d677dbd2cfc8393e48c07e35840344d30f5d6177f97d7f88d23879f118afcb73c3ba49e95855d5a61a11da5c1a1a3937aaef3d6c8a30dd42f80800f3d255f26c2f6254563ddf22fbf3f9bcae945cab2572c943b323ed2dee9216664e4c37a775de1bb4be3ac323e1cefb414f4aaf740a904c5fceb613a8b894b64d12f5b77efbcdde0ec4682ff68d3d6d5969fba8ac191a46c67169bf9b9ded22d3f8649d8253abf1e1edfe6f8e0723cc039f7537f7f0bf321f4f66f4dfd761097832017217a629fdf6b2879b3ff04276daecb244b3560556bbc5e1ce5e28166718e7e61d933ad5093939f6c58b878b1ff2fd59a8d8b8920cd5d09d6253cf1bc6c0bc93c3b444f5b778ea26a086fc065d1491d021757d164e23cd363e04ac4344d98595d9ef7741a69a5e889526ea5121d87c1363f65645783be10f6d9bcfb9dd49ee37fc4c1ec8c3cf6882f28ea2aaff434ef9235bcd46759812572ecbb2a26514d5954a187f0767d9840c986e3ce047b639d3fdac6bdb841e5fe66d6b0af40d47e4465400b1e590fd8d4a45f0323966d959d8fa718138cbe9f1300d9944af1633227bcb01c4f5249bddbffbcce36684ae1ed6e79919705616ee41da1a2c8688b0dd8c5302a1d411331d7d4eb35434b06edf8b51608dfc823772e7399df58fecf6255a4898849d029f2236293b5a8b9fe214ee1b8e794907d4c38935aecf9f87732cbe4ff02600e97836b75ea41ed51343b1be0a464d2bff18e543763f6af5308afa207ab515603a3e8c216552999e34e082cff395f90a10fdbc3f2aaaa8d387c9fdf99fb624c3b9b1f0730455d0a1c7104f780c0fa1312b9087357f7c2ecaa69f7b118b873144224868da906d1373209b98d9d91e28dc69dfd2028c2140755a39cfe89f706f25246d77b5bc13861ccf6961ff7f8baba122fd88be2787e93a3a5aabafca66a1e48d2226d052088d3d6bc4c77f27f1738d39d7becaedea5ff9ccd3fa557d5d7735241551b264bce827c8d8fa8c015d93ee33e0e9302507470b81c36396094d2e6c0b47a0a1ddc6da63e855f1cd0662b3ca637309e2d1c7297d5f9847b1706e396a2af5d233183cd19ba226e864b53faf582039de2a963605274d464523d5b16f4b22b1a080826781e1d01c3c3ed4d0bb6b1c00205a7f8d6900b61cc69f632d6b024449f481cab136c7c68523a6d158493099894e53c7d370966283a3122c510459aa15b728bb7b838bde376f9d86099e8067f07fa7df3cb1584ca63172c951"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x88, 0xf5, "b6e761057de4508bcd6366bda05d4b9e546f708a807b4dca32e87e8854cf0a98ad177d9f79559b05aaf251415a1298a6f9db67bde457392acba7b006a6f701e938fc5384fcbe1e6fb0f66ead1e4e8db24224ebc12a2e215740aee4da9b5e078b85fa56fc77ad3a2175f1960bd1bdcecb58d766413305aeb52eae2c7d6e2f4b8ade90811936ad4d44c35a4b80b33b675614c18b3db62ddeeb6ab5962dd1978463aef2829498d91e78f76dd8f57785d7586dbd0b3f364a96da1808e3ca0ae12ddc7672d607d229309950bd3bf2437396f75932a9d041adf7e6a984da1342ae587a7c04718f592e672671b315d958e9529c69d8bff311"}]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x0, 0x19, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x74, 0x880, [0xfb]}}, @generic={0x7, 0xad, "6dedd07f00f7c000f77b94d887fa9adf563cdcd05fe67a0ac3af79ca8dea1b3430c08362ba3abf71787aa025e07fee4668710f5d69ca39b8d2a48b7f5fd0ac9eda39536521747f52b60b927a09908966c5a96f131c7dcdcab5c85fe1b65e8af8af425991af250b20f00eaefb8126d3ec8dc3bf03a5d2cc9a69366c8c32460cb499fa4447a1756edb3426f6eb78fac4dae4b2cfb9392236769ff9dce0c3cac27ee88a23d13015210712c05777a0"}, @ra={0x5, 0x2, 0x8001}, @enc_lim={0x4, 0x1, 0xfd}]}}}], 0x1228}}], 0x1, 0x4008855) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a311070d657b67cf495362ec71125e1b271dbb9ea6d106cce7ce2970700000000000000694cfa2efe00000000000000df18f6166b556d41fd30e64dcc6fdd53a2e253"], 0x46) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x4100, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) 02:20:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 02:20:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x12000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x5b000, 0x3, [0x7fffffff, 0x5e, 0x5, 0x40]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) [ 752.245285][T23426] RDX: 00000000816ba04b RSI: 0000000000007eba RDI: 000000000000004c [ 752.253301][T23426] RBP: 0000000000000001 R08: 0000001b2c620000 R09: 00000000816ba04f [ 752.261291][T23426] R10: 00007ffc045f2080 R11: 000000000001ef90 R12: 00007f074fc67000 [ 752.269294][T23426] R13: 00000000000229c1 R14: ffffffff816bac03 R15: 00007f074fc730e8 [ 752.277360][T23426] ? __ext4_journal_get_write_access+0x43/0x450 [ 752.283669][T23426] [ 752.286844][T23426] memory: usage 307200kB, limit 307200kB, failcnt 65667 [ 752.293780][T23426] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 752.301897][T23426] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 752.309327][T23426] Memory cgroup stats for /syz3: [ 752.336569][T23426] cache 16384 [ 752.344805][T23426] rss 0 [ 752.347603][T23426] shmem 0 [ 752.350532][T23426] mapped_file 0 [ 752.353985][T23426] dirty 4096 [ 752.357288][T23426] writeback 0 [ 752.360567][T23426] workingset_refault_anon 15699 [ 752.365469][T23426] workingset_refault_file 27286 [ 752.370392][T23426] swap 393216 [ 752.373691][T23426] pgpgin 782025 [ 752.377162][T23426] pgpgout 782021 [ 752.380759][T23426] pgfault 87823 [ 752.384241][T23426] pgmajfault 6700 [ 752.387892][T23426] inactive_anon 0 [ 752.391628][T23426] active_anon 0 [ 752.395083][T23426] inactive_file 16384 [ 752.399129][T23426] active_file 0 [ 752.402589][T23426] unevictable 0 [ 752.406097][T23426] hierarchical_memory_limit 314572800 [ 752.411570][T23426] hierarchical_memsw_limit 9223372036854771712 [ 752.417748][T23426] total_cache 16384 [ 752.421623][T23426] total_rss 0 [ 752.424935][T23426] total_shmem 0 [ 752.428552][T23426] total_mapped_file 0 [ 752.432529][T23426] total_dirty 4096 [ 752.436268][T23426] total_writeback 0 [ 752.440218][T23426] total_workingset_refault_anon 15699 [ 752.445583][T23426] total_workingset_refault_file 27286 [ 752.450971][T23426] total_swap 393216 [ 752.454767][T23426] total_pgpgin 782025 [ 752.458753][T23426] total_pgpgout 782021 [ 752.462872][T23426] total_pgfault 87823 [ 752.466953][T23426] total_pgmajfault 6700 [ 752.471101][T23426] total_inactive_anon 0 [ 752.475319][T23426] total_active_anon 0 [ 752.479310][T23426] total_inactive_file 16384 [ 752.483805][T23426] total_active_file 0 [ 752.487851][T23426] total_unevictable 0 [ 752.491887][T23426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23426,uid=0 [ 752.507247][T23426] Memory cgroup out of memory: Killed process 23426 (syz-executor.3) total-vm:48796kB, anon-rss:500kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x1a000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) 02:20:32 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x3, 0x11, 0xbb37, 0x3, "094994951a11d9e9800065fb3d58c33304fd1c3d3a17940000000000ff0100"}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) syncfs(r0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f0000000100)=@md5={0x1, "9858367680c1f2f38a298e9eabd5692e"}, 0x11, 0x2) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async, rerun: 64) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f0000001680)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x3, @private2, 0xffffffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000240)="65d88c1df3a439ecf463bc734d14d7963899efce18f7a7359f823d43696588e2be9ed848a61cf87b788f5595901b805e24f8b607eacc78d3513714af11729a847963be80e4b7ae716420e9aa85daa415351e04dfdbed92fd151d42a229cc9ab95f12330a799847e0039dd27854b09cbda391414f", 0x74}, {&(0x7f00000002c0)="ddea91e47faa069183e4530eca5991a8a004a6d765a7fc763a4011c958795639d59109", 0x23}, {&(0x7f0000000300)="9d91b71e2b62f0a2941cc1007ffaa65d39fd3c69ca91e705641ec04e48c5557f4994660010c54417f60b77175ff7c1af21a384e48dfc6b05fc0596cb174c46b97fdbdf2312b1d88e1c60e489a36e9351ab5207bbf7d6db657f0a9b9be0e78cc2ad75c1c66e6ec6598439fd02f82670101f8f0581317a17f22546f8e3cc4802a07ac19ce35cadfbe3f8b9034756d1df01efbd4a5388d393c28ec8efd09e31b44354c15350e5658cca34a43fab8235d3e9e303f70d73d63ca34f19dcd36e2b3247aae28be50adfed3fd9d2fd0fe75a88478f19ef453af72a5ff8e497f24ea76a051e71834733b7fe9a57922d489c7b12e0f0e571901db599c8", 0xf8}], 0x3, &(0x7f0000000440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0xe521}}, @hopopts_2292={{0x1118, 0x29, 0x36, {0x2c, 0x21f, '\x00', [@generic={0x0, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x88, 0xf5, "b6e761057de4508bcd6366bda05d4b9e546f708a807b4dca32e87e8854cf0a98ad177d9f79559b05aaf251415a1298a6f9db67bde457392acba7b006a6f701e938fc5384fcbe1e6fb0f66ead1e4e8db24224ebc12a2e215740aee4da9b5e078b85fa56fc77ad3a2175f1960bd1bdcecb58d766413305aeb52eae2c7d6e2f4b8ade90811936ad4d44c35a4b80b33b675614c18b3db62ddeeb6ab5962dd1978463aef2829498d91e78f76dd8f57785d7586dbd0b3f364a96da1808e3ca0ae12ddc7672d607d229309950bd3bf2437396f75932a9d041adf7e6a984da1342ae587a7c04718f592e672671b315d958e9529c69d8bff311"}]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x0, 0x19, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x74, 0x880, [0xfb]}}, @generic={0x7, 0xad, "6dedd07f00f7c000f77b94d887fa9adf563cdcd05fe67a0ac3af79ca8dea1b3430c08362ba3abf71787aa025e07fee4668710f5d69ca39b8d2a48b7f5fd0ac9eda39536521747f52b60b927a09908966c5a96f131c7dcdcab5c85fe1b65e8af8af425991af250b20f00eaefb8126d3ec8dc3bf03a5d2cc9a69366c8c32460cb499fa4447a1756edb3426f6eb78fac4dae4b2cfb9392236769ff9dce0c3cac27ee88a23d13015210712c05777a0"}, @ra={0x5, 0x2, 0x8001}, @enc_lim={0x4, 0x1, 0xfd}]}}}], 0x1228}}], 0x1, 0x4008855) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (rerun: 32) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a311070d657b67cf495362ec71125e1b271dbb9ea6d106cce7ce2970700000000000000694cfa2efe00000000000000df18f6166b556d41fd30e64dcc6fdd53a2e253"], 0x46) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x4100, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) 02:20:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x5b000, 0x3, [0x7fffffff, 0x5e, 0x5, 0x40]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) sendfile(r2, r1, 0x0, 0x8000000000004) (async) sendfile(r2, r1, 0x0, 0x8000000000004) 02:20:32 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x600, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x20c, @remote}, 0x10) 02:20:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x20000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 752.986167][T23719] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 752.997540][T23719] CPU: 1 PID: 23719 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 753.006226][T23719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 753.016414][T23719] Call Trace: [ 753.019769][T23719] [ 753.022728][T23719] dump_stack_lvl+0xda/0x130 [ 753.027336][T23719] dump_stack+0x15/0x20 [ 753.031497][T23719] dump_header+0x95/0x3c0 [ 753.035889][T23719] oom_kill_process+0xe3/0x3e0 [ 753.040718][T23719] out_of_memory+0x9ca/0xc00 [ 753.045399][T23719] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 753.051576][T23719] mem_cgroup_out_of_memory+0x139/0x190 [ 753.057140][T23719] try_charge_memcg+0x75c/0xd20 [ 753.061995][T23719] ? __alloc_pages+0x193/0x340 [ 753.066761][T23719] charge_memcg+0x51/0x200 [ 753.071246][T23719] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 753.077257][T23719] __read_swap_cache_async+0x2fe/0x560 [ 753.082750][T23719] swap_cluster_readahead+0x2a3/0x4f0 [ 753.088201][T23719] swapin_readahead+0x8d/0x700 [ 753.093038][T23719] ? __filemap_get_folio+0x47c/0x500 [ 753.098322][T23719] ? finish_task_switch+0xb6/0x280 [ 753.103452][T23719] ? swap_cache_get_folio+0x6e/0x210 [ 753.108827][T23719] do_swap_page+0x4d7/0x1550 [ 753.113466][T23719] ? pte_offset_map_nolock+0x11f/0x1c0 [ 753.118925][T23719] handle_mm_fault+0x9ec/0x2c10 [ 753.123826][T23719] ? mt_find+0x1d1/0x300 [ 753.128069][T23719] exc_page_fault+0x24d/0x650 [ 753.132786][T23719] asm_exc_page_fault+0x26/0x30 [ 753.137715][T23719] RIP: 0033:0x7fb036b0c0b4 [ 753.142285][T23719] Code: 3c 24 48 89 4c 24 18 e8 aa e7 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 e3 e7 ff ff 48 8b 04 24 eb 97 66 2e 0f 1f 84 00 00 [ 753.162034][T23719] RSP: 002b:00007ffec69faef0 EFLAGS: 00010293 [ 753.168109][T23719] RAX: 0000000000000000 RBX: 00007fb036c06f80 RCX: 00007fb036b0c0b1 [ 753.176079][T23719] RDX: 00007ffec69faf30 RSI: 0000000000000000 RDI: 0000000000000000 [ 753.184057][T23719] RBP: 00007fb036c08980 R08: 0000000000000000 R09: 00007ffec6a550b0 [ 753.192025][T23719] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000b7d54 [ 753.200070][T23719] R13: 00007ffec69fb040 R14: 00007fb036c07050 R15: 0000000000000032 [ 753.208057][T23719] [ 753.211190][T23719] memory: usage 307200kB, limit 307200kB, failcnt 71427 [ 753.218223][T23719] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 753.226217][T23719] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 753.233536][T23719] Memory cgroup stats for /syz1: [ 753.235184][T23719] cache 0 [ 753.243150][T23719] rss 4096 [ 753.246168][T23719] shmem 0 [ 753.249160][T23719] mapped_file 0 [ 753.252650][T23719] dirty 0 [ 753.255595][T23719] writeback 0 [ 753.258905][T23719] workingset_refault_anon 20383 [ 753.263770][T23719] workingset_refault_file 5392 [ 753.268552][T23719] swap 737280 [ 753.271829][T23719] pgpgin 110541 [ 753.275280][T23719] pgpgout 110540 [ 753.278868][T23719] pgfault 88574 [ 753.282328][T23719] pgmajfault 9116 [ 753.286009][T23719] inactive_anon 0 [ 753.289708][T23719] active_anon 4096 [ 753.293491][T23719] inactive_file 0 [ 753.297133][T23719] active_file 0 [ 753.300617][T23719] unevictable 0 [ 753.304067][T23719] hierarchical_memory_limit 314572800 [ 753.309449][T23719] hierarchical_memsw_limit 9223372036854771712 [ 753.315595][T23719] total_cache 0 [ 753.319074][T23719] total_rss 4096 [ 753.322657][T23719] total_shmem 0 [ 753.326104][T23719] total_mapped_file 0 [ 753.330235][T23719] total_dirty 0 [ 753.333684][T23719] total_writeback 0 [ 753.337516][T23719] total_workingset_refault_anon 20383 [ 753.342924][T23719] total_workingset_refault_file 5392 [ 753.348226][T23719] total_swap 737280 [ 753.352020][T23719] total_pgpgin 110541 [ 753.355992][T23719] total_pgpgout 110540 [ 753.360171][T23719] total_pgfault 88574 [ 753.364144][T23719] total_pgmajfault 9116 [ 753.368378][T23719] total_inactive_anon 0 [ 753.372523][T23719] total_active_anon 4096 [ 753.376768][T23719] total_inactive_file 0 [ 753.380943][T23719] total_active_file 0 [ 753.384991][T23719] total_unevictable 0 [ 753.389001][T23719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23719,uid=0 [ 753.404433][T23719] Memory cgroup out of memory: Killed process 23719 (syz-executor.1) total-vm:46484kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 753.496189][T23915] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 753.507728][T23915] CPU: 0 PID: 23915 Comm: syz-executor.3 Not tainted 6.5.0-rc1-syzkaller #0 [ 753.516483][T23915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 753.526576][T23915] Call Trace: [ 753.529861][T23915] [ 753.532791][T23915] dump_stack_lvl+0xda/0x130 [ 753.537389][T23915] dump_stack+0x15/0x20 [ 753.541653][T23915] dump_header+0x95/0x3c0 [ 753.545992][T23915] oom_kill_process+0xe3/0x3e0 [ 753.550857][T23915] out_of_memory+0x9ca/0xc00 [ 753.555505][T23915] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 753.561660][T23915] mem_cgroup_out_of_memory+0x139/0x190 [ 753.567285][T23915] try_charge_memcg+0x75c/0xd20 [ 753.572143][T23915] ? __alloc_pages+0x193/0x340 [ 753.576911][T23915] charge_memcg+0x51/0x200 [ 753.581391][T23915] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 753.587403][T23915] __read_swap_cache_async+0x2fe/0x560 [ 753.592872][T23915] swap_cluster_readahead+0x2a3/0x4f0 [ 753.598250][T23915] swapin_readahead+0x8d/0x700 [ 753.603025][T23915] ? __filemap_get_folio+0x47c/0x500 [ 753.608333][T23915] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 753.614072][T23915] ? swap_cache_get_folio+0x6e/0x210 [ 753.619437][T23915] do_swap_page+0x4d7/0x1550 [ 753.624135][T23915] ? pte_offset_map_nolock+0x11f/0x1c0 [ 753.629691][T23915] handle_mm_fault+0x9ec/0x2c10 [ 753.634625][T23915] ? mt_find+0x1d1/0x300 [ 753.638960][T23915] exc_page_fault+0x24d/0x650 [ 753.643695][T23915] asm_exc_page_fault+0x26/0x30 [ 753.648599][T23915] RIP: 0033:0x7f074fb768cf [ 753.653019][T23915] Code: 00 75 27 64 8b 04 25 08 03 00 00 41 89 c3 41 83 e3 fd f0 64 44 0f b1 1c 25 08 03 00 00 75 ec 44 89 d8 83 e0 0c 83 f8 04 74 01 64 48 8b 3c 25 00 00 00 00 b8 ca 00 00 00 4d 31 d2 48 81 c7 08 [ 753.672760][T23915] RSP: 002b:00007ffc045c9d28 EFLAGS: 00010297 [ 753.678851][T23915] RAX: 0000000000000000 RBX: 00007f074fc72f80 RCX: 00007f074fb780b1 [ 753.686947][T23915] RDX: 00007ffc045c9d70 RSI: 0000000000000000 RDI: 0000000000000000 02:20:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x16000000, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b00f7) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 02:20:33 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x3, 0x11, 0xbb37, 0x3, "094994951a11d9e9800065fb3d58c33304fd1c3d3a17940000000000ff0100"}) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) syncfs(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f0000000100)=@md5={0x1, "9858367680c1f2f38a298e9eabd5692e"}, 0x11, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) (async) sendmmsg$inet6(r1, &(0x7f0000001680)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x3, @private2, 0xffffffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000240)="65d88c1df3a439ecf463bc734d14d7963899efce18f7a7359f823d43696588e2be9ed848a61cf87b788f5595901b805e24f8b607eacc78d3513714af11729a847963be80e4b7ae716420e9aa85daa415351e04dfdbed92fd151d42a229cc9ab95f12330a799847e0039dd27854b09cbda391414f", 0x74}, {&(0x7f00000002c0)="ddea91e47faa069183e4530eca5991a8a004a6d765a7fc763a4011c958795639d59109", 0x23}, {&(0x7f0000000300)="9d91b71e2b62f0a2941cc1007ffaa65d39fd3c69ca91e705641ec04e48c5557f4994660010c54417f60b77175ff7c1af21a384e48dfc6b05fc0596cb174c46b97fdbdf2312b1d88e1c60e489a36e9351ab5207bbf7d6db657f0a9b9be0e78cc2ad75c1c66e6ec6598439fd02f82670101f8f0581317a17f22546f8e3cc4802a07ac19ce35cadfbe3f8b9034756d1df01efbd4a5388d393c28ec8efd09e31b44354c15350e5658cca34a43fab8235d3e9e303f70d73d63ca34f19dcd36e2b3247aae28be50adfed3fd9d2fd0fe75a88478f19ef453af72a5ff8e497f24ea76a051e71834733b7fe9a57922d489c7b12e0f0e571901db599c8", 0xf8}], 0x3, &(0x7f0000000440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0xe521}}, @hopopts_2292={{0x1118, 0x29, 0x36, {0x2c, 0x21f, '\x00', [@generic={0x0, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x88, 0xf5, "b6e761057de4508bcd6366bda05d4b9e546f708a807b4dca32e87e8854cf0a98ad177d9f79559b05aaf251415a1298a6f9db67bde457392acba7b006a6f701e938fc5384fcbe1e6fb0f66ead1e4e8db24224ebc12a2e215740aee4da9b5e078b85fa56fc77ad3a2175f1960bd1bdcecb58d766413305aeb52eae2c7d6e2f4b8ade90811936ad4d44c35a4b80b33b675614c18b3db62ddeeb6ab5962dd1978463aef2829498d91e78f76dd8f57785d7586dbd0b3f364a96da1808e3ca0ae12ddc7672d607d229309950bd3bf2437396f75932a9d041adf7e6a984da1342ae587a7c04718f592e672671b315d958e9529c69d8bff311"}]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x0, 0x19, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x74, 0x880, [0xfb]}}, @generic={0x7, 0xad, "6dedd07f00f7c000f77b94d887fa9adf563cdcd05fe67a0ac3af79ca8dea1b3430c08362ba3abf71787aa025e07fee4668710f5d69ca39b8d2a48b7f5fd0ac9eda39536521747f52b60b927a09908966c5a96f131c7dcdcab5c85fe1b65e8af8af425991af250b20f00eaefb8126d3ec8dc3bf03a5d2cc9a69366c8c32460cb499fa4447a1756edb3426f6eb78fac4dae4b2cfb9392236769ff9dce0c3cac27ee88a23d13015210712c05777a0"}, @ra={0x5, 0x2, 0x8001}, @enc_lim={0x4, 0x1, 0xfd}]}}}], 0x1228}}], 0x1, 0x4008855) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a311070d657b67cf495362ec71125e1b271dbb9ea6d106cce7ce2970700000000000000694cfa2efe00000000000000df18f6166b556d41fd30e64dcc6fdd53a2e253"], 0x46) (async) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x4100, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) 02:20:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xfffffffd, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/1, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x5b000, 0x3, [0x7fffffff, 0x5e, 0x5, 0x40]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b00f7) (async) sendfile(r2, r1, 0x0, 0x8000000000004) 02:20:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x218, @remote}, 0x10) 02:20:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x20200fff, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 02:20:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x21000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 753.694948][T23915] RBP: 00007f074fc74980 R08: 0000000000000000 R09: 00007ffc045f20b0 [ 753.703021][T23915] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000b7fb2 [ 753.711071][T23915] R13: 00007ffc045c9e80 R14: 00007f074fc731f0 R15: 0000000000000032 [ 753.719067][T23915] [ 753.722324][T23915] memory: usage 307200kB, limit 307200kB, failcnt 66258 [ 753.729531][T23915] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 753.737594][T23915] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 02:20:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0xc02, @remote}, 0x10) [ 753.744891][T23915] Memory cgroup stats for /syz3: [ 753.761073][T23915] cache 61440 [ 753.769350][T23915] rss 8192 [ 753.772376][T23915] shmem 0 [ 753.775384][T23915] mapped_file 0 [ 753.778873][T23915] dirty 4096 [ 753.782076][T23915] writeback 8192 [ 753.785636][T23915] workingset_refault_anon 15774 [ 753.790512][T23915] workingset_refault_file 27437 [ 753.795363][T23915] swap 438272 [ 753.798671][T23915] pgpgin 782597 [ 753.802131][T23915] pgpgout 782579 [ 753.805671][T23915] pgfault 88001 02:20:33 executing program 0: setitimer(0x2, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b00f7) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) 02:20:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x29000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 753.809193][T23915] pgmajfault 6741 [ 753.813001][T23915] inactive_anon 0 [ 753.816832][T23915] active_anon 0 [ 753.820293][T23915] inactive_file 57344 [ 753.824266][T23915] active_file 4096 [ 753.828018][T23915] unevictable 0 [ 753.831536][T23915] hierarchical_memory_limit 314572800 [ 753.836927][T23915] hierarchical_memsw_limit 9223372036854771712 [ 753.843214][T23915] total_cache 61440 [ 753.847067][T23915] total_rss 8192 [ 753.850612][T23915] total_shmem 0 [ 753.854071][T23915] total_mapped_file 0 [ 753.858073][T23915] total_dirty 4096 [ 753.861792][T23915] total_writeback 8192 [ 753.865858][T23915] total_workingset_refault_anon 15774 [ 753.871392][T23915] total_workingset_refault_file 27437 [ 753.876798][T23915] total_swap 438272 [ 753.880605][T23915] total_pgpgin 782597 [ 753.884630][T23915] total_pgpgout 782579 [ 753.888711][T23915] total_pgfault 88001 [ 753.892688][T23915] total_pgmajfault 6741 [ 753.896863][T23915] total_inactive_anon 0 [ 753.901030][T23915] total_active_anon 0 [ 753.905005][T23915] total_inactive_file 57344 [ 753.909544][T23915] total_active_file 4096 [ 753.913837][T23915] total_unevictable 0 [ 753.917846][T23915] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23915,uid=0 [ 753.933344][T23915] Memory cgroup out of memory: Killed process 23915 (syz-executor.3) total-vm:48796kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:20:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x62a, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001010000000000000000000f000a2c000000030a01010000000000000000000000000900010073797a30000000000c000240000000000001000014000000110001000000"], 0x54}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendfile(r3, r4, 0x0, 0xf03b00f7) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002e80)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x8001}}, 0x0, 0x0, 0x47, 0x0, "7ad8cc9878a4e6b359bdaabe0ea97d0a5937e0a05d5bfd892b8c32c3a5e7f68cec4d4244d06127b7f644524df934c750c4272cb96382e6e31c2ecd4237b6108d8c24c0ba4c6c149f1c2c0882e20ac194"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 02:20:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x7, 0x0, 0xc, 0x0, "77c26d983e85537f7330c9edd8362cd0ffc49dc3d7db3f94303e620a6cb4b9446c44d6e12c800a5212b86e8a50361fa356a9172c9518a493bc1305000000b399b3ed2d72100c4cd35ab2dab5d372e6f9"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1802, @remote}, 0x10) 02:20:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x3f000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 754.521233][T24049] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 754.532657][T24049] CPU: 0 PID: 24049 Comm: syz-executor.1 Not tainted 6.5.0-rc1-syzkaller #0 [ 754.541516][T24049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 754.551674][T24049] Call Trace: [ 754.554949][T24049] [ 754.557874][T24049] dump_stack_lvl+0xda/0x130 [ 754.562470][T24049] dump_stack+0x15/0x20 [ 754.566654][T24049] dump_header+0x95/0x3c0 [ 754.571005][T24049] oom_kill_process+0xe3/0x3e0 [ 754.575793][T24049] out_of_memory+0x9ca/0xc00 [ 754.580564][T24049] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 754.586639][T24049] mem_cgroup_out_of_memory+0x139/0x190 [ 754.592290][T24049] try_charge_memcg+0x75c/0xd20 [ 754.597232][T24049] ? __alloc_pages+0x193/0x340 [ 754.602106][T24049] charge_memcg+0x51/0x200 [ 754.606631][T24049] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 754.612709][T24049] __read_swap_cache_async+0x2fe/0x560 [ 754.618196][T24049] swap_cluster_readahead+0x2a3/0x4f0 [ 754.623705][T24049] swapin_readahead+0x8d/0x700 [ 754.628589][T24049] ? __filemap_get_folio+0x47c/0x500 [ 754.634054][T24049] ? __list_add_valid+0x36/0xb0 [ 754.638921][T24049] ? _raw_spin_unlock+0x26/0x40 [ 754.643985][T24049] ? swap_cache_get_folio+0x6e/0x210 [ 754.649291][T24049] do_swap_page+0x4d7/0x1550 [ 754.653903][T24049] ? pte_offset_map_nolock+0x11f/0x1c0 [ 754.659765][T24049] handle_mm_fault+0x9ec/0x2c10 [ 754.664708][T24049] ? mt_find+0x1d1/0x300 [ 754.668976][T24049] exc_page_fault+0x24d/0x650 [ 754.673722][T24049] asm_exc_page_fault+0x26/0x30 [ 754.678594][T24049] RIP: 0033:0x7fb036a929a8 [ 754.683009][T24049] Code: 00 31 f6 e8 9a ea ff ff 48 81 c3 d0 00 00 00 48 39 eb 0f 84 02 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 2c e2 ff ff 84 c0 74 d7 <80> 3d 81 b7 14 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 754.702626][T24049] RSP: 002b:00007ffec69faf60 EFLAGS: 00010202 [ 754.708700][T24049] RAX: 0000000000000001 RBX: 00007fb036c06f80 RCX: 00000000000b8150 [ 754.716677][T24049] RDX: 00000000000001f8 RSI: 00007ffec69faf40 RDI: 00007fb036