p(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 1346.225146][T19646] loop3: detected capacity change from 0 to 512 [ 1346.233517][T19646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1346.242299][T19646] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1346.313931][T19646] EXT4-fs (loop3): 1 truncate cleaned up [ 1346.319781][T19646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1346.333125][T17110] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 1346.419332][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:50:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x91000000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:11 executing program 4: r0 = epoll_create1(0x0) r1 = socket$igmp(0x2, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)) 05:50:11 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@private, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xe8) 05:50:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x18d840, 0x0) 05:50:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x2, 0x6, 0x0, 0x0) 05:50:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8007}, 0x4) 05:50:11 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x2, &(0x7f0000000880)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000009c0)='syzkaller\x00', 0x7}, 0x90) [ 1346.860260][T19663] loop3: detected capacity change from 0 to 512 [ 1346.887967][T19663] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1346.896830][T19663] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended 05:50:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8010, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/552], 0xff, 0x23f, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) [ 1346.921795][T19663] EXT4-fs (loop3): 1 truncate cleaned up [ 1346.927583][T19663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1346.943334][T19445] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) 05:50:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffffff7}]}) 05:50:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$eJzs3V9rW+cZAPDnHFtZ/jizw3aRBZaFJcMOWyQ7XhKzi2yDsV0FtmX3mWfLxli2jCUnsQmbwz7AYJS20Kte9abQD1Ao+QilEGjvS1taSpu0F71oo6J/qeNIsU1kKVi/HxzrPUdHfp5HQq/0nvOiE0DfOhMRFyPiUaVSOR8Rw43taWO5dywiNuv7PXxwZ6a6JFGpXP8iiaSxrbr/2Jb/2XhIHI6Iv/8l4l/J03FL6xuL04VCfrWxnisvreRK6xsXFpam5/Pz+eXJyYnLU1emLk2Nd6TOoYi4+qdPXv7fG3+++s5vbn1447OxfyeN7bGljk6rl56pPRdNgxGxuh/BemCgUU+m14kAALArze/5v4yI8zEcA7VvcwAAAMBBUvn9UHybRFQAAACAAyutzYFN0mxjHsBQpGk2W5/D+9M4mhaKpfKv54pry7P1ubIjkUnnFgr58cZc4ZHIJNX1iVr7h/WL29YnI+JERLw0fKS2np0pFmZ7ffADAAAA+sSxbeP/r4fr438AAADggBnpdQIAAADAvjP+BwAAgIPP+B8AAAAOtL9eu1ZdKs3rX8/eXF9bLN68MJsvLWaX1mayM8XVlex8sThf+82+pZ3+X6FYXPltLK/dzpXzpXKutL5xY6m4tly+sfDEJbABAACALjrxi3sfJBGx+bsjtaXqUK+TArpicC87f7x/eQDdN9DrBICe2dPnP3CgZHqdANBzyQ73t528827ncwEAAPbH6M9an/9Pdjw2sJl2KUVgnzj+B/3L+X/oX87/Q//KxEAYyEN/2//z/5XKnhICAAA6bqi2JGk2onYcYCjSNJuNOF67LEAmmVso5Mcj4scR8f5w5kfV9YnaI5MdxwwAAAAAAAAAAAAAAAAAAAAAAAAAQF2lkkQFAAAAONAi0k+TxvW/RofPDW0/PnAo+Wa4dhsRt167/srt6XJ5daK6/cvH28uvNrZf7MURDAAAAGC75ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE56+ODOTHPpZtzP/xgRI63iD8bh2u3hyETE0a+SGNzyuCQiBjoQf/NuRJxsFT+pphUjjSxaxT/Sw/hpRBzrQHzoZ/eq/c8fWr3/0jhTu239/rtc66GeX/v+L33c/w206X+O7zLGqftv5drGvxtxarB1/9OMn7SJf3aX8f/5j42NdvdVXo8Ybfn5kzwRK1deWsmV1jcuLCxNz+fn88uTkxOXp65MXZoaz80tFPKNvy1j/P/nbz96Vv1H28Qf2aH+c7us/7v7tx/8pN7MtIo/drb163+yTfy08dn3q0a7ev9os71Zb291+s33Tj+r/tk29e/0+o/tsv7zf/vvR7vcFQDogtL6xuJ0oZBf7evGcz0b1a9FL0QVGntt/OfFSOOFbPS2XwIAADrv6TEwAAAAAAAAAAAAAAAAAAAA0G3d/HW9ps3elAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EzfBwAA//+8vtTr") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x18d840, 0x0) [ 1346.980091][T19677] loop2: detected capacity change from 0 to 128 [ 1347.019966][T19677] EXT4-fs: test_dummy_encryption option not supported [ 1347.053373][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.120853][T19683] loop3: detected capacity change from 0 to 512 [ 1347.132433][T19683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1347.141286][T19683] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1347.159897][T19683] EXT4-fs (loop3): 1 truncate cleaned up [ 1347.165650][T19683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1347.178618][T19439] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 1347.194022][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:50:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x800}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x13, 0x0, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x4}]}}}}}, 0x56) 05:50:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 05:50:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$eJzs3V9rW+cZAPDnHFtZ/jizw3aRBZaFJcMOWyQ7XhKzi2yDsV0FtmX3mWfLxli2jCUnsQmbwz7AYJS20Kte9abQD1Ao+QilEGjvS1taSpu0F71oo6J/qeNIsU1kKVi/HxzrPUdHfp5HQq/0nvOiE0DfOhMRFyPiUaVSOR8Rw43taWO5dywiNuv7PXxwZ6a6JFGpXP8iiaSxrbr/2Jb/2XhIHI6Iv/8l4l/J03FL6xuL04VCfrWxnisvreRK6xsXFpam5/Pz+eXJyYnLU1emLk2Nd6TOoYi4+qdPXv7fG3+++s5vbn1447OxfyeN7bGljk6rl56pPRdNgxGxuh/BemCgUU+m14kAALArze/5v4yI8zEcA7VvcwAAAMBBUvn9UHybRFQAAACAAyutzYFN0mxjHsBQpGk2W5/D+9M4mhaKpfKv54pry7P1ubIjkUnnFgr58cZc4ZHIJNX1iVr7h/WL29YnI+JERLw0fKS2np0pFmZ7ffADAAAA+sSxbeP/r4fr438AAADggBnpdQIAAADAvjP+BwAAgIPP+B8AAAAOtL9eu1ZdKs3rX8/eXF9bLN68MJsvLWaX1mayM8XVlex8sThf+82+pZ3+X6FYXPltLK/dzpXzpXKutL5xY6m4tly+sfDEJbABAACALjrxi3sfJBGx+bsjtaXqUK+TArpicC87f7x/eQDdN9DrBICe2dPnP3CgZHqdANBzyQ73t528827ncwEAAPbH6M9an/9Pdjw2sJl2KUVgnzj+B/3L+X/oX87/Q//KxEAYyEN/2//z/5XKnhICAAA6bqi2JGk2onYcYCjSNJuNOF67LEAmmVso5Mcj4scR8f5w5kfV9YnaI5MdxwwAAAAAAAAAAAAAAAAAAAAAAAAAQF2lkkQFAAAAONAi0k+TxvW/RofPDW0/PnAo+Wa4dhsRt167/srt6XJ5daK6/cvH28uvNrZf7MURDAAAAGC75ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE56+ODOTHPpZtzP/xgRI63iD8bh2u3hyETE0a+SGNzyuCQiBjoQf/NuRJxsFT+pphUjjSxaxT/Sw/hpRBzrQHzoZ/eq/c8fWr3/0jhTu239/rtc66GeX/v+L33c/w206X+O7zLGqftv5drGvxtxarB1/9OMn7SJf3aX8f/5j42NdvdVXo8Ybfn5kzwRK1deWsmV1jcuLCxNz+fn88uTkxOXp65MXZoaz80tFPKNvy1j/P/nbz96Vv1H28Qf2aH+c7us/7v7tx/8pN7MtIo/drb163+yTfy08dn3q0a7ev9os71Zb291+s33Tj+r/tk29e/0+o/tsv7zf/vvR7vcFQDogtL6xuJ0oZBf7evGcz0b1a9FL0QVGntt/OfFSOOFbPS2XwIAADrv6TEwAAAAAAAAAAAAAAAAAAAA0G3d/HW9ps3elAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EzfBwAA//+8vtTr") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x18d840, 0x0) 05:50:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x910d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 1347.901062][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1347.911007][T19691] loop3: detected capacity change from 0 to 512 [ 1347.927416][T19691] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1347.936272][T19691] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1347.950220][T19695] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1347.958816][T19693] dccp_v4_rcv: dropped packet with invalid checksum [ 1347.974288][T19691] EXT4-fs (loop3): 1 truncate cleaned up [ 1347.980022][T19691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:50:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x40048f4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) 05:50:12 executing program 4: timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2$9p(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9d) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) [ 1347.992726][T19439] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) 05:50:12 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='smaps_rollup\x00') 05:50:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40139, 0x0) open(0x0, 0x18d840, 0x0) 05:50:12 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x541b, &(0x7f0000000240)) [ 1348.095719][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.181278][T19713] loop3: detected capacity change from 0 to 512 [ 1348.200119][ T27] audit: type=1400 audit(1701409812.893:682): avc: denied { getattr } for pid=19714 comm="syz-executor.2" path="socket:[144791]" dev="sockfs" ino=144791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 05:50:12 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 1348.209231][T19713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1348.233304][T19713] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended 05:50:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:13 executing program 2: r0 = socket(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1348.349351][T19713] EXT4-fs (loop3): 1 truncate cleaned up [ 1348.355176][T19713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.379941][T17110] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) 05:50:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="01"], 0x73) 05:50:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40139, 0x0) open(0x0, 0x18d840, 0x0) [ 1348.411608][T19724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19724 comm=syz-executor.2 [ 1348.442251][T19713] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1348.486395][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.533259][T19729] loop3: detected capacity change from 0 to 512 [ 1348.543536][T19729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1348.552373][T19729] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1348.585694][T19729] EXT4-fs (loop3): 1 truncate cleaned up [ 1348.591439][T19729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.615049][T19435] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 1348.686299][T19729] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1348.776155][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:50:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:13 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) mlockall(0x7) 05:50:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40139, 0x0) open(0x0, 0x18d840, 0x0) 05:50:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8955, 0x0) 05:50:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x92000000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:13 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) mlockall(0x7) [ 1349.060540][T19738] loop3: detected capacity change from 0 to 512 [ 1349.095447][T19738] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 05:50:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x66) [ 1349.104223][T19738] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended 05:50:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}}, 0x0) [ 1349.167861][T19738] EXT4-fs (loop3): 1 truncate cleaned up [ 1349.173659][T19738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.191513][T19435] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) 05:50:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:13 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/82, 0x52}], 0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) 05:50:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, @val, {@ipv6}}, 0x0) 05:50:14 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 1349.273485][T19738] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1349.322513][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:50:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40139, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x0, 0x0) 05:50:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x920d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x2, 0x100}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) [ 1350.099317][T19770] loop3: detected capacity change from 0 to 512 [ 1350.110699][T19770] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1350.119648][T19770] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1350.143881][T19770] EXT4-fs (loop3): 1 truncate cleaned up 05:50:14 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_FREE(r0, 0x3305) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) [ 1350.149802][T19770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.163861][ T50] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) 05:50:14 executing program 2: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x200048, &(0x7f0000000580)={[{@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0xbc7}}, {@dots}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x9}}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1f}}, {@fat=@discard}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@dots}, {@fat=@debug}, {@dots}, {@nodots}, {@fat=@flush}, {@fat=@showexec}]}, 0x1, 0x1bd, &(0x7f00000003c0)="$eJzs3b+KE1EUB+Cz45g/VtsJYnHBxiqoL+CKrCAOCEoKrRRWm10R3Ga0cR/DB/QBZKs0EtFJMkkIJggzY/T7mhzmN5M5Zwg3VW5e3Xx3evL+/O3X619iMDiI7CiOYnIQh5HF3EVskG06CADsg8l0Gt+mla57AQDascP3//eWWwIAGvb8xcsnD4ri+FlKg4jLi3JcjqvXKn/0uDi+k345rK+6LMvxlUV+t8rTan41rs3ye/M8X857cftWlf/MHj4t1q7vx0kbDwAAAAAAAAAAAAAAAAAAAAAAADowSind/83+PqNRmlvLq2ppf6C1/XvyuJG3NgYAAAAAAAAAAAAAAAAAAADstfOPn05fn529+VAX/YhYPbKHxXA237aTs2iqjV5j79xokUdEg7cYtjJF+kse5taP3+aiFxGdN1+vEf2uFicAAAAAAAAAAAAAAAAAAPjP1D/67boTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhO/f//f1B8jogdTl7cbNjpqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzDfgQAAP//3a0sTw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) 05:50:15 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='L', 0x1}], 0x1}, 0x4044011) 05:50:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40139, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x0, 0x0) [ 1350.289527][T19770] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1350.325431][T19789] loop2: detected capacity change from 0 to 256 05:50:15 executing program 4: r0 = syz_io_uring_setup(0x9, &(0x7f0000002a00), &(0x7f0000002a80), &(0x7f0000002ac0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)}, 0x1) [ 1350.339330][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:50:15 executing program 4: syz_emit_ethernet(0x24, &(0x7f0000000000)={@multicast, @link_local, @val={@void}, {@llc_tr={0x11, {@snap={0x0, 0x0, "e6", "fe323a", 0x0, "65e784f4c028fc5cdbc3"}}}}}, 0x0) [ 1350.397530][T19793] loop3: detected capacity change from 0 to 512 [ 1350.420918][T19793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1350.429712][T19793] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended 05:50:15 executing program 2: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x200048, &(0x7f0000000580)={[{@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0xbc7}}, {@dots}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x9}}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1f}}, {@fat=@discard}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@dots}, {@fat=@debug}, {@dots}, {@nodots}, {@fat=@flush}, {@fat=@showexec}]}, 0x1, 0x1bd, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) [ 1350.462506][T19793] EXT4-fs (loop3): 1 truncate cleaned up [ 1350.468281][T19793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.481274][T19439] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) 05:50:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) [ 1350.560302][T19793] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1350.600224][T19801] loop2: detected capacity change from 0 to 256 [ 1350.656036][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:50:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 05:50:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40139, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x0, 0x0) 05:50:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x2900, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x14, 0x91b71e0bca0e1205, 0x0, 0x0, {{{@in6=@private0, @in=@dev}, {@in=@local}, @in6=@remote}}}, 0xf8}}, 0x0) 05:50:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x930d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:15 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x20}}]}, 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 05:50:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) [ 1351.189412][T19812] loop3: detected capacity change from 0 to 512 [ 1351.214044][T19815] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:15 executing program 2: syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000004080)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"], 0x1, 0x75b, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0/file0'}, 0x11) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x48) 05:50:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000080), 0xc) [ 1351.240943][T19812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1351.249850][T19812] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1351.298605][T19812] EXT4-fs (loop3): 1 truncate cleaned up [ 1351.304365][T19812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1351.321639][ T27] audit: type=1400 audit(1701409816.013:683): avc: denied { bind } for pid=19826 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1351.327690][T19827] loop2: detected capacity change from 0 to 2048 05:50:16 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'wpan0\x00'}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000001b40)) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) [ 1351.349627][ T50] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 1351.395623][T19812] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1351.428172][T19827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 05:50:16 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, 0x0, 0x0) [ 1352.001591][T19808] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1352.013112][T19808] CPU: 1 PID: 19808 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1352.023555][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1352.033656][T19808] Call Trace: [ 1352.036962][T19808] [ 1352.039901][T19808] dump_stack_lvl+0xda/0x130 [ 1352.044640][T19808] dump_stack+0x15/0x20 05:50:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8914, &(0x7f0000000100)={'tunl0\x00', 0x0}) [ 1352.048827][T19808] dump_header+0x82/0x2d0 [ 1352.053298][T19808] oom_kill_process+0x33a/0x4c0 [ 1352.058233][T19808] out_of_memory+0x9ca/0xbf0 [ 1352.062853][T19808] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1352.069037][T19808] mem_cgroup_out_of_memory+0x139/0x190 [ 1352.074620][T19808] try_charge_memcg+0x75c/0xd30 [ 1352.079516][T19808] ? __swap_duplicate+0x29b/0x2b0 [ 1352.084578][T19808] ? radix_tree_lookup+0xf9/0x150 [ 1352.089657][T19808] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1352.095773][T19808] __read_swap_cache_async+0x2f6/0x550 [ 1352.101389][T19808] swap_cluster_readahead+0x27c/0x4c0 [ 1352.106806][T19808] swapin_readahead+0xe9/0x7f0 [ 1352.111654][T19808] ? __filemap_get_folio+0x41a/0x5a0 [ 1352.116967][T19808] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1352.122651][T19808] ? swap_cache_get_folio+0x6e/0x200 [ 1352.127970][T19808] do_swap_page+0x4a0/0x1670 [ 1352.132595][T19808] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1352.137918][T19808] ? __rcu_read_lock+0x35/0x50 [ 1352.142749][T19808] ? pte_offset_map_nolock+0x124/0x1d0 [ 1352.148248][T19808] handle_mm_fault+0xa36/0x2dd0 [ 1352.153240][T19808] exc_page_fault+0x3ff/0x6c0 [ 1352.157946][T19808] asm_exc_page_fault+0x26/0x30 [ 1352.162988][T19808] RIP: 0033:0x7ff5cf2d6ae4 [ 1352.167435][T19808] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1352.187196][T19808] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1352.193389][T19808] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1352.201465][T19808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1352.209469][T19808] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1352.217469][T19808] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000014a142 [ 1352.225577][T19808] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000149e01 [ 1352.233861][T19808] [ 1352.237166][T19808] memory: usage 307200kB, limit 307200kB, failcnt 106046 [ 1352.244216][T19808] memory+swap: usage 307840kB, limit 9007199254740988kB, failcnt 0 [ 1352.252274][T19808] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1352.259631][T19808] Memory cgroup stats for /syz1: [ 1352.265927][T19808] cache 0 [ 1352.273903][T19808] rss 8192 [ 1352.277772][T19808] shmem 0 [ 1352.280720][T19808] mapped_file 0 [ 1352.284192][T19808] dirty 0 [ 1352.287246][T19808] writeback 16384 [ 1352.290887][T19808] workingset_refault_anon 31558 [ 1352.295856][T19808] workingset_refault_file 2533 [ 1352.300767][T19808] swap 655360 [ 1352.304058][T19808] swapcached 32768 [ 1352.307880][T19808] pgpgin 443151 [ 1352.311342][T19808] pgpgout 443143 [ 1352.314917][T19808] pgfault 436156 [ 1352.318486][T19808] pgmajfault 13337 [ 1352.322215][T19808] inactive_anon 0 [ 1352.325946][T19808] active_anon 0 [ 1352.329492][T19808] inactive_file 0 [ 1352.333210][T19808] active_file 0 [ 1352.336717][T19808] unevictable 0 [ 1352.340188][T19808] hierarchical_memory_limit 314572800 [ 1352.345604][T19808] hierarchical_memsw_limit 9223372036854771712 [ 1352.351966][T19808] total_cache 0 [ 1352.355466][T19808] total_rss 8192 [ 1352.359016][T19808] total_shmem 0 [ 1352.362541][T19808] total_mapped_file 0 [ 1352.366577][T19808] total_dirty 0 [ 1352.370045][T19808] total_writeback 16384 [ 1352.374357][T19808] total_workingset_refault_anon 31558 [ 1352.379770][T19808] total_workingset_refault_file 2533 [ 1352.385162][T19808] total_swap 655360 [ 1352.388997][T19808] total_swapcached 32768 [ 1352.393235][T19808] total_pgpgin 443151 [ 1352.397306][T19808] total_pgpgout 443143 [ 1352.401383][T19808] total_pgfault 436156 [ 1352.405541][T19808] total_pgmajfault 13337 [ 1352.409880][T19808] total_inactive_anon 0 [ 1352.414122][T19808] total_active_anon 0 [ 1352.418153][T19808] total_inactive_file 0 [ 1352.422414][T19808] total_active_file 0 [ 1352.426484][T19808] total_unevictable 0 [ 1352.430466][T19808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19808,uid=0 [ 1352.445824][T19808] Memory cgroup out of memory: Killed process 19808 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1352.516574][T19816] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1352.528108][T19816] CPU: 0 PID: 19816 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1352.538593][T19816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1352.548678][T19816] Call Trace: [ 1352.552022][T19816] [ 1352.554966][T19816] dump_stack_lvl+0xda/0x130 [ 1352.559604][T19816] dump_stack+0x15/0x20 [ 1352.563832][T19816] dump_header+0x82/0x2d0 [ 1352.568197][T19816] oom_kill_process+0x33a/0x4c0 [ 1352.573214][T19816] out_of_memory+0x9ca/0xbf0 [ 1352.577848][T19816] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1352.584036][T19816] mem_cgroup_out_of_memory+0x139/0x190 [ 1352.589679][T19816] try_charge_memcg+0x75c/0xd30 [ 1352.594555][T19816] ? __swap_duplicate+0x29b/0x2b0 [ 1352.599604][T19816] ? radix_tree_lookup+0xf9/0x150 [ 1352.604669][T19816] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1352.610886][T19816] __read_swap_cache_async+0x2f6/0x550 [ 1352.616369][T19816] swap_cluster_readahead+0x27c/0x4c0 [ 1352.621771][T19816] swapin_readahead+0xe9/0x7f0 [ 1352.626573][T19816] ? __filemap_get_folio+0x41a/0x5a0 [ 1352.631907][T19816] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1352.637596][T19816] ? swap_cache_get_folio+0x6e/0x200 [ 1352.642913][T19816] do_swap_page+0x4a0/0x1670 [ 1352.647531][T19816] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1352.652846][T19816] ? __rcu_read_lock+0x35/0x50 [ 1352.657708][T19816] ? pte_offset_map_nolock+0x124/0x1d0 [ 1352.663247][T19816] handle_mm_fault+0xa36/0x2dd0 [ 1352.668146][T19816] exc_page_fault+0x3ff/0x6c0 [ 1352.672873][T19816] asm_exc_page_fault+0x26/0x30 [ 1352.677800][T19816] RIP: 0033:0x7fa159e4622f [ 1352.682322][T19816] Code: c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 89 38 48 89 15 99 e4 c9 00 52 48 8d 35 03 ff 09 00 48 89 c2 48 8d 3d 0f ff 09 00 31 c0 e8 [ 1352.701962][T19816] RSP: 002b:00007ffea5cad718 EFLAGS: 00010283 [ 1352.708093][T19816] RAX: 0000001b2e923994 RBX: 00007fa159fbb0e8 RCX: 0000001b2e920000 [ 1352.716184][T19816] RDX: 0000001b2e923998 RSI: 0000000080000000 RDI: 0000000083b1176e [ 1352.724159][T19816] RBP: 0000000083b1176e R08: 0000001b2ed20000 R09: 000000000000176e [ 1352.732188][T19816] R10: 0000000083b11772 R11: 000000000003e334 R12: 0000000000000017 [ 1352.740162][T19816] R13: 0000000000000001 R14: 00007fa159faf000 R15: ffffffff83b112db [ 1352.748137][T19816] ? __sys_setsockopt+0x19b/0x240 [ 1352.753203][T19816] [ 1352.756407][T19816] memory: usage 307200kB, limit 307200kB, failcnt 177878 [ 1352.763449][T19816] memory+swap: usage 307608kB, limit 9007199254740988kB, failcnt 0 [ 1352.771586][T19816] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1352.779164][T19816] Memory cgroup stats for /syz0: [ 1352.779721][T19816] cache 4096 [ 1352.787913][T19816] rss 8192 [ 1352.790933][T19816] shmem 0 [ 1352.793861][T19816] mapped_file 0 [ 1352.797363][T19816] dirty 0 [ 1352.800304][T19816] writeback 8192 [ 1352.803848][T19816] workingset_refault_anon 35735 [ 1352.808767][T19816] workingset_refault_file 10296 [ 1352.813619][T19816] swap 417792 [ 1352.817029][T19816] swapcached 8192 [ 1352.820662][T19816] pgpgin 3423608 [ 1352.824208][T19816] pgpgout 3423605 [ 1352.827890][T19816] pgfault 3351614 [ 1352.831613][T19816] pgmajfault 17005 [ 1352.835358][T19816] inactive_anon 0 [ 1352.838994][T19816] active_anon 0 [ 1352.842499][T19816] inactive_file 0 [ 1352.846258][T19816] active_file 4096 [ 1352.850066][T19816] unevictable 0 [ 1352.853520][T19816] hierarchical_memory_limit 314572800 [ 1352.859018][T19816] hierarchical_memsw_limit 9223372036854771712 [ 1352.865223][T19816] total_cache 4096 [ 1352.868965][T19816] total_rss 8192 [ 1352.872852][T19816] total_shmem 0 [ 1352.876342][T19816] total_mapped_file 0 [ 1352.880414][T19816] total_dirty 0 [ 1352.883876][T19816] total_writeback 8192 [ 1352.887973][T19816] total_workingset_refault_anon 35735 [ 1352.893352][T19816] total_workingset_refault_file 10296 [ 1352.898840][T19816] total_swap 417792 [ 1352.902698][T19816] total_swapcached 8192 [ 1352.906928][T19816] total_pgpgin 3423608 [ 1352.911000][T19816] total_pgpgout 3423605 [ 1352.915267][T19816] total_pgfault 3351614 [ 1352.919423][T19816] total_pgmajfault 17005 [ 1352.923657][T19816] total_inactive_anon 0 [ 1352.927844][T19816] total_active_anon 0 [ 1352.931831][T19816] total_inactive_file 0 [ 1352.936012][T19816] total_active_file 4096 [ 1352.940301][T19816] total_unevictable 0 [ 1352.944273][T19816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19816,uid=0 [ 1352.959592][T19816] Memory cgroup out of memory: Killed process 19816 (syz-executor.0) total-vm:46560kB, anon-rss:504kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:50:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='A', 0x1}], 0x1, &(0x7f0000001540)=[@ip_ttl={{0x14}}], 0x18}, 0x40805) 05:50:17 executing program 2: syz_io_uring_setup(0x65ca, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2975, &(0x7f0000000200)={0x0, 0xab7e, 0x8}, &(0x7f0000000280), &(0x7f00000002c0)) 05:50:17 executing program 4: r0 = socket(0x22, 0x2, 0x10) accept$nfc_llcp(r0, 0x0, 0x0) 05:50:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x94000000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@routing, 0x8) sendmsg$inet6(r0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0xa, 0x4e25, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 05:50:17 executing program 2: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x80080000, 0x0, 0x0, &(0x7f0000004400), 0x0, 0x0) 05:50:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/208, 0xd0}], 0x1, &(0x7f00000009c0)}, 0x0) sendmsg$sock(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb", 0x1}], 0x1}, 0x0) [ 1353.243522][T19847] delete_channel: no stack 05:50:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x23}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 05:50:18 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0xa00, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) 05:50:18 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0xc00c1, 0x0) 05:50:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x40}, 0x0) 05:50:18 executing program 2: getpid() syz_clone(0x40000000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="d9d478160cf70b28a3442b15f5970865a20bee78ea0041bf9a3df0406b9d22f121aac2db8898c04bfd4ebc6addcae8ac8bced34a8adf168a8065c92e379f504d3976a8313b77fc8792355e551df2cace0f6380cca23510bfc50058436d6422b0dee31fa8e7b18c57cbd493feea2e62c980e6eb33ce4d2a89164c0284db16364e092cb274a4f6e18b83a823f2559063c4f5f40112e48e0a0f2851543ef29a6ab6ab661c665bfcd48d8c2852f5aebe018587aaf7cd942b0480acace522d4a9af9232da6d1570d833f71b1c3e4e5559a8fc996c99480370") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) 05:50:18 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000001380)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "36c38f", 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) 05:50:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x940d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) 05:50:19 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, 0x0, 0x0) 05:50:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffffe, 0x43) read$usbmon(r0, 0x0, 0x0) 05:50:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:50:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8}}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x34}}, 0x0) 05:50:19 executing program 2: msgsnd(0x0, &(0x7f0000000380)={0x3, "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"}, 0xfd1, 0x0) 05:50:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x88, 0x8, 0x0, &(0x7f0000000080)) 05:50:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 05:50:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x95000000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x60}}, 0x0) 05:50:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xff0f, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:20 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x20) 05:50:20 executing program 2: r0 = syz_io_uring_setup(0x23f5, &(0x7f0000000700)={0x0, 0x0, 0x1000}, &(0x7f0000000780), &(0x7f00000007c0)) io_uring_enter(r0, 0x2d6a, 0x0, 0x0, 0x0, 0x0) 05:50:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x82, 0xd, "3bb02dfe4ea35b443a849d"}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@private}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x40}, 0x0) 05:50:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x950d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:21 executing program 2: msgrcv(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'/32], 0x20, 0x1, 0x3000) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000"/134], 0x86, 0x3, 0x1000) 05:50:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) [ 1357.307703][T19956] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1357.319148][T19956] CPU: 0 PID: 19956 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1357.329702][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1357.339869][T19956] Call Trace: [ 1357.343168][T19956] [ 1357.346184][T19956] dump_stack_lvl+0xda/0x130 [ 1357.350816][T19956] dump_stack+0x15/0x20 [ 1357.355248][T19956] dump_header+0x82/0x2d0 [ 1357.359611][T19956] oom_kill_process+0x33a/0x4c0 [ 1357.364547][T19956] out_of_memory+0x9ca/0xbf0 [ 1357.369166][T19956] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1357.375289][T19956] mem_cgroup_out_of_memory+0x139/0x190 [ 1357.380865][T19956] try_charge_memcg+0x75c/0xd30 [ 1357.385793][T19956] ? __swap_duplicate+0x29b/0x2b0 [ 1357.390849][T19956] ? radix_tree_lookup+0xf9/0x150 [ 1357.395923][T19956] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1357.402071][T19956] __read_swap_cache_async+0x2f6/0x550 [ 1357.407687][T19956] swap_cluster_readahead+0x27c/0x4c0 [ 1357.413083][T19956] swapin_readahead+0xe9/0x7f0 [ 1357.417905][T19956] ? __filemap_get_folio+0x41a/0x5a0 [ 1357.423219][T19956] ? swap_cache_get_folio+0x6e/0x200 [ 1357.428612][T19956] do_swap_page+0x4a0/0x1670 [ 1357.433245][T19956] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1357.438600][T19956] ? __rcu_read_lock+0x35/0x50 [ 1357.443423][T19956] ? pte_offset_map_nolock+0x124/0x1d0 [ 1357.448950][T19956] handle_mm_fault+0xa36/0x2dd0 [ 1357.453913][T19956] exc_page_fault+0x3ff/0x6c0 [ 1357.458634][T19956] asm_exc_page_fault+0x26/0x30 [ 1357.463585][T19956] RIP: 0033:0x7ff5cf2d879c [ 1357.468016][T19956] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d 15 f9 15 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 1357.487937][T19956] RSP: 002b:00007ffe2f846220 EFLAGS: 00010286 [ 1357.494022][T19956] RAX: ffffffff83b112db RBX: 00007ff5cf43c018 RCX: 0000000000000017 [ 1357.502128][T19956] RDX: ffffffff83b112fd RSI: 00007ff5ceca0008 RDI: 0000000083b1176e [ 1357.510103][T19956] RBP: 0000000083b11000 R08: 0000001b2d520000 R09: 000000000000176e [ 1357.518188][T19956] R10: 0000000083b11772 R11: 000000000003e724 R12: 0000000000000017 [ 1357.526170][T19956] R13: 0000000000000001 R14: 00007ff5cf430000 R15: ffffffff83b112fd [ 1357.534155][T19956] ? __sys_setsockopt+0x1bd/0x240 [ 1357.539197][T19956] ? __sys_setsockopt+0x19b/0x240 [ 1357.544248][T19956] ? __sys_setsockopt+0x1bd/0x240 [ 1357.549284][T19956] [ 1357.552413][T19956] memory: usage 307200kB, limit 307200kB, failcnt 106224 [ 1357.559508][T19956] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 1357.567511][T19956] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1357.574827][T19956] Memory cgroup stats for /syz1: [ 1357.575246][T19956] cache 0 [ 1357.583195][T19956] rss 8192 [ 1357.586304][T19956] shmem 0 [ 1357.589298][T19956] mapped_file 0 [ 1357.592747][T19956] dirty 0 [ 1357.595710][T19956] writeback 8192 [ 1357.599260][T19956] workingset_refault_anon 31733 [ 1357.604168][T19956] workingset_refault_file 2533 [ 1357.608990][T19956] swap 684032 [ 1357.612278][T19956] swapcached 8192 [ 1357.615950][T19956] pgpgin 443418 [ 1357.619418][T19956] pgpgout 443416 [ 1357.623004][T19956] pgfault 436687 [ 1357.626664][T19956] pgmajfault 13435 [ 1357.630390][T19956] inactive_anon 0 [ 1357.634066][T19956] active_anon 0 [ 1357.637609][T19956] inactive_file 0 [ 1357.641270][T19956] active_file 0 [ 1357.644863][T19956] unevictable 0 [ 1357.648347][T19956] hierarchical_memory_limit 314572800 [ 1357.653779][T19956] hierarchical_memsw_limit 9223372036854771712 [ 1357.660041][T19956] total_cache 0 [ 1357.663508][T19956] total_rss 8192 [ 1357.667108][T19956] total_shmem 0 [ 1357.670576][T19956] total_mapped_file 0 [ 1357.674571][T19956] total_dirty 0 [ 1357.678100][T19956] total_writeback 8192 [ 1357.682244][T19956] total_workingset_refault_anon 31733 [ 1357.687692][T19956] total_workingset_refault_file 2533 [ 1357.692990][T19956] total_swap 684032 [ 1357.696886][T19956] total_swapcached 8192 [ 1357.701124][T19956] total_pgpgin 443418 [ 1357.705184][T19956] total_pgpgout 443416 [ 1357.709279][T19956] total_pgfault 436687 [ 1357.713450][T19956] total_pgmajfault 13435 [ 1357.717724][T19956] total_inactive_anon 0 [ 1357.721999][T19956] total_active_anon 0 [ 1357.726017][T19956] total_inactive_file 0 [ 1357.730178][T19956] total_active_file 0 [ 1357.734169][T19956] total_unevictable 0 [ 1357.738186][T19956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19956,uid=0 [ 1357.753542][T19956] Memory cgroup out of memory: Killed process 19956 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x96000000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:22 executing program 2: setresuid(0xee01, 0xffffffffffffffff, 0xee00) r0 = getuid() setresuid(0xee00, r0, 0xffffffffffffffff) 05:50:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:22 executing program 2: socket$inet(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0xe}, 0x0, 0x0, 0x0, 0x0) 05:50:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:23 executing program 3: setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x960d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x17) 05:50:23 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x3, 0x0, &(0x7f0000000080)) 05:50:23 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) setresuid(0xee00, 0x0, 0x0) 05:50:23 executing program 3: setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:23 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x52400, 0x0) 05:50:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:23 executing program 3: setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:23 executing program 2: io_uring_setup(0x4a7d, &(0x7f0000000000)={0x0, 0x0, 0x1066}) 05:50:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) [ 1359.902205][T20024] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1359.915869][T20024] CPU: 1 PID: 20024 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1359.926386][T20024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1359.936465][T20024] Call Trace: [ 1359.939758][T20024] [ 1359.942767][T20024] dump_stack_lvl+0xda/0x130 [ 1359.947383][T20024] dump_stack+0x15/0x20 [ 1359.951632][T20024] dump_header+0x82/0x2d0 [ 1359.955986][T20024] oom_kill_process+0x33a/0x4c0 [ 1359.960909][T20024] out_of_memory+0x9ca/0xbf0 [ 1359.965579][T20024] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1359.971773][T20024] mem_cgroup_out_of_memory+0x139/0x190 [ 1359.977390][T20024] try_charge_memcg+0x75c/0xd30 [ 1359.982338][T20024] obj_cgroup_charge_pages+0xab/0x130 [ 1359.987803][T20024] __memcg_kmem_charge_page+0x9c/0x170 [ 1359.993340][T20024] __alloc_pages+0x1bb/0x340 [ 1359.998005][T20024] alloc_pages_mpol+0xb1/0x1d0 [ 1360.002828][T20024] alloc_pages+0xe0/0x100 [ 1360.007172][T20024] __vmalloc_node_range+0x6d2/0xea0 [ 1360.012525][T20024] kvmalloc_node+0x121/0x160 [ 1360.017218][T20024] ? xt_alloc_table_info+0x3d/0x80 [ 1360.022513][T20024] xt_alloc_table_info+0x3d/0x80 [ 1360.027545][T20024] do_arpt_set_ctl+0x634/0x13b0 [ 1360.032414][T20024] ? __futex_wait+0x227/0x280 [ 1360.037223][T20024] ? __futex_wake_mark+0x70/0x70 [ 1360.042225][T20024] ? tcp_release_cb+0xfe/0x370 [ 1360.047072][T20024] ? _raw_spin_unlock_bh+0x36/0x40 [ 1360.052252][T20024] nf_setsockopt+0x18d/0x1b0 [ 1360.056950][T20024] ip_setsockopt+0xe6/0x100 [ 1360.061477][T20024] tcp_setsockopt+0x90/0xa0 [ 1360.066083][T20024] sock_common_setsockopt+0x61/0x70 [ 1360.071309][T20024] ? sock_common_recvmsg+0xe0/0xe0 [ 1360.076523][T20024] __sys_setsockopt+0x1d4/0x240 [ 1360.081531][T20024] __x64_sys_setsockopt+0x66/0x80 [ 1360.086747][T20024] do_syscall_64+0x44/0x110 [ 1360.091359][T20024] ? syscall_exit_to_user_mode+0x38/0x140 [ 1360.097208][T20024] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1360.103272][T20024] RIP: 0033:0x7ff5cf31cae9 [ 1360.107694][T20024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1360.127449][T20024] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1360.135875][T20024] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1360.143960][T20024] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1360.152028][T20024] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1360.160034][T20024] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.168105][T20024] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1360.176129][T20024] [ 1360.179340][T20024] memory: usage 307200kB, limit 307200kB, failcnt 106464 [ 1360.186547][T20024] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 1360.194479][T20024] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1360.201855][T20024] Memory cgroup stats for /syz1: [ 1360.202063][T20024] cache 0 [ 1360.210050][T20024] rss 8192 [ 1360.213261][T20024] shmem 0 [ 1360.216250][T20024] mapped_file 0 [ 1360.219721][T20024] dirty 0 [ 1360.222670][T20024] writeback 0 [ 1360.226079][T20024] workingset_refault_anon 31782 [ 1360.231038][T20024] workingset_refault_file 2533 [ 1360.236042][T20024] swap 684032 [ 1360.239426][T20024] swapcached 8192 [ 1360.243149][T20024] pgpgin 443513 [ 1360.246723][T20024] pgpgout 443511 [ 1360.250444][T20024] pgfault 437007 [ 1360.254016][T20024] pgmajfault 13467 [ 1360.257867][T20024] inactive_anon 0 [ 1360.261517][T20024] active_anon 4096 [ 1360.265302][T20024] inactive_file 0 [ 1360.269015][T20024] active_file 0 [ 1360.272560][T20024] unevictable 0 [ 1360.276071][T20024] hierarchical_memory_limit 314572800 [ 1360.281455][T20024] hierarchical_memsw_limit 9223372036854771712 [ 1360.287737][T20024] total_cache 0 [ 1360.291216][T20024] total_rss 8192 [ 1360.294799][T20024] total_shmem 0 [ 1360.298326][T20024] total_mapped_file 0 [ 1360.302317][T20024] total_dirty 0 [ 1360.305943][T20024] total_writeback 0 [ 1360.309766][T20024] total_workingset_refault_anon 31782 [ 1360.315196][T20024] total_workingset_refault_file 2533 [ 1360.320521][T20024] total_swap 684032 [ 1360.324384][T20024] total_swapcached 8192 [ 1360.328609][T20024] total_pgpgin 443513 [ 1360.332623][T20024] total_pgpgout 443511 [ 1360.336719][T20024] total_pgfault 437007 [ 1360.340823][T20024] total_pgmajfault 13467 [ 1360.345101][T20024] total_inactive_anon 0 [ 1360.349292][T20024] total_active_anon 4096 [ 1360.353560][T20024] total_inactive_file 0 [ 1360.357777][T20024] total_active_file 0 [ 1360.361834][T20024] total_unevictable 0 [ 1360.366143][T20024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20022,uid=0 [ 1360.381546][T20024] Memory cgroup out of memory: Killed process 20022 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x970d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:25 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) socket(0xf, 0x0, 0x0) 05:50:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x17) 05:50:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:25 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x6, 0x0, &(0x7f0000000080)) 05:50:25 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:25 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000040)={{0x325, 0x1, 0x18}, './file0\x00'}) 05:50:25 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0xf871, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) [ 1361.458430][T20061] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1361.472104][T20061] CPU: 0 PID: 20061 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1361.482678][T20061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1361.492786][T20061] Call Trace: [ 1361.496078][T20061] [ 1361.499015][T20061] dump_stack_lvl+0xda/0x130 [ 1361.503662][T20061] dump_stack+0x15/0x20 [ 1361.507865][T20061] dump_header+0x82/0x2d0 [ 1361.512230][T20061] oom_kill_process+0x33a/0x4c0 [ 1361.517167][T20061] out_of_memory+0x9ca/0xbf0 [ 1361.521847][T20061] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1361.527974][T20061] mem_cgroup_out_of_memory+0x139/0x190 [ 1361.533584][T20061] try_charge_memcg+0x75c/0xd30 [ 1361.538491][T20061] obj_cgroup_charge_pages+0xab/0x130 [ 1361.543966][T20061] __memcg_kmem_charge_page+0x9c/0x170 [ 1361.549533][T20061] __alloc_pages+0x1bb/0x340 [ 1361.554148][T20061] alloc_pages_mpol+0xb1/0x1d0 [ 1361.558916][T20061] alloc_pages+0xe0/0x100 [ 1361.563270][T20061] __vmalloc_node_range+0x6d2/0xea0 [ 1361.568526][T20061] kvmalloc_node+0x121/0x160 [ 1361.573134][T20061] ? xt_alloc_table_info+0x3d/0x80 [ 1361.578258][T20061] xt_alloc_table_info+0x3d/0x80 [ 1361.583206][T20061] do_arpt_set_ctl+0x634/0x13b0 [ 1361.588188][T20061] ? __futex_wait+0x227/0x280 [ 1361.592919][T20061] ? __futex_wake_mark+0x70/0x70 [ 1361.597894][T20061] ? tcp_release_cb+0xfe/0x370 [ 1361.602741][T20061] ? _raw_spin_unlock_bh+0x36/0x40 [ 1361.607889][T20061] nf_setsockopt+0x18d/0x1b0 [ 1361.612557][T20061] ip_setsockopt+0xe6/0x100 [ 1361.617078][T20061] tcp_setsockopt+0x90/0xa0 [ 1361.621603][T20061] sock_common_setsockopt+0x61/0x70 [ 1361.626822][T20061] ? sock_common_recvmsg+0xe0/0xe0 [ 1361.631953][T20061] __sys_setsockopt+0x1d4/0x240 [ 1361.636876][T20061] __x64_sys_setsockopt+0x66/0x80 [ 1361.641968][T20061] do_syscall_64+0x44/0x110 [ 1361.646500][T20061] ? syscall_exit_to_user_mode+0x38/0x140 [ 1361.652268][T20061] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1361.658178][T20061] RIP: 0033:0x7ff5cf31cae9 [ 1361.662609][T20061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1361.682325][T20061] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1361.690761][T20061] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1361.698735][T20061] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1361.706708][T20061] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1361.714753][T20061] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.722739][T20061] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1361.730753][T20061] [ 1361.733958][T20061] memory: usage 307200kB, limit 307200kB, failcnt 106839 [ 1361.741104][T20061] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 [ 1361.749017][T20061] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1361.756348][T20061] Memory cgroup stats for /syz1: [ 1361.756602][T20061] cache 0 [ 1361.764458][T20061] rss 0 [ 1361.767244][T20061] shmem 0 [ 1361.770209][T20061] mapped_file 0 [ 1361.773748][T20061] dirty 0 [ 1361.776762][T20061] writeback 0 [ 1361.780059][T20061] workingset_refault_anon 31809 [ 1361.784968][T20061] workingset_refault_file 2533 [ 1361.789826][T20061] swap 659456 [ 1361.793116][T20061] swapcached 8192 [ 1361.796771][T20061] pgpgin 443563 [ 1361.800293][T20061] pgpgout 443561 [ 1361.803859][T20061] pgfault 437196 [ 1361.807429][T20061] pgmajfault 13474 [ 1361.811183][T20061] inactive_anon 8192 [ 1361.815110][T20061] active_anon 0 [ 1361.818600][T20061] inactive_file 0 [ 1361.822223][T20061] active_file 0 [ 1361.825844][T20061] unevictable 0 [ 1361.829306][T20061] hierarchical_memory_limit 314572800 [ 1361.834677][T20061] hierarchical_memsw_limit 9223372036854771712 [ 1361.840945][T20061] total_cache 0 [ 1361.844392][T20061] total_rss 0 [ 1361.847726][T20061] total_shmem 0 [ 1361.851194][T20061] total_mapped_file 0 [ 1361.855214][T20061] total_dirty 0 [ 1361.858784][T20061] total_writeback 0 [ 1361.862600][T20061] total_workingset_refault_anon 31809 [ 1361.868005][T20061] total_workingset_refault_file 2533 [ 1361.873297][T20061] total_swap 659456 [ 1361.877154][T20061] total_swapcached 8192 [ 1361.881313][T20061] total_pgpgin 443563 [ 1361.885344][T20061] total_pgpgout 443561 [ 1361.889418][T20061] total_pgfault 437196 [ 1361.893589][T20061] total_pgmajfault 13474 [ 1361.897856][T20061] total_inactive_anon 8192 [ 1361.902351][T20061] total_active_anon 0 [ 1361.906433][T20061] total_inactive_file 0 [ 1361.910593][T20061] total_active_file 0 [ 1361.914632][T20061] total_unevictable 0 [ 1361.918673][T20061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20060,uid=0 [ 1361.933972][T20061] Memory cgroup out of memory: Killed process 20060 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x980d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x17) 05:50:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:26 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x19, 0x0, &(0x7f0000000080)) 05:50:26 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:26 executing program 2: io_uring_setup(0x2de1, &(0x7f0000000540)={0x0, 0x0, 0x6}) 05:50:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:27 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0xe0000, 0x0) 05:50:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x990d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:27 executing program 2: bpf$MAP_CREATE(0x1c, &(0x7f0000000140)=@base={0x8}, 0x48) 05:50:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:28 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x15, &(0x7f0000000080)=[0x700], 0x2) 05:50:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:28 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x14, 0x0, 0x2) 05:50:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1364.098226][T20123] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1364.109616][T20123] CPU: 0 PID: 20123 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1364.120145][T20123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1364.130260][T20123] Call Trace: [ 1364.133569][T20123] [ 1364.136552][T20123] dump_stack_lvl+0xda/0x130 [ 1364.141179][T20123] dump_stack+0x15/0x20 [ 1364.145469][T20123] dump_header+0x82/0x2d0 [ 1364.150000][T20123] oom_kill_process+0x33a/0x4c0 [ 1364.154953][T20123] out_of_memory+0x9ca/0xbf0 [ 1364.159593][T20123] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1364.165794][T20123] mem_cgroup_out_of_memory+0x139/0x190 [ 1364.171380][T20123] try_charge_memcg+0x75c/0xd30 [ 1364.176337][T20123] ? __swap_duplicate+0x29b/0x2b0 [ 1364.181471][T20123] ? radix_tree_lookup+0xf9/0x150 [ 1364.186546][T20123] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1364.192656][T20123] __read_swap_cache_async+0x2f6/0x550 05:50:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) [ 1364.198253][T20123] swap_cluster_readahead+0x27c/0x4c0 [ 1364.203696][T20123] swapin_readahead+0xe9/0x7f0 [ 1364.208599][T20123] ? __filemap_get_folio+0x41a/0x5a0 [ 1364.213963][T20123] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1364.219719][T20123] ? swap_cache_get_folio+0x6e/0x200 [ 1364.225104][T20123] do_swap_page+0x4a0/0x1670 [ 1364.229734][T20123] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1364.235108][T20123] ? __rcu_read_lock+0x35/0x50 [ 1364.239977][T20123] ? pte_offset_map_nolock+0x124/0x1d0 [ 1364.245468][T20123] handle_mm_fault+0xa36/0x2dd0 [ 1364.250434][T20123] exc_page_fault+0x3ff/0x6c0 [ 1364.255137][T20123] asm_exc_page_fault+0x26/0x30 [ 1364.260011][T20123] RIP: 0033:0x7ff5cf2d6ae4 [ 1364.264477][T20123] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1364.284200][T20123] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010283 [ 1364.290280][T20123] RAX: 0000000000000000 RBX: 00007ff5cf43c050 RCX: 0000000000000000 [ 1364.298409][T20123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1364.306420][T20123] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1364.314398][T20123] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000014d089 [ 1364.322375][T20123] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000014cd48 [ 1364.330358][T20123] [ 1364.333493][T20123] memory: usage 307188kB, limit 307200kB, failcnt 107275 [ 1364.340742][T20123] memory+swap: usage 307864kB, limit 9007199254740988kB, failcnt 0 [ 1364.348676][T20123] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1364.356002][T20123] Memory cgroup stats for /syz1: [ 1364.356259][T20123] cache 0 [ 1364.364349][T20123] rss 20480 [ 1364.367503][T20123] shmem 0 [ 1364.370529][T20123] mapped_file 0 [ 1364.373991][T20123] dirty 0 [ 1364.376964][T20123] writeback 4096 [ 1364.380585][T20123] workingset_refault_anon 31919 [ 1364.385473][T20123] workingset_refault_file 2533 [ 1364.390246][T20123] swap 692224 [ 1364.393571][T20123] swapcached 20480 [ 1364.397334][T20123] pgpgin 443719 [ 1364.400798][T20123] pgpgout 443714 [ 1364.404354][T20123] pgfault 437496 [ 1364.407933][T20123] pgmajfault 13524 [ 1364.411661][T20123] inactive_anon 8192 [ 1364.415650][T20123] active_anon 12288 [ 1364.419496][T20123] inactive_file 0 [ 1364.423129][T20123] active_file 0 [ 1364.426627][T20123] unevictable 0 [ 1364.430095][T20123] hierarchical_memory_limit 314572800 [ 1364.435490][T20123] hierarchical_memsw_limit 9223372036854771712 [ 1364.441647][T20123] total_cache 0 [ 1364.445227][T20123] total_rss 20480 [ 1364.448866][T20123] total_shmem 0 [ 1364.452332][T20123] total_mapped_file 0 [ 1364.456341][T20123] total_dirty 0 [ 1364.459809][T20123] total_writeback 4096 [ 1364.464003][T20123] total_workingset_refault_anon 31919 [ 1364.469474][T20123] total_workingset_refault_file 2533 [ 1364.474808][T20123] total_swap 692224 [ 1364.478625][T20123] total_swapcached 20480 [ 1364.482950][T20123] total_pgpgin 443719 [ 1364.486986][T20123] total_pgpgout 443714 [ 1364.491066][T20123] total_pgfault 437496 [ 1364.495166][T20123] total_pgmajfault 13524 [ 1364.499426][T20123] total_inactive_anon 8192 [ 1364.503919][T20123] total_active_anon 12288 [ 1364.508283][T20123] total_inactive_file 0 [ 1364.512440][T20123] total_active_file 0 [ 1364.516447][T20123] total_unevictable 0 [ 1364.520473][T20123] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20123,uid=0 [ 1364.535915][T20123] Memory cgroup out of memory: Killed process 20123 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1364.570071][T20127] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1364.583617][T20127] CPU: 0 PID: 20127 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1364.594090][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1364.604984][T20127] Call Trace: [ 1364.608269][T20127] [ 1364.611212][T20127] dump_stack_lvl+0xda/0x130 [ 1364.615948][T20127] dump_stack+0x15/0x20 [ 1364.620208][T20127] dump_header+0x82/0x2d0 [ 1364.624562][T20127] oom_kill_process+0x33a/0x4c0 [ 1364.629429][T20127] out_of_memory+0x9ca/0xbf0 [ 1364.634101][T20127] mem_cgroup_out_of_memory+0x139/0x190 [ 1364.639673][T20127] try_charge_memcg+0x75c/0xd30 [ 1364.644548][T20127] obj_cgroup_charge_pages+0xab/0x130 [ 1364.649939][T20127] __memcg_kmem_charge_page+0x9c/0x170 [ 1364.655416][T20127] __alloc_pages+0x1bb/0x340 [ 1364.660109][T20127] alloc_pages_mpol+0xb1/0x1d0 [ 1364.664930][T20127] alloc_pages+0xe0/0x100 [ 1364.669272][T20127] __vmalloc_node_range+0x6d2/0xea0 [ 1364.674628][T20127] kvmalloc_node+0x121/0x160 [ 1364.679231][T20127] ? xt_alloc_table_info+0x3d/0x80 [ 1364.684364][T20127] xt_alloc_table_info+0x3d/0x80 [ 1364.689491][T20127] do_arpt_set_ctl+0x634/0x13b0 [ 1364.694402][T20127] ? __bpf_prog_run32+0x74/0xa0 [ 1364.699266][T20127] ? tcp_release_cb+0xfe/0x370 [ 1364.704204][T20127] ? _raw_spin_unlock_bh+0x36/0x40 [ 1364.709404][T20127] nf_setsockopt+0x18d/0x1b0 [ 1364.714015][T20127] ip_setsockopt+0xe6/0x100 [ 1364.718597][T20127] tcp_setsockopt+0x90/0xa0 [ 1364.723239][T20127] sock_common_setsockopt+0x61/0x70 [ 1364.728492][T20127] ? sock_common_recvmsg+0xe0/0xe0 [ 1364.733698][T20127] __sys_setsockopt+0x1d4/0x240 [ 1364.738564][T20127] __x64_sys_setsockopt+0x66/0x80 [ 1364.743682][T20127] do_syscall_64+0x44/0x110 [ 1364.748244][T20127] ? syscall_exit_to_user_mode+0x38/0x140 [ 1364.754044][T20127] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1364.760031][T20127] RIP: 0033:0x7fa159e9bae9 [ 1364.764452][T20127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1364.784072][T20127] RSP: 002b:00007fa1591fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1364.792556][T20127] RAX: ffffffffffffffda RBX: 00007fa159fbb050 RCX: 00007fa159e9bae9 [ 1364.800601][T20127] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1364.808585][T20127] RBP: 00007fa159ee747a R08: 0000000000000438 R09: 0000000000000000 [ 1364.816559][T20127] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1364.824533][T20127] R13: 000000000000006e R14: 00007fa159fbb050 R15: 00007ffea5cad6d8 [ 1364.832604][T20127] [ 1364.835774][T20127] memory: usage 307200kB, limit 307200kB, failcnt 180311 [ 1364.842815][T20127] memory+swap: usage 307624kB, limit 9007199254740988kB, failcnt 0 [ 1364.850747][T20127] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1364.858155][T20127] Memory cgroup stats for /syz0: [ 1364.858758][T20127] cache 4096 [ 1364.866958][T20127] rss 0 [ 1364.869731][T20127] shmem 0 [ 1364.872750][T20127] mapped_file 0 [ 1364.876404][T20127] dirty 0 [ 1364.879360][T20127] writeback 0 [ 1364.882779][T20127] workingset_refault_anon 36205 [ 1364.887745][T20127] workingset_refault_file 10296 [ 1364.892641][T20127] swap 434176 [ 1364.895955][T20127] swapcached 0 [ 1364.899337][T20127] pgpgin 3461175 [ 1364.902933][T20127] pgpgout 3461174 [ 1364.906633][T20127] pgfault 3389899 [ 1364.910360][T20127] pgmajfault 17255 [ 1364.914081][T20127] inactive_anon 0 [ 1364.917732][T20127] active_anon 0 [ 1364.921293][T20127] inactive_file 0 [ 1364.924999][T20127] active_file 4096 [ 1364.928727][T20127] unevictable 0 [ 1364.932195][T20127] hierarchical_memory_limit 314572800 [ 1364.937584][T20127] hierarchical_memsw_limit 9223372036854771712 [ 1364.943741][T20127] total_cache 4096 [ 1364.947567][T20127] total_rss 0 [ 1364.950870][T20127] total_shmem 0 [ 1364.954406][T20127] total_mapped_file 0 [ 1364.958418][T20127] total_dirty 0 [ 1364.961918][T20127] total_writeback 0 [ 1364.965762][T20127] total_workingset_refault_anon 36205 [ 1364.971140][T20127] total_workingset_refault_file 10296 [ 1364.976558][T20127] total_swap 434176 [ 1364.980811][T20127] total_swapcached 0 [ 1364.984732][T20127] total_pgpgin 3461175 [ 1364.988858][T20127] total_pgpgout 3461174 [ 1364.993113][T20127] total_pgfault 3389899 [ 1364.997383][T20127] total_pgmajfault 17255 [ 1365.001634][T20127] total_inactive_anon 0 [ 1365.005820][T20127] total_active_anon 0 [ 1365.009817][T20127] total_inactive_file 0 [ 1365.013998][T20127] total_active_file 4096 [ 1365.018388][T20127] total_unevictable 0 [ 1365.022370][T20127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20114,uid=0 [ 1365.037826][T20127] Memory cgroup out of memory: Killed process 20114 (syz-executor.0) total-vm:48740kB, anon-rss:376kB, file-rss:11012kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 05:50:30 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x6, &(0x7f0000000080)=[0x0, 0xc378], 0x2) 05:50:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x9a0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:50:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x82, 0x10, "3bb02dfe4ea35b443a849d6eaee8"}]}}}], 0x20}, 0x0) 05:50:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:30 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x15, 0x0, &(0x7f0000000080)) 05:50:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:30 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x64dfb20a0ac3a838, 0xffffffffffffffff, 0x8000000) 05:50:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1366.200645][T20154] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1366.214339][T20154] CPU: 1 PID: 20154 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1366.224784][T20154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1366.234862][T20154] Call Trace: [ 1366.238175][T20154] [ 1366.241167][T20154] dump_stack_lvl+0xda/0x130 [ 1366.245813][T20154] dump_stack+0x15/0x20 [ 1366.250005][T20154] dump_header+0x82/0x2d0 [ 1366.254376][T20154] oom_kill_process+0x33a/0x4c0 [ 1366.259261][T20154] out_of_memory+0x9ca/0xbf0 [ 1366.263921][T20154] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1366.270101][T20154] mem_cgroup_out_of_memory+0x139/0x190 [ 1366.275731][T20154] try_charge_memcg+0x75c/0xd30 [ 1366.280688][T20154] obj_cgroup_charge_pages+0xab/0x130 [ 1366.286173][T20154] __memcg_kmem_charge_page+0x9c/0x170 [ 1366.291667][T20154] __alloc_pages+0x1bb/0x340 [ 1366.296375][T20154] alloc_pages_mpol+0xb1/0x1d0 [ 1366.301187][T20154] alloc_pages+0xe0/0x100 [ 1366.305559][T20154] __vmalloc_node_range+0x6d2/0xea0 [ 1366.310816][T20154] kvmalloc_node+0x121/0x160 [ 1366.315462][T20154] ? xt_alloc_table_info+0x3d/0x80 [ 1366.320762][T20154] xt_alloc_table_info+0x3d/0x80 [ 1366.325738][T20154] do_arpt_set_ctl+0x634/0x13b0 [ 1366.330636][T20154] ? __futex_wait+0x227/0x280 [ 1366.335341][T20154] ? __futex_wake_mark+0x70/0x70 [ 1366.340315][T20154] ? tcp_release_cb+0xfe/0x370 [ 1366.345116][T20154] ? _raw_spin_unlock_bh+0x36/0x40 [ 1366.350369][T20154] nf_setsockopt+0x18d/0x1b0 [ 1366.355157][T20154] ip_setsockopt+0xe6/0x100 [ 1366.359696][T20154] tcp_setsockopt+0x90/0xa0 [ 1366.364277][T20154] sock_common_setsockopt+0x61/0x70 [ 1366.369791][T20154] ? sock_common_recvmsg+0xe0/0xe0 [ 1366.374995][T20154] __sys_setsockopt+0x1d4/0x240 [ 1366.379949][T20154] __x64_sys_setsockopt+0x66/0x80 [ 1366.385044][T20154] do_syscall_64+0x44/0x110 [ 1366.389581][T20154] ? syscall_exit_to_user_mode+0x38/0x140 [ 1366.395371][T20154] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1366.401404][T20154] RIP: 0033:0x7ff5cf31cae9 [ 1366.405864][T20154] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1366.425826][T20154] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1366.434244][T20154] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1366.442222][T20154] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1366.450297][T20154] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1366.458454][T20154] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.466457][T20154] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1366.474433][T20154] [ 1366.477733][T20154] memory: usage 307200kB, limit 307200kB, failcnt 107474 [ 1366.484867][T20154] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 1366.492876][T20154] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1366.500406][T20154] Memory cgroup stats for /syz1: [ 1366.500657][T20154] cache 0 [ 1366.508700][T20154] rss 8192 [ 1366.511732][T20154] shmem 0 [ 1366.514670][T20154] mapped_file 0 [ 1366.518258][T20154] dirty 0 [ 1366.521329][T20154] writeback 0 [ 1366.524631][T20154] workingset_refault_anon 31969 [ 1366.529536][T20154] workingset_refault_file 2533 [ 1366.534330][T20154] swap 720896 [ 1366.537760][T20154] swapcached 8192 [ 1366.541448][T20154] pgpgin 443792 [ 1366.544946][T20154] pgpgout 443790 [ 1366.548509][T20154] pgfault 437690 [ 1366.552069][T20154] pgmajfault 13542 [ 1366.555957][T20154] inactive_anon 8192 [ 1366.559992][T20154] active_anon 0 [ 1366.563586][T20154] inactive_file 0 [ 1366.567266][T20154] active_file 0 [ 1366.571046][T20154] unevictable 0 [ 1366.574610][T20154] hierarchical_memory_limit 314572800 [ 1366.580036][T20154] hierarchical_memsw_limit 9223372036854771712 [ 1366.586239][T20154] total_cache 0 [ 1366.589707][T20154] total_rss 8192 [ 1366.593349][T20154] total_shmem 0 [ 1366.596887][T20154] total_mapped_file 0 [ 1366.600933][T20154] total_dirty 0 [ 1366.604384][T20154] total_writeback 0 [ 1366.608275][T20154] total_workingset_refault_anon 31969 [ 1366.613774][T20154] total_workingset_refault_file 2533 [ 1366.619117][T20154] total_swap 720896 [ 1366.622927][T20154] total_swapcached 8192 [ 1366.627172][T20154] total_pgpgin 443792 [ 1366.631197][T20154] total_pgpgout 443790 [ 1366.635363][T20154] total_pgfault 437690 [ 1366.639434][T20154] total_pgmajfault 13542 [ 1366.643766][T20154] total_inactive_anon 8192 [ 1366.648285][T20154] total_active_anon 0 [ 1366.652272][T20154] total_inactive_file 0 [ 1366.656459][T20154] total_active_file 0 [ 1366.660451][T20154] total_unevictable 0 [ 1366.664422][T20154] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20153,uid=0 [ 1366.679878][T20154] Memory cgroup out of memory: Killed process 20153 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1366.697417][T20173] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1366.711008][T20173] CPU: 0 PID: 20173 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1366.721447][T20173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1366.731524][T20173] Call Trace: [ 1366.734874][T20173] [ 1366.737819][T20173] dump_stack_lvl+0xda/0x130 [ 1366.742442][T20173] dump_stack+0x15/0x20 [ 1366.746617][T20173] dump_header+0x82/0x2d0 [ 1366.750969][T20173] oom_kill_process+0x33a/0x4c0 [ 1366.755928][T20173] out_of_memory+0x9ca/0xbf0 [ 1366.760625][T20173] mem_cgroup_out_of_memory+0x139/0x190 [ 1366.766191][T20173] try_charge_memcg+0x75c/0xd30 [ 1366.771112][T20173] obj_cgroup_charge_pages+0xab/0x130 [ 1366.776503][T20173] __memcg_kmem_charge_page+0x9c/0x170 [ 1366.782017][T20173] __alloc_pages+0x1bb/0x340 [ 1366.786705][T20173] alloc_pages_mpol+0xb1/0x1d0 [ 1366.791564][T20173] alloc_pages+0xe0/0x100 [ 1366.795909][T20173] __vmalloc_node_range+0x6d2/0xea0 [ 1366.801237][T20173] kvmalloc_node+0x121/0x160 [ 1366.805898][T20173] ? xt_alloc_table_info+0x3d/0x80 [ 1366.811023][T20173] xt_alloc_table_info+0x3d/0x80 [ 1366.815977][T20173] do_arpt_set_ctl+0x634/0x13b0 [ 1366.820853][T20173] ? __futex_wait+0x227/0x280 [ 1366.825588][T20173] ? __futex_wake_mark+0x70/0x70 [ 1366.830539][T20173] ? tcp_release_cb+0xfe/0x370 [ 1366.835426][T20173] ? _raw_spin_unlock_bh+0x36/0x40 [ 1366.840612][T20173] nf_setsockopt+0x18d/0x1b0 [ 1366.845265][T20173] ip_setsockopt+0xe6/0x100 [ 1366.849792][T20173] tcp_setsockopt+0x90/0xa0 [ 1366.854329][T20173] sock_common_setsockopt+0x61/0x70 [ 1366.859608][T20173] ? sock_common_recvmsg+0xe0/0xe0 [ 1366.864744][T20173] __sys_setsockopt+0x1d4/0x240 [ 1366.869646][T20173] __x64_sys_setsockopt+0x66/0x80 [ 1366.874680][T20173] do_syscall_64+0x44/0x110 [ 1366.879221][T20173] ? syscall_exit_to_user_mode+0x38/0x140 [ 1366.885030][T20173] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1366.890963][T20173] RIP: 0033:0x7fa159e9bae9 [ 1366.895385][T20173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1366.915210][T20173] RSP: 002b:00007fa1591fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1366.924219][T20173] RAX: ffffffffffffffda RBX: 00007fa159fbb050 RCX: 00007fa159e9bae9 [ 1366.932370][T20173] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1366.940434][T20173] RBP: 00007fa159ee747a R08: 0000000000000438 R09: 0000000000000000 [ 1366.948427][T20173] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.956494][T20173] R13: 000000000000006e R14: 00007fa159fbb050 R15: 00007ffea5cad6d8 [ 1366.964510][T20173] [ 1366.967694][T20173] memory: usage 307000kB, limit 307200kB, failcnt 181314 [ 1366.974794][T20173] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 1366.982694][T20173] kmem: usage 306976kB, limit 9007199254740988kB, failcnt 0 [ 1366.989997][T20173] Memory cgroup stats for /syz0: [ 1366.996302][T20173] cache 4096 [ 1367.004498][T20173] rss 8192 [ 1367.007557][T20173] shmem 0 [ 1367.010597][T20173] mapped_file 0 [ 1367.014116][T20173] dirty 0 [ 1367.017084][T20173] writeback 0 [ 1367.020382][T20173] workingset_refault_anon 36275 [ 1367.025263][T20173] workingset_refault_file 10296 [ 1367.030185][T20173] swap 499712 [ 1367.033475][T20173] swapcached 20480 [ 1367.037302][T20173] pgpgin 3465367 [ 1367.040853][T20173] pgpgout 3465361 [ 1367.044491][T20173] pgfault 3394173 [ 1367.048172][T20173] pgmajfault 17274 [ 1367.051890][T20173] inactive_anon 20480 [ 1367.055885][T20173] active_anon 0 [ 1367.059402][T20173] inactive_file 0 [ 1367.063036][T20173] active_file 4096 [ 1367.066812][T20173] unevictable 0 [ 1367.070281][T20173] hierarchical_memory_limit 314572800 [ 1367.075768][T20173] hierarchical_memsw_limit 9223372036854771712 [ 1367.081948][T20173] total_cache 4096 [ 1367.085729][T20173] total_rss 8192 [ 1367.089284][T20173] total_shmem 0 [ 1367.092750][T20173] total_mapped_file 0 [ 1367.096759][T20173] total_dirty 0 [ 1367.100227][T20173] total_writeback 0 05:50:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x9b0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) [ 1367.104217][T20173] total_workingset_refault_anon 36275 [ 1367.109616][T20173] total_workingset_refault_file 10296 [ 1367.115029][T20173] total_swap 499712 [ 1367.118845][T20173] total_swapcached 20480 [ 1367.123125][T20173] total_pgpgin 3465367 [ 1367.127244][T20173] total_pgpgout 3465361 [ 1367.131408][T20173] total_pgfault 3394173 [ 1367.135802][T20173] total_pgmajfault 17274 [ 1367.140093][T20173] total_inactive_anon 20480 [ 1367.144600][T20173] total_active_anon 0 [ 1367.148630][T20173] total_inactive_file 0 [ 1367.152909][T20173] total_active_file 4096 [ 1367.157194][T20173] total_unevictable 0 [ 1367.161216][T20173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20163,uid=0 [ 1367.176639][T20173] Memory cgroup out of memory: Killed process 20163 (syz-executor.0) total-vm:48740kB, anon-rss:376kB, file-rss:10884kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 05:50:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:32 executing program 2: bpf$MAP_CREATE(0x1c, &(0x7f0000000140)=@base={0x8, 0x0, 0x2c}, 0x48) 05:50:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:50:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}], 0x30}, 0x24004004) 05:50:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}, 0x0) [ 1367.942711][T20202] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1367.954105][T20202] CPU: 1 PID: 20202 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1367.964545][T20202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1367.974893][T20202] Call Trace: [ 1367.978190][T20202] [ 1367.981142][T20202] dump_stack_lvl+0xda/0x130 [ 1367.985848][T20202] dump_stack+0x15/0x20 [ 1367.990142][T20202] dump_header+0x82/0x2d0 [ 1367.994497][T20202] oom_kill_process+0x33a/0x4c0 [ 1367.999428][T20202] out_of_memory+0x9ca/0xbf0 [ 1368.004122][T20202] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1368.010402][T20202] mem_cgroup_out_of_memory+0x139/0x190 [ 1368.015965][T20202] try_charge_memcg+0x75c/0xd30 [ 1368.020888][T20202] ? __swap_duplicate+0x29b/0x2b0 [ 1368.025946][T20202] ? radix_tree_lookup+0xf9/0x150 [ 1368.031019][T20202] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1368.037218][T20202] __read_swap_cache_async+0x2f6/0x550 [ 1368.042711][T20202] swap_cluster_readahead+0x27c/0x4c0 [ 1368.048235][T20202] swapin_readahead+0xe9/0x7f0 [ 1368.053068][T20202] ? __filemap_get_folio+0x41a/0x5a0 [ 1368.058374][T20202] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1368.064022][T20202] ? swap_cache_get_folio+0x6e/0x200 [ 1368.069389][T20202] do_swap_page+0x4a0/0x1670 [ 1368.074063][T20202] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1368.079394][T20202] ? __rcu_read_lock+0x35/0x50 [ 1368.084247][T20202] ? pte_offset_map_nolock+0x124/0x1d0 [ 1368.089738][T20202] handle_mm_fault+0xa36/0x2dd0 [ 1368.094605][T20202] exc_page_fault+0x3ff/0x6c0 [ 1368.099346][T20202] asm_exc_page_fault+0x26/0x30 [ 1368.104300][T20202] RIP: 0033:0x7fa159e55abd [ 1368.108797][T20202] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6e 16 00 00 0f 8e 12 ff ff ff e8 2c 08 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 [ 1368.128451][T20202] RSP: 002b:00007ffea5cad7c0 EFLAGS: 00010216 [ 1368.134548][T20202] RAX: 000000000014df7e RBX: 00007fa159fbc980 RCX: 000000000014dbd8 [ 1368.142628][T20202] RDX: 00000000000003a6 RSI: 00007ffea5cad7a0 RDI: 7fffffffffffffff [ 1368.150773][T20202] RBP: 00007fa159fbc980 R08: 0000000000000010 R09: 00007ffea5df90b0 [ 1368.159019][T20202] R10: 00007ffea5df9080 R11: 000000000003ef14 R12: 000000000014e102 [ 1368.167024][T20202] R13: ffffffffffffffff R14: 00007fa159a1f000 R15: 000000000014ddc1 [ 1368.175064][T20202] [ 1368.178203][T20202] memory: usage 307200kB, limit 307200kB, failcnt 107622 [ 1368.185411][T20202] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 1368.193324][T20202] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1368.200685][T20202] Memory cgroup stats for /syz1: [ 1368.206331][T20202] cache 0 [ 1368.214404][T20202] rss 16384 [ 1368.217642][T20202] shmem 0 [ 1368.220658][T20202] mapped_file 0 [ 1368.224165][T20202] dirty 0 [ 1368.227164][T20202] writeback 0 [ 1368.230497][T20202] workingset_refault_anon 32039 [ 1368.235393][T20202] workingset_refault_file 2533 [ 1368.240186][T20202] swap 704512 [ 1368.243578][T20202] swapcached 16384 [ 1368.247352][T20202] pgpgin 443885 [ 1368.250814][T20202] pgpgout 443881 [ 1368.254370][T20202] pgfault 437827 [ 1368.257959][T20202] pgmajfault 13563 [ 1368.261833][T20202] inactive_anon 0 [ 1368.265531][T20202] active_anon 0 [ 1368.269046][T20202] inactive_file 0 [ 1368.272720][T20202] active_file 0 [ 1368.276316][T20202] unevictable 0 [ 1368.279889][T20202] hierarchical_memory_limit 314572800 [ 1368.285329][T20202] hierarchical_memsw_limit 9223372036854771712 [ 1368.291495][T20202] total_cache 0 [ 1368.295036][T20202] total_rss 16384 [ 1368.298717][T20202] total_shmem 0 [ 1368.302193][T20202] total_mapped_file 0 [ 1368.306217][T20202] total_dirty 0 [ 1368.309717][T20202] total_writeback 0 [ 1368.313575][T20202] total_workingset_refault_anon 32039 [ 1368.319054][T20202] total_workingset_refault_file 2533 [ 1368.324407][T20202] total_swap 704512 [ 1368.328258][T20202] total_swapcached 16384 [ 1368.332504][T20202] total_pgpgin 443885 [ 1368.336534][T20202] total_pgpgout 443881 [ 1368.340603][T20202] total_pgfault 437827 [ 1368.344676][T20202] total_pgmajfault 13563 [ 1368.348998][T20202] total_inactive_anon 0 [ 1368.353175][T20202] total_active_anon 0 [ 1368.357203][T20202] total_inactive_file 0 [ 1368.361613][T20202] total_active_file 0 [ 1368.365696][T20202] total_unevictable 0 [ 1368.369771][T20202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20190,uid=0 [ 1368.385150][T20202] Memory cgroup out of memory: Killed process 20190 (syz-executor.1) total-vm:46296kB, anon-rss:300kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x9c0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:33 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x16}, './file0\x00'}) 05:50:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:33 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x32, 0x0, &(0x7f0000000080)) 05:50:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) [ 1369.408738][T20236] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1369.420198][T20236] CPU: 1 PID: 20236 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1369.430646][T20236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1369.440727][T20236] Call Trace: [ 1369.444026][T20236] [ 1369.446985][T20236] dump_stack_lvl+0xda/0x130 [ 1369.451626][T20236] dump_stack+0x15/0x20 [ 1369.455879][T20236] dump_header+0x82/0x2d0 [ 1369.460340][T20236] oom_kill_process+0x33a/0x4c0 [ 1369.466101][T20236] out_of_memory+0x9ca/0xbf0 [ 1369.471047][T20236] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1369.477195][T20236] mem_cgroup_out_of_memory+0x139/0x190 [ 1369.482777][T20236] try_charge_memcg+0x75c/0xd30 [ 1369.487737][T20236] ? __swap_duplicate+0x29b/0x2b0 [ 1369.492792][T20236] ? radix_tree_lookup+0xf9/0x150 [ 1369.497930][T20236] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1369.504120][T20236] __read_swap_cache_async+0x2f6/0x550 [ 1369.509679][T20236] swap_cluster_readahead+0x27c/0x4c0 [ 1369.515097][T20236] swapin_readahead+0xe9/0x7f0 [ 1369.519896][T20236] ? __filemap_get_folio+0x41a/0x5a0 [ 1369.525211][T20236] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1369.530938][T20236] ? swap_cache_get_folio+0x6e/0x200 [ 1369.536318][T20236] do_swap_page+0x4a0/0x1670 [ 1369.540937][T20236] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1369.546269][T20236] ? __rcu_read_lock+0x35/0x50 [ 1369.551085][T20236] ? pte_offset_map_nolock+0x124/0x1d0 [ 1369.556667][T20236] handle_mm_fault+0xa36/0x2dd0 [ 1369.561545][T20236] exc_page_fault+0x3ff/0x6c0 [ 1369.566437][T20236] asm_exc_page_fault+0x26/0x30 [ 1369.571313][T20236] RIP: 0033:0x7ff5cf2d6ae4 [ 1369.575746][T20236] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1369.595369][T20236] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1369.601450][T20236] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1369.609492][T20236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1369.617541][T20236] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1369.625538][T20236] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000014e5be [ 1369.633559][T20236] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000014e27d [ 1369.641548][T20236] [ 1369.644739][T20236] memory: usage 307200kB, limit 307200kB, failcnt 107755 [ 1369.651779][T20236] memory+swap: usage 307836kB, limit 9007199254740988kB, failcnt 0 [ 1369.659780][T20236] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1369.667333][T20236] Memory cgroup stats for /syz1: [ 1369.667529][T20236] cache 0 [ 1369.675527][T20236] rss 12288 [ 1369.678652][T20236] shmem 0 [ 1369.681591][T20236] mapped_file 0 [ 1369.685111][T20236] dirty 0 [ 1369.688209][T20236] writeback 4096 [ 1369.691754][T20236] workingset_refault_anon 32071 [ 1369.696652][T20236] workingset_refault_file 2533 [ 1369.701493][T20236] swap 651264 [ 1369.704848][T20236] swapcached 16384 [ 1369.708586][T20236] pgpgin 443940 [ 1369.712158][T20236] pgpgout 443936 [ 1369.715834][T20236] pgfault 437956 [ 1369.719419][T20236] pgmajfault 13574 [ 1369.723147][T20236] inactive_anon 0 [ 1369.726913][T20236] active_anon 0 [ 1369.730436][T20236] inactive_file 0 [ 1369.734119][T20236] active_file 0 [ 1369.737710][T20236] unevictable 0 [ 1369.741177][T20236] hierarchical_memory_limit 314572800 [ 1369.746597][T20236] hierarchical_memsw_limit 9223372036854771712 [ 1369.752870][T20236] total_cache 0 [ 1369.756368][T20236] total_rss 12288 [ 1369.760044][T20236] total_shmem 0 [ 1369.763557][T20236] total_mapped_file 0 [ 1369.767578][T20236] total_dirty 0 [ 1369.771068][T20236] total_writeback 4096 [ 1369.775183][T20236] total_workingset_refault_anon 32071 [ 1369.780692][T20236] total_workingset_refault_file 2533 [ 1369.786052][T20236] total_swap 651264 [ 1369.789863][T20236] total_swapcached 16384 [ 1369.794113][T20236] total_pgpgin 443940 [ 1369.798134][T20236] total_pgpgout 443936 [ 1369.802243][T20236] total_pgfault 437956 [ 1369.806392][T20236] total_pgmajfault 13574 [ 1369.810644][T20236] total_inactive_anon 0 [ 1369.814835][T20236] total_active_anon 0 [ 1369.818840][T20236] total_inactive_file 0 [ 1369.823003][T20236] total_active_file 0 [ 1369.827027][T20236] total_unevictable 0 [ 1369.831071][T20236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20236,uid=0 [ 1369.847384][T20236] Memory cgroup out of memory: Killed process 20236 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1369.865254][T20220] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1369.876588][T20220] CPU: 0 PID: 20220 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1369.887081][T20220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1369.897356][T20220] Call Trace: [ 1369.900645][T20220] [ 1369.903586][T20220] dump_stack_lvl+0xda/0x130 [ 1369.908210][T20220] dump_stack+0x15/0x20 [ 1369.912465][T20220] dump_header+0x82/0x2d0 [ 1369.916827][T20220] oom_kill_process+0x33a/0x4c0 [ 1369.921812][T20220] out_of_memory+0x9ca/0xbf0 [ 1369.926533][T20220] mem_cgroup_out_of_memory+0x139/0x190 [ 1369.932143][T20220] try_charge_memcg+0x75c/0xd30 [ 1369.937024][T20220] ? __swap_duplicate+0x29b/0x2b0 [ 1369.942172][T20220] ? radix_tree_lookup+0xf9/0x150 [ 1369.947327][T20220] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1369.953422][T20220] __read_swap_cache_async+0x2f6/0x550 [ 1369.958980][T20220] swap_cluster_readahead+0x27c/0x4c0 [ 1369.964454][T20220] swapin_readahead+0xe9/0x7f0 [ 1369.969262][T20220] ? __filemap_get_folio+0x41a/0x5a0 [ 1369.974770][T20220] ? swap_cache_get_folio+0x6e/0x200 [ 1369.980152][T20220] do_swap_page+0x4a0/0x1670 [ 1369.984809][T20220] ? asm_exc_page_fault+0x26/0x30 [ 1369.989838][T20220] ? __rcu_read_lock+0x35/0x50 [ 1369.994638][T20220] ? pte_offset_map_nolock+0x124/0x1d0 [ 1370.000108][T20220] handle_mm_fault+0xa36/0x2dd0 [ 1370.005027][T20220] exc_page_fault+0x3ff/0x6c0 [ 1370.009727][T20220] asm_exc_page_fault+0x26/0x30 [ 1370.014626][T20220] RIP: 0033:0x7fa159e5475b [ 1370.019139][T20220] Code: 14 95 01 00 00 00 0f 84 53 02 00 00 41 80 bd 94 00 00 00 01 19 c0 83 e0 f8 83 c0 0a 09 d0 89 c3 bf 0d f0 ad 0b e8 a5 1a ff ff <41> 8b 7d 24 e8 9c 1a ff ff 41 8b 7d 28 e8 93 1a ff ff 89 ef e8 8c [ 1370.039040][T20220] RSP: 002b:00007ffea5cad780 EFLAGS: 00010283 [ 1370.045118][T20220] RAX: 0000001b2e9238f4 RBX: 0000000000000001 RCX: 0000001b2e920000 [ 1370.053094][T20220] RDX: 0000001b2e9238f8 RSI: 0000000000000000 RDI: 000000000badf00d [ 1370.061128][T20220] RBP: 00000000000003e7 R08: 0000001b2ed20000 R09: 00007ffea5df90b0 [ 1370.069108][T20220] R10: 00007ffea5df9080 R11: 000000000003f012 R12: 000000000014e55b [ 1370.077083][T20220] R13: 00007fa159fbb050 R14: 00007fa159a1f000 R15: 000000000014e21a [ 1370.085153][T20220] [ 1370.088282][T20220] memory: usage 307200kB, limit 307200kB, failcnt 182019 [ 1370.095374][T20220] memory+swap: usage 307612kB, limit 9007199254740988kB, failcnt 0 [ 1370.103274][T20220] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1370.110877][T20220] Memory cgroup stats for /syz0: [ 1370.113954][T20220] cache 4096 [ 1370.122238][T20220] rss 8192 [ 1370.125294][T20220] shmem 0 [ 1370.128272][T20220] mapped_file 0 [ 1370.131918][T20220] dirty 0 [ 1370.134942][T20220] writeback 0 [ 1370.138330][T20220] workingset_refault_anon 36362 [ 1370.143338][T20220] workingset_refault_file 10296 [ 1370.148263][T20220] swap 421888 [ 1370.151558][T20220] swapcached 8192 [ 1370.155231][T20220] pgpgin 3473696 [ 1370.158869][T20220] pgpgout 3473693 [ 1370.162516][T20220] pgfault 3402686 [ 1370.166192][T20220] pgmajfault 17313 [ 1370.169925][T20220] inactive_anon 8192 [ 1370.173912][T20220] active_anon 0 [ 1370.177400][T20220] inactive_file 0 [ 1370.181633][T20220] active_file 4096 [ 1370.185478][T20220] unevictable 0 [ 1370.189021][T20220] hierarchical_memory_limit 314572800 [ 1370.194399][T20220] hierarchical_memsw_limit 9223372036854771712 [ 1370.200584][T20220] total_cache 4096 [ 1370.204313][T20220] total_rss 8192 [ 1370.207911][T20220] total_shmem 0 05:50:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x9d0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) [ 1370.211374][T20220] total_mapped_file 0 [ 1370.215446][T20220] total_dirty 0 [ 1370.218908][T20220] total_writeback 0 [ 1370.222716][T20220] total_workingset_refault_anon 36362 [ 1370.228149][T20220] total_workingset_refault_file 10296 [ 1370.233522][T20220] total_swap 421888 [ 1370.237364][T20220] total_swapcached 8192 [ 1370.241516][T20220] total_pgpgin 3473696 [ 1370.245623][T20220] total_pgpgout 3473693 [ 1370.249791][T20220] total_pgfault 3402686 [ 1370.254069][T20220] total_pgmajfault 17313 [ 1370.258355][T20220] total_inactive_anon 8192 [ 1370.262896][T20220] total_active_anon 0 [ 1370.267098][T20220] total_inactive_file 0 [ 1370.271265][T20220] total_active_file 4096 [ 1370.275592][T20220] total_unevictable 0 [ 1370.279581][T20220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20220,uid=0 [ 1370.295021][T20220] Memory cgroup out of memory: Killed process 20220 (syz-executor.0) total-vm:46560kB, anon-rss:504kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:50:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:35 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 05:50:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:35 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 05:50:35 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) r0 = geteuid() r1 = geteuid() setresuid(r0, r1, 0xee00) 05:50:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1371.070744][T20249] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1371.082137][T20249] CPU: 0 PID: 20249 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1371.092577][T20249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1371.102796][T20249] Call Trace: [ 1371.106084][T20249] [ 1371.109091][T20249] dump_stack_lvl+0xda/0x130 [ 1371.113709][T20249] dump_stack+0x15/0x20 [ 1371.117880][T20249] dump_header+0x82/0x2d0 [ 1371.122225][T20249] oom_kill_process+0x33a/0x4c0 [ 1371.127091][T20249] out_of_memory+0x9ca/0xbf0 [ 1371.131756][T20249] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1371.137894][T20249] mem_cgroup_out_of_memory+0x139/0x190 [ 1371.143576][T20249] try_charge_memcg+0x75c/0xd30 [ 1371.148463][T20249] ? __swap_duplicate+0x29b/0x2b0 [ 1371.153502][T20249] ? radix_tree_lookup+0xf9/0x150 [ 1371.158560][T20249] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1371.164649][T20249] __read_swap_cache_async+0x2f6/0x550 [ 1371.170126][T20249] swap_cluster_readahead+0x27c/0x4c0 [ 1371.175608][T20249] swapin_readahead+0xe9/0x7f0 [ 1371.180398][T20249] ? __filemap_get_folio+0x41a/0x5a0 [ 1371.185778][T20249] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1371.191513][T20249] ? swap_cache_get_folio+0x6e/0x200 [ 1371.196839][T20249] do_swap_page+0x4a0/0x1670 [ 1371.201498][T20249] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1371.206853][T20249] ? __rcu_read_lock+0x35/0x50 [ 1371.211648][T20249] ? pte_offset_map_nolock+0x124/0x1d0 [ 1371.217117][T20249] handle_mm_fault+0xa36/0x2dd0 [ 1371.221987][T20249] exc_page_fault+0x3ff/0x6c0 [ 1371.226687][T20249] asm_exc_page_fault+0x26/0x30 [ 1371.231558][T20249] RIP: 0033:0x7ff5cf2d6ae4 [ 1371.235983][T20249] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1371.255641][T20249] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1371.261715][T20249] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1371.269733][T20249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1371.277711][T20249] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1371.285702][T20249] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000014ebf6 [ 1371.293714][T20249] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000014e8b5 [ 1371.301761][T20249] [ 1371.304999][T20249] memory: usage 307200kB, limit 307200kB, failcnt 108041 [ 1371.312203][T20249] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 1371.320136][T20249] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1371.327509][T20249] Memory cgroup stats for /syz1: [ 1371.328367][T20249] cache 0 [ 1371.336348][T20249] rss 0 [ 1371.339114][T20249] shmem 0 [ 1371.342056][T20249] mapped_file 0 [ 1371.345539][T20249] dirty 0 [ 1371.348488][T20249] writeback 0 [ 1371.351816][T20249] workingset_refault_anon 32114 [ 1371.356741][T20249] workingset_refault_file 2533 [ 1371.361516][T20249] swap 720896 [ 1371.364905][T20249] swapcached 0 [ 1371.368277][T20249] pgpgin 444006 [ 1371.371735][T20249] pgpgout 444006 [ 1371.375302][T20249] pgfault 438096 [ 1371.378924][T20249] pgmajfault 13594 [ 1371.382660][T20249] inactive_anon 0 [ 1371.386317][T20249] active_anon 0 [ 1371.389773][T20249] inactive_file 0 [ 1371.393405][T20249] active_file 0 [ 1371.396949][T20249] unevictable 0 [ 1371.400426][T20249] hierarchical_memory_limit 314572800 [ 1371.405825][T20249] hierarchical_memsw_limit 9223372036854771712 [ 1371.412113][T20249] total_cache 0 [ 1371.415608][T20249] total_rss 0 [ 1371.418912][T20249] total_shmem 0 [ 1371.422376][T20249] total_mapped_file 0 [ 1371.426393][T20249] total_dirty 0 [ 1371.429908][T20249] total_writeback 0 [ 1371.433778][T20249] total_workingset_refault_anon 32114 [ 1371.439285][T20249] total_workingset_refault_file 2533 [ 1371.444578][T20249] total_swap 720896 [ 1371.448413][T20249] total_swapcached 0 [ 1371.452316][T20249] total_pgpgin 444006 [ 1371.456357][T20249] total_pgpgout 444006 [ 1371.460513][T20249] total_pgfault 438096 [ 1371.464593][T20249] total_pgmajfault 13594 [ 1371.468871][T20249] total_inactive_anon 0 [ 1371.473033][T20249] total_active_anon 0 [ 1371.477112][T20249] total_inactive_file 0 [ 1371.481271][T20249] total_active_file 0 [ 1371.485323][T20249] total_unevictable 0 [ 1371.489318][T20249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20249,uid=0 [ 1371.504652][T20249] Memory cgroup out of memory: Killed process 20249 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x0, 0x4, 0x0, 0x300}, 0x48) 05:50:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x9e0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:36 executing program 2: setresuid(0xee00, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0x0, 0xee01) 05:50:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:36 executing program 2: setresuid(0xee00, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0x0, 0xee01) 05:50:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:36 executing program 2: r0 = socket(0x23, 0x5, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 05:50:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf}, 0x48) [ 1372.484369][T20286] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1372.495758][T20286] CPU: 1 PID: 20286 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1372.506261][T20286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1372.516352][T20286] Call Trace: [ 1372.519649][T20286] [ 1372.522628][T20286] dump_stack_lvl+0xda/0x130 [ 1372.527305][T20286] dump_stack+0x15/0x20 [ 1372.531498][T20286] dump_header+0x82/0x2d0 [ 1372.535967][T20286] oom_kill_process+0x33a/0x4c0 [ 1372.540964][T20286] out_of_memory+0x9ca/0xbf0 [ 1372.545650][T20286] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1372.551885][T20286] mem_cgroup_out_of_memory+0x139/0x190 [ 1372.557474][T20286] try_charge_memcg+0x75c/0xd30 [ 1372.562375][T20286] ? __swap_duplicate+0x29b/0x2b0 [ 1372.567571][T20286] ? radix_tree_lookup+0xf9/0x150 [ 1372.572627][T20286] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1372.578757][T20286] __read_swap_cache_async+0x2f6/0x550 [ 1372.584421][T20286] swap_cluster_readahead+0x27c/0x4c0 [ 1372.589891][T20286] swapin_readahead+0xe9/0x7f0 [ 1372.594766][T20286] ? __filemap_get_folio+0x41a/0x5a0 [ 1372.600138][T20286] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1372.605873][T20286] ? swap_cache_get_folio+0x6e/0x200 [ 1372.611179][T20286] do_swap_page+0x4a0/0x1670 [ 1372.615850][T20286] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1372.621218][T20286] ? __rcu_read_lock+0x35/0x50 [ 1372.626001][T20286] ? pte_offset_map_nolock+0x124/0x1d0 [ 1372.631578][T20286] handle_mm_fault+0xa36/0x2dd0 [ 1372.636511][T20286] exc_page_fault+0x3ff/0x6c0 [ 1372.641297][T20286] asm_exc_page_fault+0x26/0x30 [ 1372.646186][T20286] RIP: 0033:0x7ff5cf2d6ae4 [ 1372.650620][T20286] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1372.670327][T20286] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1372.676489][T20286] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1372.684581][T20286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1372.692654][T20286] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1372.700706][T20286] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000014f1ad [ 1372.708882][T20286] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000014ee6c [ 1372.716907][T20286] [ 1372.720113][T20286] memory: usage 307200kB, limit 307200kB, failcnt 108353 [ 1372.727374][T20286] memory+swap: usage 307884kB, limit 9007199254740988kB, failcnt 0 [ 1372.735332][T20286] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1372.742637][T20286] Memory cgroup stats for /syz1: [ 1372.745073][T20286] cache 0 [ 1372.753045][T20286] rss 8192 [ 1372.756123][T20286] shmem 0 [ 1372.759060][T20286] mapped_file 0 [ 1372.762567][T20286] dirty 0 [ 1372.765540][T20286] writeback 12288 [ 1372.769187][T20286] workingset_refault_anon 32149 [ 1372.774071][T20286] workingset_refault_file 2533 [ 1372.778944][T20286] swap 700416 [ 1372.782301][T20286] swapcached 32768 [ 1372.786082][T20286] pgpgin 444064 [ 1372.789543][T20286] pgpgout 444056 [ 1372.793094][T20286] pgfault 438214 [ 1372.796703][T20286] pgmajfault 13605 [ 1372.800430][T20286] inactive_anon 0 [ 1372.804113][T20286] active_anon 0 [ 1372.807626][T20286] inactive_file 0 [ 1372.811265][T20286] active_file 0 [ 1372.814780][T20286] unevictable 0 [ 1372.818290][T20286] hierarchical_memory_limit 314572800 [ 1372.823666][T20286] hierarchical_memsw_limit 9223372036854771712 [ 1372.829946][T20286] total_cache 0 [ 1372.833422][T20286] total_rss 8192 [ 1372.837032][T20286] total_shmem 0 [ 1372.840496][T20286] total_mapped_file 0 [ 1372.844491][T20286] total_dirty 0 [ 1372.847997][T20286] total_writeback 12288 [ 1372.852167][T20286] total_workingset_refault_anon 32149 [ 1372.857718][T20286] total_workingset_refault_file 2533 [ 1372.863037][T20286] total_swap 700416 [ 1372.866875][T20286] total_swapcached 32768 [ 1372.871127][T20286] total_pgpgin 444064 [ 1372.875152][T20286] total_pgpgout 444056 [ 1372.879220][T20286] total_pgfault 438214 [ 1372.883288][T20286] total_pgmajfault 13605 [ 1372.887549][T20286] total_inactive_anon 0 [ 1372.891720][T20286] total_active_anon 0 [ 1372.895735][T20286] total_inactive_file 0 [ 1372.899896][T20286] total_active_file 0 [ 1372.903970][T20286] total_unevictable 0 [ 1372.907976][T20286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20286,uid=0 [ 1372.923395][T20286] Memory cgroup out of memory: Killed process 20286 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:37 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x29, 0x0, &(0x7f0000000080)) 05:50:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x9f0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:37 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xd, 0x0, &(0x7f0000000080)) 05:50:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:37 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:50:37 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:50:37 executing program 2: setresuid(0xee01, 0xffffffffffffffff, 0xee00) r0 = getuid() setresuid(0xee00, r0, 0xee01) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xc0541, 0x0) 05:50:37 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:50:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) [ 1374.061850][T20324] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1374.073274][T20324] CPU: 1 PID: 20324 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1374.083791][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1374.093931][T20324] Call Trace: [ 1374.097219][T20324] [ 1374.100159][T20324] dump_stack_lvl+0xda/0x130 [ 1374.104792][T20324] dump_stack+0x15/0x20 [ 1374.109009][T20324] dump_header+0x82/0x2d0 [ 1374.113373][T20324] oom_kill_process+0x33a/0x4c0 [ 1374.118301][T20324] out_of_memory+0x9ca/0xbf0 [ 1374.122963][T20324] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1374.129063][T20324] mem_cgroup_out_of_memory+0x139/0x190 [ 1374.134684][T20324] try_charge_memcg+0x75c/0xd30 [ 1374.139599][T20324] ? __swap_duplicate+0x29b/0x2b0 [ 1374.144694][T20324] ? radix_tree_lookup+0xf9/0x150 [ 1374.149766][T20324] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1374.155884][T20324] __read_swap_cache_async+0x2f6/0x550 [ 1374.161386][T20324] swap_cluster_readahead+0x27c/0x4c0 [ 1374.167065][T20324] swapin_readahead+0xe9/0x7f0 [ 1374.171972][T20324] ? __filemap_get_folio+0x41a/0x5a0 [ 1374.177294][T20324] ? swap_cache_get_folio+0x6e/0x200 [ 1374.182705][T20324] do_swap_page+0x4a0/0x1670 [ 1374.187307][T20324] ? asm_exc_page_fault+0x26/0x30 [ 1374.192346][T20324] ? __rcu_read_lock+0x35/0x50 [ 1374.197156][T20324] ? pte_offset_map_nolock+0x124/0x1d0 [ 1374.202679][T20324] handle_mm_fault+0xa36/0x2dd0 [ 1374.207551][T20324] exc_page_fault+0x3ff/0x6c0 [ 1374.212260][T20324] asm_exc_page_fault+0x26/0x30 [ 1374.217148][T20324] RIP: 0033:0x7ff5cf347ea3 [ 1374.221641][T20324] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 4e 40 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 1374.241257][T20324] RSP: 002b:00007ffe2f846278 EFLAGS: 00010293 [ 1374.247326][T20324] RAX: 00000000fffffffa RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1374.255297][T20324] RDX: 00007ffe2f846290 RSI: 0000000000000000 RDI: 0000000000000000 [ 1374.263265][T20324] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1374.271242][T20324] R10: 0000000000000000 R11: 000000000003f35e R12: 000000000014f794 [ 1374.279290][T20324] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000014f453 [ 1374.287268][T20324] [ 1374.290605][T20324] memory: usage 307200kB, limit 307200kB, failcnt 108579 [ 1374.298006][T20324] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 05:50:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) [ 1374.305981][T20324] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1374.313332][T20324] Memory cgroup stats for /syz1: [ 1374.315122][T20324] cache 0 [ 1374.323077][T20324] rss 0 [ 1374.325922][T20324] shmem 0 [ 1374.328866][T20324] mapped_file 0 [ 1374.332337][T20324] dirty 0 [ 1374.335342][T20324] writeback 0 [ 1374.338669][T20324] workingset_refault_anon 32201 [ 1374.343567][T20324] workingset_refault_file 2533 [ 1374.348489][T20324] swap 659456 [ 1374.351919][T20324] swapcached 8192 [ 1374.355602][T20324] pgpgin 444139 [ 1374.359097][T20324] pgpgout 444137 [ 1374.362648][T20324] pgfault 438348 [ 1374.366228][T20324] pgmajfault 13627 [ 1374.369998][T20324] inactive_anon 0 [ 1374.373621][T20324] active_anon 0 [ 1374.377132][T20324] inactive_file 0 [ 1374.380773][T20324] active_file 0 [ 1374.384232][T20324] unevictable 0 [ 1374.387804][T20324] hierarchical_memory_limit 314572800 [ 1374.393181][T20324] hierarchical_memsw_limit 9223372036854771712 [ 1374.399466][T20324] total_cache 0 [ 1374.402923][T20324] total_rss 0 [ 1374.406232][T20324] total_shmem 0 [ 1374.409691][T20324] total_mapped_file 0 [ 1374.413734][T20324] total_dirty 0 [ 1374.417236][T20324] total_writeback 0 [ 1374.421047][T20324] total_workingset_refault_anon 32201 [ 1374.426450][T20324] total_workingset_refault_file 2533 [ 1374.431741][T20324] total_swap 659456 [ 1374.435599][T20324] total_swapcached 8192 [ 1374.439756][T20324] total_pgpgin 444139 [ 1374.443729][T20324] total_pgpgout 444137 [ 1374.447894][T20324] total_pgfault 438348 [ 1374.451968][T20324] total_pgmajfault 13627 [ 1374.456229][T20324] total_inactive_anon 0 [ 1374.460404][T20324] total_active_anon 0 [ 1374.464394][T20324] total_inactive_file 0 [ 1374.468583][T20324] total_active_file 0 [ 1374.472568][T20324] total_unevictable 0 [ 1374.476629][T20324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20324,uid=0 [ 1374.492064][T20324] Memory cgroup out of memory: Killed process 20324 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa00d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:39 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) 05:50:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:39 executing program 2: r0 = socket$inet(0xa, 0x3, 0x3a) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) 05:50:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:39 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) [ 1375.487295][T20355] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1375.498663][T20355] CPU: 0 PID: 20355 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1375.509136][T20355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1375.519378][T20355] Call Trace: [ 1375.522672][T20355] [ 1375.525614][T20355] dump_stack_lvl+0xda/0x130 [ 1375.530277][T20355] dump_stack+0x15/0x20 [ 1375.534540][T20355] dump_header+0x82/0x2d0 [ 1375.538900][T20355] oom_kill_process+0x33a/0x4c0 [ 1375.543865][T20355] out_of_memory+0x9ca/0xbf0 [ 1375.548534][T20355] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1375.554669][T20355] mem_cgroup_out_of_memory+0x139/0x190 [ 1375.560298][T20355] try_charge_memcg+0x75c/0xd30 [ 1375.565302][T20355] ? __swap_duplicate+0x29b/0x2b0 [ 1375.570423][T20355] ? radix_tree_lookup+0xf9/0x150 [ 1375.575495][T20355] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1375.581628][T20355] __read_swap_cache_async+0x2f6/0x550 [ 1375.587101][T20355] swap_cluster_readahead+0x27c/0x4c0 [ 1375.592503][T20355] swapin_readahead+0xe9/0x7f0 [ 1375.597279][T20355] ? __filemap_get_folio+0x41a/0x5a0 [ 1375.602629][T20355] ? __perf_event_task_sched_in+0x769/0x790 [ 1375.608544][T20355] ? swap_cache_get_folio+0x6e/0x200 [ 1375.613985][T20355] do_swap_page+0x4a0/0x1670 [ 1375.618655][T20355] ? __rcu_read_lock+0x35/0x50 [ 1375.623432][T20355] ? pte_offset_map_nolock+0x124/0x1d0 [ 1375.628914][T20355] handle_mm_fault+0xa36/0x2dd0 [ 1375.633886][T20355] ? mt_find+0x1d9/0x310 [ 1375.638227][T20355] exc_page_fault+0x2f7/0x6c0 [ 1375.642947][T20355] asm_exc_page_fault+0x26/0x30 [ 1375.647803][T20355] RIP: 0010:__get_user_8+0x11/0x20 [ 1375.652942][T20355] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1375.672604][T20355] RSP: 0018:ffffc90000c2be38 EFLAGS: 00050202 [ 1375.678678][T20355] RAX: 0000555556bc2da8 RBX: ffffc90000c2be40 RCX: ffffffff814442c3 [ 1375.686656][T20355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888106d94ad0 [ 1375.694634][T20355] RBP: ffffc90000c2bef8 R08: 0001888106d94ad7 R09: 0000000000000000 [ 1375.702613][T20355] R10: 0001ffffffffffff R11: 0001888106d94790 R12: ffff888106d94100 [ 1375.710634][T20355] R13: ffff888106d94ad0 R14: ffffc90000c2bf58 R15: ffffc90000c2bfd8 [ 1375.718654][T20355] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1375.724622][T20355] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1375.730372][T20355] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1375.736299][T20355] exit_to_user_mode_loop+0xcc/0xe0 [ 1375.741592][T20355] exit_to_user_mode_prepare+0x6c/0xb0 [ 1375.747131][T20355] irqentry_exit_to_user_mode+0x9/0x20 [ 1375.752614][T20355] irqentry_exit+0x12/0x40 [ 1375.757049][T20355] asm_exc_page_fault+0x26/0x30 [ 1375.761908][T20355] RIP: 0033:0x7ff5cf2d6abd [ 1375.766430][T20355] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6e 16 00 00 0f 8e 12 ff ff ff e8 2c 08 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 [ 1375.786077][T20355] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010216 [ 1375.792148][T20355] RAX: 000000000014fcee RBX: 00007ff5cf43d980 RCX: 000000000014fb18 [ 1375.800130][T20355] RDX: 00000000000001d6 RSI: 00007ffe2f8462a0 RDI: 7fffffffffffffff [ 1375.808177][T20355] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1375.816175][T20355] R10: 00007ffe2f8f8080 R11: 000000000003f45c R12: 000000000014fd3b [ 1375.824151][T20355] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000014f9fa [ 1375.832241][T20355] [ 1375.835774][T20355] memory: usage 307200kB, limit 307200kB, failcnt 108780 [ 1375.842810][T20355] memory+swap: usage 307924kB, limit 9007199254740988kB, failcnt 0 [ 1375.850836][T20355] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1375.858239][T20355] Memory cgroup stats for /syz1: [ 1375.865639][T20355] cache 0 [ 1375.873636][T20355] rss 8192 [ 1375.876799][T20355] shmem 0 [ 1375.879740][T20355] mapped_file 0 [ 1375.883210][T20355] dirty 0 [ 1375.886175][T20355] writeback 4096 [ 1375.889726][T20355] workingset_refault_anon 32243 [ 1375.894613][T20355] workingset_refault_file 2533 [ 1375.899407][T20355] swap 741376 [ 1375.902699][T20355] swapcached 8192 [ 1375.906518][T20355] pgpgin 444204 [ 1375.910022][T20355] pgpgout 444202 [ 1375.913601][T20355] pgfault 438493 [ 1375.917225][T20355] pgmajfault 13649 [ 1375.921014][T20355] inactive_anon 0 [ 1375.924688][T20355] active_anon 0 [ 1375.928328][T20355] inactive_file 0 [ 1375.931959][T20355] active_file 0 [ 1375.935459][T20355] unevictable 0 [ 1375.938947][T20355] hierarchical_memory_limit 314572800 [ 1375.944311][T20355] hierarchical_memsw_limit 9223372036854771712 [ 1375.950528][T20355] total_cache 0 [ 1375.954002][T20355] total_rss 8192 [ 1375.957572][T20355] total_shmem 0 [ 1375.961097][T20355] total_mapped_file 0 [ 1375.965106][T20355] total_dirty 0 [ 1375.968652][T20355] total_writeback 4096 [ 1375.972784][T20355] total_workingset_refault_anon 32243 [ 1375.978452][T20355] total_workingset_refault_file 2533 [ 1375.983769][T20355] total_swap 741376 [ 1375.987612][T20355] total_swapcached 8192 [ 1375.991867][T20355] total_pgpgin 444204 [ 1375.995916][T20355] total_pgpgout 444202 [ 1376.000168][T20355] total_pgfault 438493 [ 1376.004229][T20355] total_pgmajfault 13649 [ 1376.008587][T20355] total_inactive_anon 0 [ 1376.012812][T20355] total_active_anon 0 [ 1376.016839][T20355] total_inactive_file 0 [ 1376.020996][T20355] total_active_file 0 [ 1376.025084][T20355] total_unevictable 0 [ 1376.029074][T20355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20355,uid=0 [ 1376.044383][T20355] Memory cgroup out of memory: Killed process 20355 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa10d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:40 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r0) 05:50:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:41 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x40086602, &(0x7f0000000040)=ANY=[@ANYBLOB="1800cc97"]) 05:50:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002b00), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002c40), r0) [ 1377.056241][T20386] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1377.067748][T20386] CPU: 1 PID: 20386 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1377.078310][T20386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1377.088393][T20386] Call Trace: [ 1377.091688][T20386] [ 1377.094719][T20386] dump_stack_lvl+0xda/0x130 [ 1377.099462][T20386] dump_stack+0x15/0x20 [ 1377.103641][T20386] dump_header+0x82/0x2d0 [ 1377.108037][T20386] oom_kill_process+0x33a/0x4c0 [ 1377.112977][T20386] out_of_memory+0x9ca/0xbf0 [ 1377.117599][T20386] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1377.123855][T20386] mem_cgroup_out_of_memory+0x139/0x190 [ 1377.129448][T20386] try_charge_memcg+0x75c/0xd30 [ 1377.134367][T20386] ? __swap_duplicate+0x29b/0x2b0 [ 1377.139455][T20386] ? radix_tree_lookup+0xf9/0x150 [ 1377.144520][T20386] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1377.150647][T20386] __read_swap_cache_async+0x2f6/0x550 [ 1377.156160][T20386] swap_cluster_readahead+0x27c/0x4c0 [ 1377.161630][T20386] swapin_readahead+0xe9/0x7f0 [ 1377.166461][T20386] ? __filemap_get_folio+0x41a/0x5a0 [ 1377.171773][T20386] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1377.177524][T20386] ? swap_cache_get_folio+0x6e/0x200 [ 1377.182934][T20386] do_swap_page+0x4a0/0x1670 [ 1377.187567][T20386] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1377.192912][T20386] ? __rcu_read_lock+0x35/0x50 [ 1377.197738][T20386] ? pte_offset_map_nolock+0x124/0x1d0 [ 1377.203230][T20386] handle_mm_fault+0xa36/0x2dd0 [ 1377.208180][T20386] exc_page_fault+0x3ff/0x6c0 [ 1377.213017][T20386] asm_exc_page_fault+0x26/0x30 [ 1377.217905][T20386] RIP: 0033:0x7ff5cf2d6ae4 [ 1377.222390][T20386] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1377.242084][T20386] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1377.248211][T20386] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1377.256225][T20386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1377.264226][T20386] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1377.272226][T20386] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015037a [ 1377.280219][T20386] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000150039 [ 1377.288274][T20386] [ 1377.291525][T20386] memory: usage 307200kB, limit 307200kB, failcnt 109085 [ 1377.298738][T20386] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 1377.306687][T20386] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1377.313998][T20386] Memory cgroup stats for /syz1: [ 1377.317391][T20386] cache 0 [ 1377.325481][T20386] rss 8192 [ 1377.328534][T20386] shmem 0 [ 1377.331523][T20386] mapped_file 0 [ 1377.335071][T20386] dirty 0 [ 1377.338027][T20386] writeback 8192 [ 1377.341585][T20386] workingset_refault_anon 32289 [ 1377.346503][T20386] workingset_refault_file 2533 [ 1377.351283][T20386] swap 704512 [ 1377.354587][T20386] swapcached 16384 [ 1377.358375][T20386] pgpgin 444273 [ 1377.361907][T20386] pgpgout 444269 [ 1377.365507][T20386] pgfault 438677 [ 1377.369057][T20386] pgmajfault 13666 [ 1377.372807][T20386] inactive_anon 0 [ 1377.376808][T20386] active_anon 0 [ 1377.380275][T20386] inactive_file 0 [ 1377.383968][T20386] active_file 0 [ 1377.387490][T20386] unevictable 0 [ 1377.391082][T20386] hierarchical_memory_limit 314572800 [ 1377.396691][T20386] hierarchical_memsw_limit 9223372036854771712 [ 1377.402911][T20386] total_cache 0 [ 1377.406439][T20386] total_rss 8192 [ 1377.409994][T20386] total_shmem 0 [ 1377.413450][T20386] total_mapped_file 0 [ 1377.417489][T20386] total_dirty 0 [ 1377.421058][T20386] total_writeback 8192 [ 1377.425170][T20386] total_workingset_refault_anon 32289 [ 1377.430544][T20386] total_workingset_refault_file 2533 [ 1377.435926][T20386] total_swap 704512 [ 1377.439847][T20386] total_swapcached 16384 [ 1377.444152][T20386] total_pgpgin 444273 [ 1377.448202][T20386] total_pgpgout 444269 [ 1377.452419][T20386] total_pgfault 438677 [ 1377.456547][T20386] total_pgmajfault 13666 [ 1377.460831][T20386] total_inactive_anon 0 [ 1377.465072][T20386] total_active_anon 0 [ 1377.469085][T20386] total_inactive_file 0 [ 1377.473230][T20386] total_active_file 0 [ 1377.477699][T20386] total_unevictable 0 [ 1377.481717][T20386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20386,uid=0 [ 1377.497171][T20386] Memory cgroup out of memory: Killed process 20386 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1377.700212][T20380] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1377.711652][T20380] CPU: 1 PID: 20380 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1377.722339][T20380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1377.732420][T20380] Call Trace: [ 1377.735714][T20380] [ 1377.738661][T20380] dump_stack_lvl+0xda/0x130 [ 1377.743291][T20380] dump_stack+0x15/0x20 [ 1377.747477][T20380] dump_header+0x82/0x2d0 [ 1377.751960][T20380] oom_kill_process+0x33a/0x4c0 [ 1377.756901][T20380] out_of_memory+0x9ca/0xbf0 [ 1377.761517][T20380] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1377.767628][T20380] mem_cgroup_out_of_memory+0x139/0x190 [ 1377.773202][T20380] try_charge_memcg+0x75c/0xd30 [ 1377.778084][T20380] ? __swap_duplicate+0x29b/0x2b0 [ 1377.783390][T20380] ? radix_tree_lookup+0xf9/0x150 [ 1377.788523][T20380] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1377.794671][T20380] __read_swap_cache_async+0x2f6/0x550 [ 1377.800247][T20380] swap_cluster_readahead+0x27c/0x4c0 [ 1377.805675][T20380] swapin_readahead+0xe9/0x7f0 [ 1377.810482][T20380] ? __filemap_get_folio+0x41a/0x5a0 [ 1377.815787][T20380] ? swap_cache_get_folio+0x6e/0x200 [ 1377.821148][T20380] do_swap_page+0x4a0/0x1670 [ 1377.826015][T20380] ? asm_exc_page_fault+0x26/0x30 [ 1377.831133][T20380] ? __rcu_read_lock+0x35/0x50 [ 1377.835940][T20380] ? pte_offset_map_nolock+0x124/0x1d0 [ 1377.841417][T20380] handle_mm_fault+0xa36/0x2dd0 [ 1377.846328][T20380] exc_page_fault+0x3ff/0x6c0 [ 1377.851064][T20380] asm_exc_page_fault+0x26/0x30 [ 1377.855922][T20380] RIP: 0033:0x7fa159e46228 [ 1377.860358][T20380] Code: 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 89 38 <48> 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 8d 3d [ 1377.880073][T20380] RSP: 002b:00007ffea5cad718 EFLAGS: 00010287 [ 1377.886497][T20380] RAX: 0000001b2e923a24 RBX: 00007fa159fbb0e8 RCX: 0000001b2e920000 [ 1377.894642][T20380] RDX: 0000001b2e923a28 RSI: 0000000080000000 RDI: 000000008198e49d [ 1377.902686][T20380] RBP: 000000008198e49d R08: 0000001b2ed20000 R09: 000000000000049d [ 1377.910692][T20380] R10: 000000008198e4a1 R11: 000000000003f594 R12: 0000000000000013 [ 1377.918680][T20380] R13: 0000000000000001 R14: 00007fa159faf000 R15: ffffffff8198ec1b [ 1377.926701][T20380] ? selinux_netlbl_socket_setsockopt+0x2b/0x2b0 [ 1377.933126][T20380] [ 1377.936229][T20380] memory: usage 307200kB, limit 307200kB, failcnt 183805 [ 1377.943265][T20380] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0 [ 1377.951409][T20380] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1377.958729][T20380] Memory cgroup stats for /syz0: [ 1377.963488][T20380] cache 4096 [ 1377.971671][T20380] rss 8192 [ 1377.974758][T20380] shmem 0 [ 1377.977716][T20380] mapped_file 0 [ 1377.981182][T20380] dirty 0 [ 1377.984119][T20380] writeback 0 [ 1377.987480][T20380] workingset_refault_anon 36645 [ 1377.992397][T20380] workingset_refault_file 10296 [ 1377.997408][T20380] swap 409600 [ 1378.000881][T20380] swapcached 8192 [ 1378.004518][T20380] pgpgin 3494585 [ 1378.008127][T20380] pgpgout 3494582 [ 1378.011781][T20380] pgfault 3424063 [ 1378.015461][T20380] pgmajfault 17460 [ 1378.019186][T20380] inactive_anon 8192 [ 1378.023129][T20380] active_anon 0 [ 1378.026619][T20380] inactive_file 4096 [ 1378.030529][T20380] active_file 0 [ 1378.033994][T20380] unevictable 0 [ 1378.037549][T20380] hierarchical_memory_limit 314572800 [ 1378.042978][T20380] hierarchical_memsw_limit 9223372036854771712 [ 1378.049178][T20380] total_cache 4096 [ 1378.052910][T20380] total_rss 8192 [ 1378.056553][T20380] total_shmem 0 [ 1378.060023][T20380] total_mapped_file 0 [ 1378.064085][T20380] total_dirty 0 [ 1378.067637][T20380] total_writeback 0 [ 1378.071511][T20380] total_workingset_refault_anon 36645 [ 1378.077009][T20380] total_workingset_refault_file 10296 [ 1378.082383][T20380] total_swap 409600 [ 1378.086258][T20380] total_swapcached 8192 [ 1378.090437][T20380] total_pgpgin 3494585 [ 1378.094629][T20380] total_pgpgout 3494582 05:50:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa20d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:42 executing program 2: sched_rr_get_interval(0x0, &(0x7f00000002c0)) 05:50:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1378.098886][T20380] total_pgfault 3424063 [ 1378.103125][T20380] total_pgmajfault 17460 [ 1378.107459][T20380] total_inactive_anon 8192 [ 1378.111890][T20380] total_active_anon 0 [ 1378.115968][T20380] total_inactive_file 4096 [ 1378.120481][T20380] total_active_file 0 [ 1378.124495][T20380] total_unevictable 0 [ 1378.128649][T20380] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20380,uid=0 [ 1378.144011][T20380] Memory cgroup out of memory: Killed process 20380 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8836kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:50:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0xffffffff, 0x4) 05:50:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140), 0xb8) [ 1378.995417][T20414] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1379.006842][T20414] CPU: 0 PID: 20414 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1379.017341][T20414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1379.027491][T20414] Call Trace: [ 1379.030788][T20414] [ 1379.033729][T20414] dump_stack_lvl+0xda/0x130 [ 1379.038359][T20414] dump_stack+0x15/0x20 [ 1379.042562][T20414] dump_header+0x82/0x2d0 [ 1379.047008][T20414] oom_kill_process+0x33a/0x4c0 [ 1379.051955][T20414] out_of_memory+0x9ca/0xbf0 [ 1379.056659][T20414] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1379.062768][T20414] mem_cgroup_out_of_memory+0x139/0x190 [ 1379.068355][T20414] try_charge_memcg+0x75c/0xd30 [ 1379.073246][T20414] ? __swap_duplicate+0x29b/0x2b0 [ 1379.078318][T20414] ? radix_tree_lookup+0xf9/0x150 [ 1379.083491][T20414] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1379.089604][T20414] __read_swap_cache_async+0x2f6/0x550 [ 1379.095140][T20414] swap_cluster_readahead+0x27c/0x4c0 [ 1379.100644][T20414] swapin_readahead+0xe9/0x7f0 [ 1379.105596][T20414] ? __filemap_get_folio+0x41a/0x5a0 [ 1379.110955][T20414] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1379.116701][T20414] ? swap_cache_get_folio+0x6e/0x200 [ 1379.122036][T20414] do_swap_page+0x4a0/0x1670 [ 1379.126710][T20414] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1379.132058][T20414] ? __rcu_read_lock+0x35/0x50 [ 1379.136948][T20414] ? pte_offset_map_nolock+0x124/0x1d0 [ 1379.142442][T20414] handle_mm_fault+0xa36/0x2dd0 [ 1379.147397][T20414] exc_page_fault+0x3ff/0x6c0 [ 1379.152119][T20414] asm_exc_page_fault+0x26/0x30 [ 1379.156995][T20414] RIP: 0033:0x7ff5cf2d6ae4 [ 1379.161468][T20414] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1379.181260][T20414] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1379.187384][T20414] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1379.195408][T20414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1379.203409][T20414] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1379.211405][T20414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000150adb [ 1379.219400][T20414] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015079a [ 1379.227437][T20414] [ 1379.230706][T20414] memory: usage 307200kB, limit 307200kB, failcnt 110215 [ 1379.237805][T20414] memory+swap: usage 307960kB, limit 9007199254740988kB, failcnt 0 [ 1379.245745][T20414] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1379.253143][T20414] Memory cgroup stats for /syz1: [ 1379.254079][T20414] cache 0 [ 1379.262033][T20414] rss 8192 [ 1379.265096][T20414] shmem 0 [ 1379.268220][T20414] mapped_file 0 [ 1379.271690][T20414] dirty 0 [ 1379.274640][T20414] writeback 8192 [ 1379.278286][T20414] workingset_refault_anon 32318 [ 1379.283169][T20414] workingset_refault_file 2533 [ 1379.287976][T20414] swap 778240 [ 1379.291323][T20414] swapcached 16384 [ 1379.295074][T20414] pgpgin 444325 [ 1379.298551][T20414] pgpgout 444321 [ 1379.302115][T20414] pgfault 438825 [ 1379.305840][T20414] pgmajfault 13680 [ 1379.309569][T20414] inactive_anon 0 [ 1379.313276][T20414] active_anon 0 [ 1379.316873][T20414] inactive_file 0 [ 1379.320544][T20414] active_file 0 [ 1379.324049][T20414] unevictable 0 [ 1379.327548][T20414] hierarchical_memory_limit 314572800 [ 1379.332993][T20414] hierarchical_memsw_limit 9223372036854771712 [ 1379.339188][T20414] total_cache 0 [ 1379.342687][T20414] total_rss 8192 [ 1379.346397][T20414] total_shmem 0 [ 1379.349890][T20414] total_mapped_file 0 [ 1379.353879][T20414] total_dirty 0 [ 1379.357427][T20414] total_writeback 8192 [ 1379.361502][T20414] total_workingset_refault_anon 32318 [ 1379.366932][T20414] total_workingset_refault_file 2533 [ 1379.372221][T20414] total_swap 778240 [ 1379.376090][T20414] total_swapcached 16384 [ 1379.380356][T20414] total_pgpgin 444325 [ 1379.384470][T20414] total_pgpgout 444321 [ 1379.388567][T20414] total_pgfault 438825 [ 1379.392727][T20414] total_pgmajfault 13680 [ 1379.397007][T20414] total_inactive_anon 0 [ 1379.401176][T20414] total_active_anon 0 [ 1379.405201][T20414] total_inactive_file 0 [ 1379.409366][T20414] total_active_file 0 [ 1379.413466][T20414] total_unevictable 0 [ 1379.417488][T20414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20414,uid=0 [ 1379.432939][T20414] Memory cgroup out of memory: Killed process 20414 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8864kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:44 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 05:50:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa30d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x264}, 0x48) 05:50:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) 05:50:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) [ 1380.484622][T20444] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1380.496052][T20444] CPU: 1 PID: 20444 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1380.506480][T20444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1380.516567][T20444] Call Trace: [ 1380.519848][T20444] [ 1380.522888][T20444] dump_stack_lvl+0xda/0x130 [ 1380.527561][T20444] dump_stack+0x15/0x20 [ 1380.531736][T20444] dump_header+0x82/0x2d0 [ 1380.536146][T20444] oom_kill_process+0x33a/0x4c0 [ 1380.541015][T20444] out_of_memory+0x9ca/0xbf0 [ 1380.545621][T20444] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1380.551719][T20444] mem_cgroup_out_of_memory+0x139/0x190 [ 1380.557299][T20444] try_charge_memcg+0x75c/0xd30 [ 1380.562299][T20444] ? __swap_duplicate+0x29b/0x2b0 [ 1380.567338][T20444] ? radix_tree_lookup+0xf9/0x150 [ 1380.572386][T20444] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1380.578525][T20444] __read_swap_cache_async+0x2f6/0x550 [ 1380.584008][T20444] swap_cluster_readahead+0x27c/0x4c0 [ 1380.589718][T20444] swapin_readahead+0xe9/0x7f0 [ 1380.594493][T20444] ? __filemap_get_folio+0x41a/0x5a0 [ 1380.599855][T20444] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1380.605549][T20444] ? swap_cache_get_folio+0x6e/0x200 [ 1380.610864][T20444] do_swap_page+0x4a0/0x1670 [ 1380.615523][T20444] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1380.620828][T20444] ? __rcu_read_lock+0x35/0x50 [ 1380.625703][T20444] ? pte_offset_map_nolock+0x124/0x1d0 [ 1380.631176][T20444] handle_mm_fault+0xa36/0x2dd0 [ 1380.636196][T20444] exc_page_fault+0x3ff/0x6c0 [ 1380.640900][T20444] asm_exc_page_fault+0x26/0x30 [ 1380.645762][T20444] RIP: 0033:0x7ff5cf347ea3 [ 1380.650237][T20444] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 4e 40 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 1380.669860][T20444] RSP: 002b:00007ffe2f846278 EFLAGS: 00010293 [ 1380.676021][T20444] RAX: 00000000fffffffa RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1380.684024][T20444] RDX: 00007ffe2f846290 RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.692070][T20444] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1380.700073][T20444] R10: 0000000000000000 R11: 000000000003f7ec R12: 00000000001510da [ 1380.708082][T20444] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000150d99 [ 1380.716157][T20444] [ 1380.719588][T20444] memory: usage 307200kB, limit 307200kB, failcnt 110410 [ 1380.726848][T20444] memory+swap: usage 308040kB, limit 9007199254740988kB, failcnt 0 [ 1380.735168][T20444] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1380.742568][T20444] Memory cgroup stats for /syz1: [ 1380.742852][T20444] cache 0 [ 1380.750810][T20444] rss 8192 [ 1380.753864][T20444] shmem 0 [ 1380.756848][T20444] mapped_file 0 [ 1380.760318][T20444] dirty 0 [ 1380.763265][T20444] writeback 0 [ 1380.766639][T20444] workingset_refault_anon 32356 [ 1380.771501][T20444] workingset_refault_file 2533 [ 1380.776318][T20444] swap 868352 [ 1380.779618][T20444] swapcached 8192 [ 1380.783264][T20444] pgpgin 444386 [ 1380.786787][T20444] pgpgout 444384 [ 1380.790347][T20444] pgfault 438960 [ 1380.793913][T20444] pgmajfault 13704 [ 1380.797765][T20444] inactive_anon 8192 [ 1380.801688][T20444] active_anon 0 [ 1380.805306][T20444] inactive_file 0 [ 1380.808988][T20444] active_file 0 [ 1380.812457][T20444] unevictable 0 [ 1380.815963][T20444] hierarchical_memory_limit 314572800 [ 1380.821369][T20444] hierarchical_memsw_limit 9223372036854771712 [ 1380.827585][T20444] total_cache 0 [ 1380.831095][T20444] total_rss 8192 [ 1380.834680][T20444] total_shmem 0 [ 1380.838227][T20444] total_mapped_file 0 [ 1380.842355][T20444] total_dirty 0 [ 1380.845875][T20444] total_writeback 0 [ 1380.849694][T20444] total_workingset_refault_anon 32356 [ 1380.855139][T20444] total_workingset_refault_file 2533 [ 1380.860486][T20444] total_swap 868352 [ 1380.864327][T20444] total_swapcached 8192 [ 1380.868563][T20444] total_pgpgin 444386 [ 1380.872671][T20444] total_pgpgout 444384 [ 1380.876879][T20444] total_pgfault 438960 [ 1380.881041][T20444] total_pgmajfault 13704 [ 1380.885404][T20444] total_inactive_anon 8192 [ 1380.889821][T20444] total_active_anon 0 [ 1380.893810][T20444] total_inactive_file 0 [ 1380.897999][T20444] total_active_file 0 [ 1380.902000][T20444] total_unevictable 0 [ 1380.906111][T20444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20444,uid=0 [ 1380.921509][T20444] Memory cgroup out of memory: Killed process 20444 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa40d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f00000008c0)) 05:50:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:45 executing program 2: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 05:50:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev, @empty}}}], 0x20}, 0x0) 05:50:46 executing program 2: r0 = socket(0x23, 0x5, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 05:50:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) [ 1382.021180][T20476] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1382.032686][T20476] CPU: 1 PID: 20476 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1382.043127][T20476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1382.053224][T20476] Call Trace: [ 1382.056514][T20476] [ 1382.059571][T20476] dump_stack_lvl+0xda/0x130 [ 1382.064192][T20476] dump_stack+0x15/0x20 [ 1382.068462][T20476] dump_header+0x82/0x2d0 [ 1382.072910][T20476] oom_kill_process+0x33a/0x4c0 [ 1382.077800][T20476] out_of_memory+0x9ca/0xbf0 [ 1382.082435][T20476] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1382.088560][T20476] mem_cgroup_out_of_memory+0x139/0x190 [ 1382.094202][T20476] try_charge_memcg+0x75c/0xd30 [ 1382.099090][T20476] ? __swap_duplicate+0x29b/0x2b0 [ 1382.104222][T20476] ? radix_tree_lookup+0xf9/0x150 [ 1382.109386][T20476] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1382.115544][T20476] __read_swap_cache_async+0x2f6/0x550 [ 1382.121306][T20476] swap_cluster_readahead+0x27c/0x4c0 [ 1382.126710][T20476] swapin_readahead+0xe9/0x7f0 [ 1382.131526][T20476] ? __filemap_get_folio+0x41a/0x5a0 [ 1382.136845][T20476] ? __perf_event_task_sched_in+0x769/0x790 [ 1382.142782][T20476] ? swap_cache_get_folio+0x6e/0x200 [ 1382.148130][T20476] do_swap_page+0x4a0/0x1670 [ 1382.152762][T20476] ? __rcu_read_lock+0x35/0x50 [ 1382.157611][T20476] ? pte_offset_map_nolock+0x124/0x1d0 [ 1382.163196][T20476] handle_mm_fault+0xa36/0x2dd0 [ 1382.168075][T20476] ? mt_find+0x1d9/0x310 [ 1382.172403][T20476] exc_page_fault+0x2f7/0x6c0 [ 1382.177123][T20476] asm_exc_page_fault+0x26/0x30 [ 1382.182079][T20476] RIP: 0010:__get_user_8+0x11/0x20 [ 1382.187225][T20476] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1382.206868][T20476] RSP: 0018:ffffc90000a97e38 EFLAGS: 00050202 [ 1382.212971][T20476] RAX: 0000555556bc2da8 RBX: ffffc90000a97e40 RCX: ffffffff814442c3 [ 1382.221022][T20476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888106d94ad0 [ 1382.229028][T20476] RBP: ffffc90000a97ef8 R08: 0001888106d94ad7 R09: 0000000000000000 [ 1382.237019][T20476] R10: 0001ffffffffffff R11: 0001888106d94790 R12: ffff888106d94100 [ 1382.245022][T20476] R13: ffff888106d94ad0 R14: ffffc90000a97f58 R15: ffffc90000a97fd8 [ 1382.253034][T20476] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1382.258983][T20476] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1382.264915][T20476] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1382.270846][T20476] exit_to_user_mode_loop+0xcc/0xe0 [ 1382.276111][T20476] exit_to_user_mode_prepare+0x6c/0xb0 [ 1382.281648][T20476] irqentry_exit_to_user_mode+0x9/0x20 [ 1382.287175][T20476] irqentry_exit+0x12/0x40 [ 1382.291603][T20476] asm_exc_page_fault+0x26/0x30 [ 1382.296534][T20476] RIP: 0033:0x7ff5cf2d6abd [ 1382.300973][T20476] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6e 16 00 00 0f 8e 12 ff ff ff e8 2c 08 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 [ 1382.320737][T20476] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010216 [ 1382.326803][T20476] RAX: 0000000000151675 RBX: 00007ff5cf43d980 RCX: 0000000000151670 [ 1382.334879][T20476] RDX: 0000000000000005 RSI: 00007ffe2f8462a0 RDI: 7fffffffffffffff [ 1382.342878][T20476] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1382.350912][T20476] R10: 00007ffe2f8f8080 R11: 000000000003f8f8 R12: 00000000001516a0 [ 1382.358885][T20476] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015135f [ 1382.366861][T20476] [ 1382.370193][T20476] memory: usage 307200kB, limit 307200kB, failcnt 110862 [ 1382.377342][T20476] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 1382.385314][T20476] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1382.392689][T20476] Memory cgroup stats for /syz1: [ 1382.392851][T20476] cache 0 [ 1382.400948][T20476] rss 8192 [ 1382.404070][T20476] shmem 0 [ 1382.407072][T20476] mapped_file 0 [ 1382.410559][T20476] dirty 0 [ 1382.413583][T20476] writeback 8192 [ 1382.417217][T20476] workingset_refault_anon 32435 [ 1382.422141][T20476] workingset_refault_file 2533 [ 1382.427220][T20476] swap 724992 [ 1382.430533][T20476] swapcached 12288 [ 1382.434252][T20476] pgpgin 444488 [ 1382.437834][T20476] pgpgout 444485 [ 1382.441492][T20476] pgfault 439120 [ 1382.445155][T20476] pgmajfault 13729 [ 1382.449011][T20476] inactive_anon 0 [ 1382.452691][T20476] active_anon 0 [ 1382.456205][T20476] inactive_file 0 [ 1382.459844][T20476] active_file 0 [ 1382.463309][T20476] unevictable 0 [ 1382.466825][T20476] hierarchical_memory_limit 314572800 [ 1382.472244][T20476] hierarchical_memsw_limit 9223372036854771712 [ 1382.478544][T20476] total_cache 0 [ 1382.482061][T20476] total_rss 8192 [ 1382.485687][T20476] total_shmem 0 [ 1382.489198][T20476] total_mapped_file 0 [ 1382.493192][T20476] total_dirty 0 [ 1382.496681][T20476] total_writeback 8192 [ 1382.500780][T20476] total_workingset_refault_anon 32435 [ 1382.506179][T20476] total_workingset_refault_file 2533 [ 1382.511510][T20476] total_swap 724992 [ 1382.515361][T20476] total_swapcached 12288 [ 1382.519605][T20476] total_pgpgin 444488 [ 1382.523599][T20476] total_pgpgout 444485 [ 1382.527750][T20476] total_pgfault 439120 [ 1382.531838][T20476] total_pgmajfault 13729 [ 1382.536105][T20476] total_inactive_anon 0 [ 1382.540262][T20476] total_active_anon 0 [ 1382.544311][T20476] total_inactive_file 0 [ 1382.548531][T20476] total_active_file 0 [ 1382.552521][T20476] total_unevictable 0 [ 1382.556556][T20476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20476,uid=0 [ 1382.571960][T20476] Memory cgroup out of memory: Killed process 20476 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1382.589335][T20467] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1382.600826][T20467] CPU: 0 PID: 20467 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1382.611312][T20467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1382.621463][T20467] Call Trace: [ 1382.624757][T20467] [ 1382.627700][T20467] dump_stack_lvl+0xda/0x130 [ 1382.632377][T20467] dump_stack+0x15/0x20 [ 1382.636699][T20467] dump_header+0x82/0x2d0 [ 1382.641143][T20467] oom_kill_process+0x33a/0x4c0 [ 1382.646026][T20467] out_of_memory+0x9ca/0xbf0 [ 1382.650773][T20467] mem_cgroup_out_of_memory+0x139/0x190 [ 1382.656470][T20467] try_charge_memcg+0x75c/0xd30 [ 1382.661467][T20467] ? __swap_duplicate+0x29b/0x2b0 [ 1382.666510][T20467] ? radix_tree_lookup+0xf9/0x150 [ 1382.671752][T20467] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1382.677835][T20467] __read_swap_cache_async+0x2f6/0x550 [ 1382.683344][T20467] swap_cluster_readahead+0x27c/0x4c0 [ 1382.688768][T20467] swapin_readahead+0xe9/0x7f0 [ 1382.693555][T20467] ? __filemap_get_folio+0x41a/0x5a0 [ 1382.698888][T20467] ? __perf_event_task_sched_in+0x769/0x790 [ 1382.704891][T20467] ? swap_cache_get_folio+0x6e/0x200 [ 1382.710419][T20467] do_swap_page+0x4a0/0x1670 [ 1382.715025][T20467] ? __rcu_read_lock+0x35/0x50 [ 1382.719938][T20467] ? pte_offset_map_nolock+0x124/0x1d0 [ 1382.725414][T20467] handle_mm_fault+0xa36/0x2dd0 [ 1382.730356][T20467] ? mt_find+0x1d9/0x310 [ 1382.734641][T20467] exc_page_fault+0x2f7/0x6c0 [ 1382.739420][T20467] asm_exc_page_fault+0x26/0x30 [ 1382.744325][T20467] RIP: 0010:__get_user_8+0x11/0x20 [ 1382.749509][T20467] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1382.769151][T20467] RSP: 0018:ffffc90000aafe38 EFLAGS: 00050202 [ 1382.775222][T20467] RAX: 0000555556440da8 RBX: ffffc90000aafe40 RCX: ffffffff814442c3 [ 1382.783201][T20467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888100259a10 [ 1382.791185][T20467] RBP: ffffc90000aafef8 R08: 0001888100259a17 R09: 0000000000000000 [ 1382.799230][T20467] R10: 0001ffffffffffff R11: 00018881002596d0 R12: ffff888100259040 [ 1382.807207][T20467] R13: ffff888100259a10 R14: ffffc90000aaff58 R15: ffffc90000aaffd8 [ 1382.815216][T20467] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1382.821143][T20467] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1382.826888][T20467] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1382.832846][T20467] exit_to_user_mode_loop+0xcc/0xe0 [ 1382.838051][T20467] exit_to_user_mode_prepare+0x6c/0xb0 [ 1382.843575][T20467] irqentry_exit_to_user_mode+0x9/0x20 [ 1382.849246][T20467] irqentry_exit+0x12/0x40 [ 1382.853864][T20467] asm_exc_page_fault+0x26/0x30 [ 1382.858725][T20467] RIP: 0033:0x7fa159e5475f [ 1382.863146][T20467] Code: 00 00 0f 84 53 02 00 00 41 80 bd 94 00 00 00 01 19 c0 83 e0 f8 83 c0 0a 09 d0 89 c3 bf 0d f0 ad 0b e8 a5 1a ff ff 41 8b 7d 24 9c 1a ff ff 41 8b 7d 28 e8 93 1a ff ff 89 ef e8 8c 1a ff ff 89 [ 1382.882975][T20467] RSP: 002b:00007ffea5cad780 EFLAGS: 00010287 [ 1382.889112][T20467] RAX: 0000001b2e9238e8 RBX: 0000000000000001 RCX: 0000001b2e920000 [ 1382.897135][T20467] RDX: 0000001b2e9238ec RSI: 0000000000000000 RDI: 0000000000000003 [ 1382.905113][T20467] RBP: 00000000000003e7 R08: 0000001b2ed20000 R09: 00007ffea5df90b0 [ 1382.913093][T20467] R10: 00007ffea5df9080 R11: 000000000003f8fe R12: 0000000000151684 [ 1382.921070][T20467] R13: 00007fa159fbb050 R14: 00007fa159a1f000 R15: 0000000000151343 [ 1382.929107][T20467] [ 1382.932193][T20467] memory: usage 307200kB, limit 307200kB, failcnt 184428 [ 1382.939237][T20467] memory+swap: usage 307604kB, limit 9007199254740988kB, failcnt 0 [ 1382.947150][T20467] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1382.954490][T20467] Memory cgroup stats for /syz0: [ 1382.961122][T20467] cache 4096 [ 1382.969419][T20467] rss 8192 [ 1382.972442][T20467] shmem 0 [ 1382.975422][T20467] mapped_file 0 [ 1382.978884][T20467] dirty 0 [ 1382.981824][T20467] writeback 0 [ 1382.985137][T20467] workingset_refault_anon 36798 [ 1382.990078][T20467] workingset_refault_file 10296 [ 1382.994966][T20467] swap 413696 [ 1382.998249][T20467] swapcached 8192 [ 1383.002083][T20467] pgpgin 3507102 [ 1383.005672][T20467] pgpgout 3507099 [ 1383.009468][T20467] pgfault 3436839 [ 1383.013122][T20467] pgmajfault 17535 [ 1383.016937][T20467] inactive_anon 8192 [ 1383.020888][T20467] active_anon 0 [ 1383.024361][T20467] inactive_file 4096 [ 1383.028306][T20467] active_file 0 [ 1383.031768][T20467] unevictable 0 [ 1383.035305][T20467] hierarchical_memory_limit 314572800 [ 1383.040788][T20467] hierarchical_memsw_limit 9223372036854771712 [ 1383.046978][T20467] total_cache 4096 [ 1383.050728][T20467] total_rss 8192 [ 1383.054283][T20467] total_shmem 0 [ 1383.057939][T20467] total_mapped_file 0 [ 1383.061978][T20467] total_dirty 0 [ 1383.065575][T20467] total_writeback 0 [ 1383.069393][T20467] total_workingset_refault_anon 36798 05:50:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa50d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:47 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 05:50:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1383.074810][T20467] total_workingset_refault_file 10296 [ 1383.080200][T20467] total_swap 413696 [ 1383.084020][T20467] total_swapcached 8192 [ 1383.088222][T20467] total_pgpgin 3507102 [ 1383.092359][T20467] total_pgpgout 3507099 [ 1383.096598][T20467] total_pgfault 3436839 [ 1383.100762][T20467] total_pgmajfault 17535 [ 1383.105067][T20467] total_inactive_anon 8192 [ 1383.109635][T20467] total_active_anon 0 [ 1383.113693][T20467] total_inactive_file 4096 [ 1383.118181][T20467] total_active_file 0 [ 1383.122180][T20467] total_unevictable 0 [ 1383.126198][T20467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20467,uid=0 [ 1383.141603][T20467] Memory cgroup out of memory: Killed process 20467 (syz-executor.0) total-vm:48740kB, anon-rss:504kB, file-rss:11012kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 05:50:48 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xb, 0x0, 0x0) 05:50:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 05:50:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:48 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 05:50:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x2}]}}}], 0x18}, 0x0) [ 1383.971728][T20496] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1383.983163][T20496] CPU: 0 PID: 20496 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1383.993616][T20496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1384.003757][T20496] Call Trace: [ 1384.007062][T20496] [ 1384.009998][T20496] dump_stack_lvl+0xda/0x130 [ 1384.014659][T20496] dump_stack+0x15/0x20 [ 1384.018851][T20496] dump_header+0x82/0x2d0 [ 1384.023219][T20496] oom_kill_process+0x33a/0x4c0 [ 1384.028113][T20496] out_of_memory+0x9ca/0xbf0 [ 1384.032746][T20496] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1384.038935][T20496] mem_cgroup_out_of_memory+0x139/0x190 [ 1384.044510][T20496] try_charge_memcg+0x75c/0xd30 [ 1384.049388][T20496] ? __swap_duplicate+0x29b/0x2b0 [ 1384.054578][T20496] ? radix_tree_lookup+0xf9/0x150 [ 1384.059711][T20496] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1384.065885][T20496] __read_swap_cache_async+0x2f6/0x550 [ 1384.071475][T20496] swap_cluster_readahead+0x27c/0x4c0 [ 1384.076865][T20496] swapin_readahead+0xe9/0x7f0 [ 1384.081647][T20496] ? __filemap_get_folio+0x41a/0x5a0 [ 1384.086997][T20496] ? _raw_spin_unlock+0x26/0x40 [ 1384.091921][T20496] ? swap_cache_get_folio+0x6e/0x200 [ 1384.097300][T20496] do_swap_page+0x4a0/0x1670 [ 1384.101983][T20496] ? __rcu_read_lock+0x35/0x50 [ 1384.106786][T20496] ? pte_offset_map_nolock+0x124/0x1d0 [ 1384.112341][T20496] handle_mm_fault+0xa36/0x2dd0 [ 1384.117310][T20496] exc_page_fault+0x3ff/0x6c0 [ 1384.122044][T20496] asm_exc_page_fault+0x26/0x30 [ 1384.127040][T20496] RIP: 0033:0x7ff5cf2d6ae4 [ 1384.131464][T20496] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1384.151148][T20496] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010283 [ 1384.157219][T20496] RAX: 0000000000000000 RBX: 00007ff5cf43c050 RCX: 0000000000000000 [ 1384.165202][T20496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1384.173259][T20496] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1384.181269][T20496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000151e36 [ 1384.189260][T20496] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000151af5 [ 1384.197282][T20496] [ 1384.200558][T20496] memory: usage 307200kB, limit 307200kB, failcnt 111006 [ 1384.207628][T20496] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 1384.215798][T20496] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1384.223117][T20496] Memory cgroup stats for /syz1: [ 1384.227042][T20496] cache 0 [ 1384.234974][T20496] rss 8192 [ 1384.238061][T20496] shmem 0 [ 1384.241024][T20496] mapped_file 0 [ 1384.244511][T20496] dirty 0 [ 1384.247571][T20496] writeback 8192 [ 1384.251215][T20496] workingset_refault_anon 32476 [ 1384.256123][T20496] workingset_refault_file 2533 [ 1384.260888][T20496] swap 704512 [ 1384.264169][T20496] swapcached 12288 [ 1384.267949][T20496] pgpgin 444552 [ 1384.271415][T20496] pgpgout 444549 [ 1384.275004][T20496] pgfault 439249 [ 1384.278638][T20496] pgmajfault 13746 [ 1384.282365][T20496] inactive_anon 0 [ 1384.286022][T20496] active_anon 0 [ 1384.289542][T20496] inactive_file 0 [ 1384.293174][T20496] active_file 0 [ 1384.296705][T20496] unevictable 0 [ 1384.300193][T20496] hierarchical_memory_limit 314572800 [ 1384.305616][T20496] hierarchical_memsw_limit 9223372036854771712 [ 1384.311782][T20496] total_cache 0 [ 1384.315292][T20496] total_rss 8192 [ 1384.318843][T20496] total_shmem 0 [ 1384.322303][T20496] total_mapped_file 0 [ 1384.326327][T20496] total_dirty 0 [ 1384.329795][T20496] total_writeback 8192 [ 1384.333861][T20496] total_workingset_refault_anon 32476 [ 1384.339307][T20496] total_workingset_refault_file 2533 [ 1384.344604][T20496] total_swap 704512 [ 1384.348438][T20496] total_swapcached 12288 [ 1384.352687][T20496] total_pgpgin 444552 [ 1384.356767][T20496] total_pgpgout 444549 [ 1384.360833][T20496] total_pgfault 439249 [ 1384.364960][T20496] total_pgmajfault 13746 [ 1384.369242][T20496] total_inactive_anon 0 [ 1384.373414][T20496] total_active_anon 0 [ 1384.377505][T20496] total_inactive_file 0 [ 1384.381746][T20496] total_active_file 0 [ 1384.385768][T20496] total_unevictable 0 [ 1384.389760][T20496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20496,uid=0 [ 1384.405062][T20496] Memory cgroup out of memory: Killed process 20496 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:49 executing program 2: bpf$MAP_CREATE(0x1c, &(0x7f0000000140)=@base={0x0, 0x0, 0x2c}, 0x48) 05:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa60d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) 05:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0}, 0x0) 05:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1385.549730][T20537] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1385.561276][T20537] CPU: 1 PID: 20537 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1385.571716][T20537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1385.581812][T20537] Call Trace: [ 1385.585107][T20537] [ 1385.588051][T20537] dump_stack_lvl+0xda/0x130 [ 1385.592692][T20537] dump_stack+0x15/0x20 [ 1385.596904][T20537] dump_header+0x82/0x2d0 [ 1385.601275][T20537] oom_kill_process+0x33a/0x4c0 [ 1385.606190][T20537] out_of_memory+0x9ca/0xbf0 [ 1385.610792][T20537] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1385.616946][T20537] mem_cgroup_out_of_memory+0x139/0x190 [ 1385.622562][T20537] try_charge_memcg+0x75c/0xd30 [ 1385.627493][T20537] ? __swap_duplicate+0x29b/0x2b0 [ 1385.632622][T20537] ? radix_tree_lookup+0xf9/0x150 [ 1385.637705][T20537] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1385.643850][T20537] __read_swap_cache_async+0x2f6/0x550 [ 1385.649339][T20537] swap_cluster_readahead+0x27c/0x4c0 [ 1385.654800][T20537] swapin_readahead+0xe9/0x7f0 [ 1385.659589][T20537] ? __filemap_get_folio+0x41a/0x5a0 [ 1385.664957][T20537] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1385.670618][T20537] ? swap_cache_get_folio+0x6e/0x200 [ 1385.675952][T20537] do_swap_page+0x4a0/0x1670 [ 1385.680670][T20537] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1385.685979][T20537] ? __rcu_read_lock+0x35/0x50 [ 1385.690792][T20537] ? pte_offset_map_nolock+0x124/0x1d0 [ 1385.696348][T20537] handle_mm_fault+0xa36/0x2dd0 [ 1385.701279][T20537] exc_page_fault+0x3ff/0x6c0 [ 1385.705988][T20537] asm_exc_page_fault+0x26/0x30 [ 1385.710882][T20537] RIP: 0033:0x7ff5cf2d6ae4 [ 1385.715357][T20537] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1385.735568][T20537] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1385.742024][T20537] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1385.750019][T20537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1385.758010][T20537] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1385.766074][T20537] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015244c [ 1385.774112][T20537] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015210b [ 1385.782168][T20537] [ 1385.785379][T20537] memory: usage 307200kB, limit 307200kB, failcnt 111333 [ 1385.792491][T20537] memory+swap: usage 307952kB, limit 9007199254740988kB, failcnt 0 05:50:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) [ 1385.800512][T20537] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1385.807861][T20537] Memory cgroup stats for /syz1: [ 1385.808861][T20537] cache 0 [ 1385.816847][T20537] rss 8192 [ 1385.819921][T20537] shmem 0 [ 1385.822925][T20537] mapped_file 0 [ 1385.826441][T20537] dirty 0 [ 1385.829396][T20537] writeback 8192 [ 1385.832951][T20537] workingset_refault_anon 32529 [ 1385.838182][T20537] workingset_refault_file 2533 [ 1385.843020][T20537] swap 708608 [ 1385.846400][T20537] swapcached 16384 [ 1385.850168][T20537] pgpgin 444628 [ 1385.853684][T20537] pgpgout 444624 [ 1385.857289][T20537] pgfault 439395 [ 1385.860910][T20537] pgmajfault 13769 [ 1385.864677][T20537] inactive_anon 0 [ 1385.868369][T20537] active_anon 0 [ 1385.871846][T20537] inactive_file 0 [ 1385.875554][T20537] active_file 0 [ 1385.879073][T20537] unevictable 0 [ 1385.882634][T20537] hierarchical_memory_limit 314572800 [ 1385.888198][T20537] hierarchical_memsw_limit 9223372036854771712 [ 1385.894388][T20537] total_cache 0 [ 1385.897974][T20537] total_rss 8192 [ 1385.901566][T20537] total_shmem 0 [ 1385.905084][T20537] total_mapped_file 0 [ 1385.909086][T20537] total_dirty 0 [ 1385.912590][T20537] total_writeback 8192 [ 1385.916758][T20537] total_workingset_refault_anon 32529 [ 1385.922155][T20537] total_workingset_refault_file 2533 [ 1385.927603][T20537] total_swap 708608 [ 1385.931444][T20537] total_swapcached 16384 [ 1385.935728][T20537] total_pgpgin 444628 [ 1385.939750][T20537] total_pgpgout 444624 [ 1385.943824][T20537] total_pgfault 439395 [ 1385.948038][T20537] total_pgmajfault 13769 [ 1385.952305][T20537] total_inactive_anon 0 [ 1385.956692][T20537] total_active_anon 0 [ 1385.960864][T20537] total_inactive_file 0 [ 1385.965076][T20537] total_active_file 0 [ 1385.969069][T20537] total_unevictable 0 [ 1385.973085][T20537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20537,uid=0 [ 1385.988541][T20537] Memory cgroup out of memory: Killed process 20537 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa70d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:50 executing program 2: r0 = io_uring_setup(0x2004, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080), 0x2) 05:50:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x40}, 0x0) 05:50:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:51 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0x401c5820, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32=r0]) 05:50:51 executing program 2: io_uring_setup(0x4a7d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}) 05:50:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x0, 0x4, 0x2}, 0x48) [ 1387.038834][T20571] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1387.050446][T20571] CPU: 0 PID: 20571 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1387.060907][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1387.070970][T20571] Call Trace: [ 1387.074253][T20571] [ 1387.077225][T20571] dump_stack_lvl+0xda/0x130 [ 1387.081883][T20571] dump_stack+0x15/0x20 [ 1387.086049][T20571] dump_header+0x82/0x2d0 [ 1387.090402][T20571] oom_kill_process+0x33a/0x4c0 [ 1387.095277][T20571] out_of_memory+0x9ca/0xbf0 [ 1387.099893][T20571] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1387.106071][T20571] mem_cgroup_out_of_memory+0x139/0x190 [ 1387.111672][T20571] try_charge_memcg+0x75c/0xd30 [ 1387.116564][T20571] ? __swap_duplicate+0x29b/0x2b0 [ 1387.121744][T20571] ? radix_tree_lookup+0xf9/0x150 [ 1387.126801][T20571] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1387.132901][T20571] __read_swap_cache_async+0x2f6/0x550 [ 1387.138400][T20571] swap_cluster_readahead+0x27c/0x4c0 [ 1387.143886][T20571] swapin_readahead+0xe9/0x7f0 [ 1387.148854][T20571] ? __filemap_get_folio+0x41a/0x5a0 [ 1387.154150][T20571] ? swap_cache_get_folio+0x6e/0x200 [ 1387.159548][T20571] do_swap_page+0x4a0/0x1670 [ 1387.164167][T20571] ? __rcu_read_lock+0x35/0x50 [ 1387.169025][T20571] ? pte_offset_map_nolock+0x124/0x1d0 [ 1387.174497][T20571] handle_mm_fault+0xa36/0x2dd0 [ 1387.179494][T20571] exc_page_fault+0x3ff/0x6c0 [ 1387.184252][T20571] asm_exc_page_fault+0x26/0x30 [ 1387.189130][T20571] RIP: 0033:0x7ff5cf2d6ae4 [ 1387.193552][T20571] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1387.213304][T20571] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1387.219428][T20571] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1387.227405][T20571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1387.235452][T20571] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1387.243427][T20571] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000152a76 [ 1387.251450][T20571] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000152735 [ 1387.259533][T20571] [ 1387.262730][T20571] memory: usage 307200kB, limit 307200kB, failcnt 111643 [ 1387.269843][T20571] memory+swap: usage 307872kB, limit 9007199254740988kB, failcnt 0 [ 1387.277788][T20571] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1387.285132][T20571] Memory cgroup stats for /syz1: [ 1387.285392][T20571] cache 0 [ 1387.293308][T20571] rss 8192 [ 1387.296370][T20571] shmem 0 [ 1387.299393][T20571] mapped_file 0 [ 1387.302852][T20571] dirty 0 [ 1387.305813][T20571] writeback 4096 [ 1387.309360][T20571] workingset_refault_anon 32579 [ 1387.314377][T20571] workingset_refault_file 2533 [ 1387.319303][T20571] swap 688128 [ 1387.322667][T20571] swapcached 12288 [ 1387.326472][T20571] pgpgin 444701 [ 1387.330021][T20571] pgpgout 444698 [ 1387.333624][T20571] pgfault 439534 [ 1387.337254][T20571] pgmajfault 13787 [ 1387.341003][T20571] inactive_anon 0 [ 1387.344674][T20571] active_anon 0 [ 1387.348163][T20571] inactive_file 0 [ 1387.351787][T20571] active_file 0 [ 1387.355276][T20571] unevictable 0 [ 1387.358833][T20571] hierarchical_memory_limit 314572800 [ 1387.364223][T20571] hierarchical_memsw_limit 9223372036854771712 [ 1387.370417][T20571] total_cache 0 [ 1387.373877][T20571] total_rss 8192 [ 1387.377490][T20571] total_shmem 0 [ 1387.380954][T20571] total_mapped_file 0 [ 1387.385012][T20571] total_dirty 0 [ 1387.388514][T20571] total_writeback 4096 [ 1387.392592][T20571] total_workingset_refault_anon 32579 [ 1387.398005][T20571] total_workingset_refault_file 2533 [ 1387.403354][T20571] total_swap 688128 [ 1387.407199][T20571] total_swapcached 12288 [ 1387.411590][T20571] total_pgpgin 444701 [ 1387.415623][T20571] total_pgpgout 444698 [ 1387.419730][T20571] total_pgfault 439534 [ 1387.423839][T20571] total_pgmajfault 13787 [ 1387.428140][T20571] total_inactive_anon 0 [ 1387.432305][T20571] total_active_anon 0 [ 1387.436332][T20571] total_inactive_file 0 [ 1387.440501][T20571] total_active_file 0 [ 1387.444474][T20571] total_unevictable 0 [ 1387.448576][T20571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20571,uid=0 [ 1387.464039][T20571] Memory cgroup out of memory: Killed process 20571 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:52 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000800)=""/188, 0xbc}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000008c0), 0x200000}], 0x3) 05:50:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa80d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) 05:50:52 executing program 2: io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000140), 0xb8) 05:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 05:50:52 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xf7a5fecbf99b42b1, 0xffffffffffffffff, 0x10000000) 05:50:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000000000000700000082020007"], 0x18}, 0x0) 05:50:52 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000000080)) [ 1388.560168][T20606] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1388.573829][T20606] CPU: 1 PID: 20606 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1388.584296][T20606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1388.594386][T20606] Call Trace: [ 1388.597686][T20606] [ 1388.600688][T20606] dump_stack_lvl+0xda/0x130 [ 1388.605372][T20606] dump_stack+0x15/0x20 [ 1388.609586][T20606] dump_header+0x82/0x2d0 [ 1388.613989][T20606] oom_kill_process+0x33a/0x4c0 [ 1388.618890][T20606] out_of_memory+0x9ca/0xbf0 [ 1388.623611][T20606] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1388.629912][T20606] mem_cgroup_out_of_memory+0x139/0x190 [ 1388.635492][T20606] try_charge_memcg+0x75c/0xd30 [ 1388.640420][T20606] obj_cgroup_charge_pages+0xab/0x130 [ 1388.645848][T20606] __memcg_kmem_charge_page+0x9c/0x170 [ 1388.651412][T20606] __alloc_pages+0x1bb/0x340 [ 1388.656034][T20606] alloc_pages_mpol+0xb1/0x1d0 [ 1388.660836][T20606] alloc_pages+0xe0/0x100 [ 1388.665201][T20606] __vmalloc_node_range+0x6d2/0xea0 [ 1388.670479][T20606] kvmalloc_node+0x121/0x160 [ 1388.675248][T20606] ? xt_alloc_table_info+0x3d/0x80 [ 1388.680398][T20606] xt_alloc_table_info+0x3d/0x80 [ 1388.685379][T20606] do_arpt_set_ctl+0x634/0x13b0 [ 1388.690424][T20606] ? __futex_wait+0x227/0x280 [ 1388.695146][T20606] ? __futex_wake_mark+0x70/0x70 [ 1388.700157][T20606] ? tcp_release_cb+0xfe/0x370 [ 1388.705066][T20606] ? _raw_spin_unlock_bh+0x36/0x40 [ 1388.710351][T20606] nf_setsockopt+0x18d/0x1b0 [ 1388.715005][T20606] ip_setsockopt+0xe6/0x100 [ 1388.719555][T20606] tcp_setsockopt+0x90/0xa0 [ 1388.724086][T20606] sock_common_setsockopt+0x61/0x70 [ 1388.729453][T20606] ? sock_common_recvmsg+0xe0/0xe0 [ 1388.734661][T20606] __sys_setsockopt+0x1d4/0x240 [ 1388.739579][T20606] __x64_sys_setsockopt+0x66/0x80 [ 1388.744697][T20606] do_syscall_64+0x44/0x110 [ 1388.749252][T20606] ? syscall_exit_to_user_mode+0x38/0x140 [ 1388.755093][T20606] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1388.761319][T20606] RIP: 0033:0x7ff5cf31cae9 [ 1388.765752][T20606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1388.785464][T20606] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1388.793940][T20606] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1388.801995][T20606] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1388.809991][T20606] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1388.818095][T20606] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.826112][T20606] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1388.834117][T20606] [ 1388.837508][T20606] memory: usage 307200kB, limit 307200kB, failcnt 112104 [ 1388.844556][T20606] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 1388.852641][T20606] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1388.860023][T20606] Memory cgroup stats for /syz1: [ 1388.860310][T20606] cache 0 [ 1388.868319][T20606] rss 0 [ 1388.871120][T20606] shmem 0 [ 1388.874196][T20606] mapped_file 0 [ 1388.877767][T20606] dirty 0 [ 1388.880712][T20606] writeback 0 [ 1388.883999][T20606] workingset_refault_anon 32627 [ 1388.888903][T20606] workingset_refault_file 2533 [ 1388.893740][T20606] swap 684032 [ 1388.897090][T20606] swapcached 0 [ 1388.900545][T20606] pgpgin 444772 [ 1388.904002][T20606] pgpgout 444772 [ 1388.907640][T20606] pgfault 439780 [ 1388.911327][T20606] pgmajfault 13799 [ 1388.915124][T20606] inactive_anon 0 [ 1388.918758][T20606] active_anon 0 [ 1388.922207][T20606] inactive_file 0 [ 1388.925974][T20606] active_file 0 [ 1388.929486][T20606] unevictable 0 [ 1388.932945][T20606] hierarchical_memory_limit 314572800 [ 1388.938370][T20606] hierarchical_memsw_limit 9223372036854771712 [ 1388.944656][T20606] total_cache 0 [ 1388.948152][T20606] total_rss 0 [ 1388.951486][T20606] total_shmem 0 [ 1388.955010][T20606] total_mapped_file 0 [ 1388.959006][T20606] total_dirty 0 [ 1388.962489][T20606] total_writeback 0 [ 1388.966433][T20606] total_workingset_refault_anon 32627 [ 1388.971834][T20606] total_workingset_refault_file 2533 [ 1388.977149][T20606] total_swap 684032 [ 1388.980966][T20606] total_swapcached 0 [ 1388.984890][T20606] total_pgpgin 444772 [ 1388.988879][T20606] total_pgpgout 444772 [ 1388.993019][T20606] total_pgfault 439780 [ 1388.997125][T20606] total_pgmajfault 13799 [ 1389.001370][T20606] total_inactive_anon 0 [ 1389.005567][T20606] total_active_anon 0 [ 1389.009557][T20606] total_inactive_file 0 [ 1389.013704][T20606] total_active_file 0 [ 1389.017752][T20606] total_unevictable 0 [ 1389.021755][T20606] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20605,uid=0 [ 1389.037083][T20606] Memory cgroup out of memory: Killed process 20605 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1389.087621][T20595] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1389.099052][T20595] CPU: 0 PID: 20595 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1389.109530][T20595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1389.119597][T20595] Call Trace: [ 1389.122883][T20595] [ 1389.125823][T20595] dump_stack_lvl+0xda/0x130 [ 1389.130470][T20595] dump_stack+0x15/0x20 [ 1389.134638][T20595] dump_header+0x82/0x2d0 [ 1389.138990][T20595] oom_kill_process+0x33a/0x4c0 [ 1389.144119][T20595] out_of_memory+0x9ca/0xbf0 [ 1389.148731][T20595] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1389.154852][T20595] mem_cgroup_out_of_memory+0x139/0x190 [ 1389.160418][T20595] try_charge_memcg+0x75c/0xd30 [ 1389.165320][T20595] ? __swap_duplicate+0x29b/0x2b0 [ 1389.170450][T20595] ? radix_tree_lookup+0xf9/0x150 [ 1389.175560][T20595] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1389.181652][T20595] __read_swap_cache_async+0x2f6/0x550 [ 1389.187164][T20595] swap_cluster_readahead+0x27c/0x4c0 [ 1389.192576][T20595] swapin_readahead+0xe9/0x7f0 [ 1389.197529][T20595] ? __filemap_get_folio+0x41a/0x5a0 [ 1389.202825][T20595] ? __perf_event_task_sched_in+0x769/0x790 [ 1389.208796][T20595] ? swap_cache_get_folio+0x6e/0x200 [ 1389.214372][T20595] do_swap_page+0x4a0/0x1670 [ 1389.219093][T20595] ? __rcu_read_lock+0x35/0x50 [ 1389.224042][T20595] ? pte_offset_map_nolock+0x124/0x1d0 [ 1389.229627][T20595] handle_mm_fault+0xa36/0x2dd0 [ 1389.234520][T20595] ? mt_find+0x1d9/0x310 [ 1389.238860][T20595] exc_page_fault+0x2f7/0x6c0 [ 1389.243727][T20595] asm_exc_page_fault+0x26/0x30 [ 1389.248789][T20595] RIP: 0010:__get_user_8+0x11/0x20 [ 1389.254024][T20595] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1389.273828][T20595] RSP: 0018:ffffc90000b0fe38 EFLAGS: 00050202 [ 1389.279935][T20595] RAX: 0000555556440da8 RBX: ffffc90000b0fe40 RCX: ffffffff814442c3 [ 1389.287917][T20595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88813a4309d0 [ 1389.296073][T20595] RBP: ffffc90000b0fef8 R08: 000188813a4309d7 R09: 0000000000000000 [ 1389.304155][T20595] R10: 0001ffffffffffff R11: 0001c90000b0fec0 R12: ffff88813a430000 [ 1389.312157][T20595] R13: ffff88813a4309d0 R14: ffffc90000b0ff58 R15: ffffc90000b0ffd8 [ 1389.320162][T20595] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1389.326153][T20595] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1389.331940][T20595] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1389.337922][T20595] exit_to_user_mode_loop+0xcc/0xe0 [ 1389.343309][T20595] exit_to_user_mode_prepare+0x6c/0xb0 [ 1389.348831][T20595] irqentry_exit_to_user_mode+0x9/0x20 [ 1389.354332][T20595] irqentry_exit+0x12/0x40 [ 1389.358848][T20595] asm_exc_page_fault+0x26/0x30 [ 1389.363707][T20595] RIP: 0033:0x7fa159e57807 [ 1389.368195][T20595] Code: 25 ff 0f 00 00 09 c5 80 3d be ce c8 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 1389.387842][T20595] RSP: 002b:00007ffea5cad720 EFLAGS: 00010206 [ 1389.394102][T20595] RAX: 000000008147511e RBX: 00007fa159fbb0e8 RCX: 000000000002ea72 [ 1389.402169][T20595] RDX: ffffffff8147579f RSI: 0000000080000000 RDI: 000000000000c364 [ 1389.410163][T20595] RBP: 000000008147511e R08: 0000001b2ed20000 R09: 000000000000111e [ 1389.418229][T20595] R10: 0000000081475122 R11: 000000000003fdb6 R12: 000000000002ea72 [ 1389.426282][T20595] R13: 0000000000000001 R14: 00007fa159faf000 R15: ffffffff8147579f [ 1389.434266][T20595] ? __remove_mapping+0x1f/0x460 [ 1389.439275][T20595] ? __remove_mapping+0x1f/0x460 [ 1389.444269][T20595] [ 1389.447456][T20595] memory: usage 307200kB, limit 307200kB, failcnt 185284 [ 1389.454504][T20595] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 1389.462611][T20595] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1389.469939][T20595] Memory cgroup stats for /syz0: [ 1389.473207][T20595] cache 4096 [ 1389.481555][T20595] rss 8192 [ 1389.484581][T20595] shmem 0 [ 1389.487630][T20595] mapped_file 0 [ 1389.491219][T20595] dirty 0 [ 1389.494180][T20595] writeback 8192 [ 1389.497745][T20595] workingset_refault_anon 36953 [ 1389.502605][T20595] workingset_refault_file 10296 [ 1389.507636][T20595] swap 405504 [ 1389.510952][T20595] swapcached 12288 [ 1389.514674][T20595] pgpgin 3523743 [ 1389.518238][T20595] pgpgout 3523739 [ 1389.521876][T20595] pgfault 3453897 [ 1389.525559][T20595] pgmajfault 17606 [ 1389.529282][T20595] inactive_anon 0 [ 1389.532962][T20595] active_anon 0 [ 1389.536481][T20595] inactive_file 4096 [ 1389.540379][T20595] active_file 0 [ 1389.543840][T20595] unevictable 0 [ 1389.547358][T20595] hierarchical_memory_limit 314572800 [ 1389.552855][T20595] hierarchical_memsw_limit 9223372036854771712 [ 1389.559148][T20595] total_cache 4096 [ 1389.562910][T20595] total_rss 8192 [ 1389.566489][T20595] total_shmem 0 [ 1389.569945][T20595] total_mapped_file 0 [ 1389.573927][T20595] total_dirty 0 [ 1389.577620][T20595] total_writeback 8192 [ 1389.581759][T20595] total_workingset_refault_anon 36953 [ 1389.587229][T20595] total_workingset_refault_file 10296 [ 1389.592616][T20595] total_swap 405504 [ 1389.596549][T20595] total_swapcached 12288 [ 1389.600794][T20595] total_pgpgin 3523743 [ 1389.604923][T20595] total_pgpgout 3523739 [ 1389.609115][T20595] total_pgfault 3453897 [ 1389.613413][T20595] total_pgmajfault 17606 [ 1389.617692][T20595] total_inactive_anon 0 [ 1389.621856][T20595] total_active_anon 0 [ 1389.625896][T20595] total_inactive_file 4096 [ 1389.630329][T20595] total_active_file 0 [ 1389.634346][T20595] total_unevictable 0 [ 1389.638438][T20595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20595,uid=0 [ 1389.653908][T20595] Memory cgroup out of memory: Killed process 20595 (syz-executor.0) total-vm:46560kB, anon-rss:504kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:50:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x22, 0x0, &(0x7f0000000080)) 05:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 05:50:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:50:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xa90d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x2900, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 05:50:54 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0}, 0x20) 05:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0), 0x8) 05:50:54 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000800)=""/188, 0xbc}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000008c0), 0x4000}], 0x3) 05:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0), 0x8) 05:50:54 executing program 2: setresuid(0xee00, 0x0, 0xee01) setresuid(0xffffffffffffffff, 0xee00, 0x0) 05:50:54 executing program 2: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x7b, 0x0, 0x0) 05:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1ff2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0), 0x8) [ 1390.679655][T20628] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1390.691101][T20628] CPU: 0 PID: 20628 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1390.701820][T20628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1390.711900][T20628] Call Trace: [ 1390.715253][T20628] [ 1390.718206][T20628] dump_stack_lvl+0xda/0x130 [ 1390.722836][T20628] dump_stack+0x15/0x20 05:50:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1390.727069][T20628] dump_header+0x82/0x2d0 [ 1390.731446][T20628] oom_kill_process+0x33a/0x4c0 [ 1390.736422][T20628] out_of_memory+0x9ca/0xbf0 [ 1390.741061][T20628] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1390.747209][T20628] mem_cgroup_out_of_memory+0x139/0x190 [ 1390.752887][T20628] try_charge_memcg+0x75c/0xd30 [ 1390.757859][T20628] ? __swap_duplicate+0x29b/0x2b0 [ 1390.763278][T20628] ? radix_tree_lookup+0xf9/0x150 [ 1390.768384][T20628] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1390.774496][T20628] __read_swap_cache_async+0x2f6/0x550 [ 1390.780014][T20628] swap_cluster_readahead+0x27c/0x4c0 [ 1390.785642][T20628] swapin_readahead+0xe9/0x7f0 [ 1390.790554][T20628] ? __filemap_get_folio+0x41a/0x5a0 [ 1390.795879][T20628] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1390.801562][T20628] ? swap_cache_get_folio+0x6e/0x200 [ 1390.806880][T20628] do_swap_page+0x4a0/0x1670 [ 1390.811538][T20628] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1390.816886][T20628] ? __rcu_read_lock+0x35/0x50 [ 1390.821747][T20628] ? pte_offset_map_nolock+0x124/0x1d0 [ 1390.827222][T20628] handle_mm_fault+0xa36/0x2dd0 [ 1390.832123][T20628] exc_page_fault+0x3ff/0x6c0 [ 1390.836938][T20628] asm_exc_page_fault+0x26/0x30 [ 1390.841857][T20628] RIP: 0033:0x7ff5cf2d6ae4 [ 1390.846280][T20628] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1390.865898][T20628] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1390.871971][T20628] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 05:50:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) [ 1390.880090][T20628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1390.888103][T20628] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1390.896120][T20628] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015385c [ 1390.904138][T20628] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015351b [ 1390.912120][T20628] [ 1390.915302][T20628] memory: usage 307200kB, limit 307200kB, failcnt 112335 [ 1390.922530][T20628] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 1390.930519][T20628] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1390.937947][T20628] Memory cgroup stats for /syz1: [ 1390.938153][T20628] cache 0 [ 1390.946076][T20628] rss 8192 [ 1390.949162][T20628] shmem 0 [ 1390.952127][T20628] mapped_file 0 [ 1390.955794][T20628] dirty 0 [ 1390.958792][T20628] writeback 4096 [ 1390.962361][T20628] workingset_refault_anon 32662 [ 1390.967247][T20628] workingset_refault_file 2533 [ 1390.972016][T20628] swap 704512 [ 1390.975442][T20628] swapcached 32768 [ 1390.979172][T20628] pgpgin 444830 [ 1390.982631][T20628] pgpgout 444822 [ 1390.986201][T20628] pgfault 439897 [ 1390.989830][T20628] pgmajfault 13812 [ 1390.993629][T20628] inactive_anon 0 [ 1390.997298][T20628] active_anon 0 [ 1391.000812][T20628] inactive_file 0 [ 1391.004455][T20628] active_file 0 [ 1391.007973][T20628] unevictable 0 [ 1391.011449][T20628] hierarchical_memory_limit 314572800 [ 1391.016924][T20628] hierarchical_memsw_limit 9223372036854771712 [ 1391.023106][T20628] total_cache 0 [ 1391.026642][T20628] total_rss 8192 [ 1391.030196][T20628] total_shmem 0 [ 1391.033815][T20628] total_mapped_file 0 [ 1391.037835][T20628] total_dirty 0 [ 1391.041306][T20628] total_writeback 4096 [ 1391.045410][T20628] total_workingset_refault_anon 32662 [ 1391.050792][T20628] total_workingset_refault_file 2533 [ 1391.056126][T20628] total_swap 704512 [ 1391.060061][T20628] total_swapcached 32768 [ 1391.064317][T20628] total_pgpgin 444830 [ 1391.068338][T20628] total_pgpgout 444822 [ 1391.072436][T20628] total_pgfault 439897 [ 1391.076539][T20628] total_pgmajfault 13812 [ 1391.080905][T20628] total_inactive_anon 0 [ 1391.085118][T20628] total_active_anon 0 [ 1391.089113][T20628] total_inactive_file 0 [ 1391.093281][T20628] total_active_file 0 [ 1391.097301][T20628] total_unevictable 0 [ 1391.101288][T20628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20628,uid=0 [ 1391.116828][T20628] Memory cgroup out of memory: Killed process 20628 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xaa0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:56 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 05:50:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17}, 0x48) 05:50:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:56 executing program 2: socket$inet(0xa, 0x3, 0x3a) 05:50:56 executing program 3: r0 = io_uring_setup(0x29d7, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 05:50:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x40243, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) 05:50:56 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000080), 0x0) 05:50:56 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) 05:50:56 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xb, 0x0, &(0x7f0000000080)) 05:50:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) [ 1392.194015][T20670] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1392.205606][T20670] CPU: 1 PID: 20670 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1392.216180][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1392.226266][T20670] Call Trace: [ 1392.229699][T20670] [ 1392.232659][T20670] dump_stack_lvl+0xda/0x130 [ 1392.237264][T20670] dump_stack+0x15/0x20 [ 1392.241482][T20670] dump_header+0x82/0x2d0 [ 1392.245822][T20670] oom_kill_process+0x33a/0x4c0 [ 1392.250749][T20670] out_of_memory+0x9ca/0xbf0 [ 1392.255394][T20670] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1392.261547][T20670] mem_cgroup_out_of_memory+0x139/0x190 [ 1392.267150][T20670] try_charge_memcg+0x75c/0xd30 [ 1392.272055][T20670] ? __swap_duplicate+0x29b/0x2b0 [ 1392.277154][T20670] ? radix_tree_lookup+0xf9/0x150 [ 1392.282199][T20670] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1392.288370][T20670] __read_swap_cache_async+0x2f6/0x550 [ 1392.293900][T20670] swap_cluster_readahead+0x27c/0x4c0 [ 1392.299313][T20670] swapin_readahead+0xe9/0x7f0 [ 1392.304089][T20670] ? __filemap_get_folio+0x41a/0x5a0 [ 1392.309381][T20670] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1392.315105][T20670] ? swap_cache_get_folio+0x6e/0x200 [ 1392.320422][T20670] do_swap_page+0x4a0/0x1670 [ 1392.325117][T20670] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1392.330415][T20670] ? __rcu_read_lock+0x35/0x50 [ 1392.335201][T20670] ? pte_offset_map_nolock+0x124/0x1d0 [ 1392.340708][T20670] handle_mm_fault+0xa36/0x2dd0 [ 1392.345627][T20670] exc_page_fault+0x3ff/0x6c0 [ 1392.350319][T20670] asm_exc_page_fault+0x26/0x30 [ 1392.355240][T20670] RIP: 0033:0x7ff5cf2d8834 [ 1392.359655][T20670] Code: 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 01 41 39 c2 75 da 89 e8 25 ff 1f 00 00 41 89 2c 86 89 ef 41 83 c4 01 c7 e9 fe ff 83 44 24 08 01 44 3b 63 04 0f 82 37 ff ff ff 44 8b [ 1392.379271][T20670] RSP: 002b:00007ffe2f846220 EFLAGS: 00010202 [ 1392.385341][T20670] RAX: 00000000815df11b RBX: 00007ff5cf43c018 RCX: 0000000000000003 [ 1392.393345][T20670] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 00000000815df11b [ 1392.401320][T20670] RBP: 00000000815df11b R08: 0000001b2d520000 R09: 000000000000111b [ 1392.409345][T20670] R10: 00000000815df11f R11: 000000000004005c R12: 0000000000000004 [ 1392.417411][T20670] R13: 0000000000000001 R14: 00007ff5cf430000 R15: ffffffff815dfb7c [ 1392.425393][T20670] ? __fget_files+0x1c/0x230 [ 1392.430022][T20670] [ 1392.433181][T20670] memory: usage 307200kB, limit 307200kB, failcnt 112411 [ 1392.440304][T20670] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 1392.448357][T20670] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1392.455782][T20670] Memory cgroup stats for /syz1: [ 1392.456151][T20670] cache 0 [ 1392.464222][T20670] rss 24576 [ 1392.467413][T20670] shmem 0 [ 1392.470417][T20670] mapped_file 0 [ 1392.473865][T20670] dirty 0 [ 1392.476916][T20670] writeback 16384 [ 1392.480553][T20670] workingset_refault_anon 32715 [ 1392.485648][T20670] workingset_refault_file 2533 [ 1392.490430][T20670] swap 704512 [ 1392.493718][T20670] swapcached 32768 [ 1392.497530][T20670] pgpgin 444906 [ 1392.501085][T20670] pgpgout 444898 [ 1392.504643][T20670] pgfault 440032 [ 1392.508233][T20670] pgmajfault 13842 [ 1392.511988][T20670] inactive_anon 0 [ 1392.515688][T20670] active_anon 0 [ 1392.519220][T20670] inactive_file 0 [ 1392.522846][T20670] active_file 0 [ 1392.526348][T20670] unevictable 0 [ 1392.529838][T20670] hierarchical_memory_limit 314572800 [ 1392.535243][T20670] hierarchical_memsw_limit 9223372036854771712 [ 1392.541481][T20670] total_cache 0 [ 1392.545023][T20670] total_rss 24576 [ 1392.548739][T20670] total_shmem 0 [ 1392.552227][T20670] total_mapped_file 0 [ 1392.556324][T20670] total_dirty 0 [ 1392.559862][T20670] total_writeback 16384 [ 1392.564028][T20670] total_workingset_refault_anon 32715 [ 1392.569534][T20670] total_workingset_refault_file 2533 [ 1392.574873][T20670] total_swap 704512 [ 1392.578681][T20670] total_swapcached 32768 [ 1392.582946][T20670] total_pgpgin 444906 [ 1392.586985][T20670] total_pgpgout 444898 [ 1392.591070][T20670] total_pgfault 440032 [ 1392.595167][T20670] total_pgmajfault 13842 [ 1392.599412][T20670] total_inactive_anon 0 [ 1392.603656][T20670] total_active_anon 0 [ 1392.607701][T20670] total_inactive_file 0 [ 1392.611864][T20670] total_active_file 0 [ 1392.615944][T20670] total_unevictable 0 [ 1392.619965][T20670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20670,uid=0 [ 1392.635277][T20670] Memory cgroup out of memory: Killed process 20670 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xab0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:50:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) 05:50:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @loopback}}) 05:50:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:57 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x80000000}, 0x8) 05:50:57 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x88, 0x8, 0x0, 0x0) 05:50:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 05:50:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 05:50:57 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x40086602, &(0x7f0000000040)=ANY=[@ANYRESOCT]) 05:50:57 executing program 3: r0 = socket(0x1, 0x2, 0x0) recvfrom$phonet(r0, 0x0, 0x0, 0x10022, 0x0, 0x0) [ 1393.744993][T20706] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1393.758563][T20706] CPU: 0 PID: 20706 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1393.769033][T20706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1393.779128][T20706] Call Trace: [ 1393.782413][T20706] [ 1393.785364][T20706] dump_stack_lvl+0xda/0x130 [ 1393.789978][T20706] dump_stack+0x15/0x20 [ 1393.794270][T20706] dump_header+0x82/0x2d0 [ 1393.798677][T20706] oom_kill_process+0x33a/0x4c0 [ 1393.803582][T20706] out_of_memory+0x9ca/0xbf0 [ 1393.808203][T20706] mem_cgroup_out_of_memory+0x139/0x190 [ 1393.813768][T20706] try_charge_memcg+0x75c/0xd30 [ 1393.818640][T20706] obj_cgroup_charge_pages+0xab/0x130 [ 1393.824027][T20706] __memcg_kmem_charge_page+0x9c/0x170 [ 1393.829551][T20706] __alloc_pages+0x1bb/0x340 [ 1393.834201][T20706] alloc_pages_mpol+0xb1/0x1d0 [ 1393.838981][T20706] alloc_pages+0xe0/0x100 [ 1393.843468][T20706] __vmalloc_node_range+0x6d2/0xea0 [ 1393.848719][T20706] kvmalloc_node+0x121/0x160 [ 1393.853322][T20706] ? xt_alloc_table_info+0x3d/0x80 [ 1393.858588][T20706] xt_alloc_table_info+0x3d/0x80 [ 1393.863594][T20706] do_arpt_set_ctl+0x634/0x13b0 [ 1393.868508][T20706] ? __futex_wait+0x227/0x280 [ 1393.873285][T20706] ? __futex_wake_mark+0x70/0x70 [ 1393.878280][T20706] ? tcp_release_cb+0xfe/0x370 [ 1393.883066][T20706] ? _raw_spin_unlock_bh+0x36/0x40 [ 1393.888270][T20706] nf_setsockopt+0x18d/0x1b0 [ 1393.892883][T20706] ip_setsockopt+0xe6/0x100 [ 1393.897546][T20706] tcp_setsockopt+0x90/0xa0 [ 1393.902142][T20706] sock_common_setsockopt+0x61/0x70 [ 1393.907494][T20706] ? sock_common_recvmsg+0xe0/0xe0 [ 1393.912719][T20706] __sys_setsockopt+0x1d4/0x240 [ 1393.917592][T20706] __x64_sys_setsockopt+0x66/0x80 [ 1393.922681][T20706] do_syscall_64+0x44/0x110 [ 1393.927271][T20706] ? syscall_exit_to_user_mode+0x38/0x140 [ 1393.933093][T20706] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1393.939011][T20706] RIP: 0033:0x7ff5cf31cae9 [ 1393.943471][T20706] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1393.963605][T20706] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1393.972100][T20706] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1393.980124][T20706] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1393.988234][T20706] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1393.996267][T20706] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.004351][T20706] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1394.012335][T20706] [ 1394.015480][T20706] memory: usage 307200kB, limit 307200kB, failcnt 112573 [ 1394.022579][T20706] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 [ 1394.030630][T20706] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1394.037963][T20706] Memory cgroup stats for /syz1: [ 1394.038230][T20706] cache 0 [ 1394.046188][T20706] rss 4096 [ 1394.049226][T20706] shmem 0 [ 1394.052173][T20706] mapped_file 0 [ 1394.055663][T20706] dirty 0 [ 1394.058679][T20706] writeback 0 [ 1394.061978][T20706] workingset_refault_anon 32776 [ 1394.066878][T20706] workingset_refault_file 2533 [ 1394.071710][T20706] swap 659456 [ 1394.075046][T20706] swapcached 8192 [ 1394.078697][T20706] pgpgin 444991 [ 1394.082262][T20706] pgpgout 444989 [ 1394.085834][T20706] pgfault 440176 [ 1394.089389][T20706] pgmajfault 13865 [ 1394.093100][T20706] inactive_anon 4096 [ 1394.097070][T20706] active_anon 0 [ 1394.100533][T20706] inactive_file 0 [ 1394.104153][T20706] active_file 0 [ 1394.107632][T20706] unevictable 0 [ 1394.111093][T20706] hierarchical_memory_limit 314572800 [ 1394.116513][T20706] hierarchical_memsw_limit 9223372036854771712 [ 1394.122720][T20706] total_cache 0 [ 1394.126219][T20706] total_rss 4096 [ 1394.129778][T20706] total_shmem 0 [ 1394.133237][T20706] total_mapped_file 0 [ 1394.137275][T20706] total_dirty 0 [ 1394.140797][T20706] total_writeback 0 [ 1394.144682][T20706] total_workingset_refault_anon 32776 [ 1394.150125][T20706] total_workingset_refault_file 2533 [ 1394.155653][T20706] total_swap 659456 [ 1394.159499][T20706] total_swapcached 8192 [ 1394.163742][T20706] total_pgpgin 444991 [ 1394.167816][T20706] total_pgpgout 444989 [ 1394.171942][T20706] total_pgfault 440176 [ 1394.176019][T20706] total_pgmajfault 13865 [ 1394.180281][T20706] total_inactive_anon 4096 [ 1394.184713][T20706] total_active_anon 0 [ 1394.188749][T20706] total_inactive_file 0 [ 1394.192889][T20706] total_active_file 0 [ 1394.196908][T20706] total_unevictable 0 [ 1394.200889][T20706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20705,uid=0 [ 1394.216171][T20706] Memory cgroup out of memory: Killed process 20705 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:50:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:50:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xac0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:50:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:50:59 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000040)={{0x310, 0x1, 0x18}, './file0\x00'}) 05:50:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xff0f, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:59 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)=0x11) 05:50:59 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x12, 0x0, &(0x7f0000000080)) 05:50:59 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x21, 0x0, &(0x7f0000000080)) 05:50:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1c}, 0x48) 05:50:59 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x0, 0x1}, 0x20) 05:50:59 executing program 2: setresuid(0xee01, 0xffffffffffffffff, 0xee00) setresuid(0x0, 0xee00, 0x0) 05:50:59 executing program 3: getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:50:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x17) 05:51:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xad0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 05:51:00 executing program 2: syslog(0x3, &(0x7f0000000000)=""/4096, 0x1000) 05:51:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:51:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:00 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x88101) 05:51:00 executing program 3: setresuid(0xee01, 0xee01, 0xee01) 05:51:00 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) 05:51:00 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x1a}, './file0\x00'}) 05:51:00 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f6"]) 05:51:00 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYRES32]) [ 1395.836289][T20785] autofs4:pid:20785:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 1396.490191][T20771] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1396.501656][T20771] CPU: 1 PID: 20771 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1396.512157][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1396.522220][T20771] Call Trace: [ 1396.525520][T20771] [ 1396.528463][T20771] dump_stack_lvl+0xda/0x130 [ 1396.533192][T20771] dump_stack+0x15/0x20 [ 1396.537370][T20771] dump_header+0x82/0x2d0 [ 1396.541754][T20771] oom_kill_process+0x33a/0x4c0 [ 1396.546856][T20771] out_of_memory+0x9ca/0xbf0 [ 1396.551483][T20771] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1396.557606][T20771] mem_cgroup_out_of_memory+0x139/0x190 [ 1396.563166][T20771] try_charge_memcg+0x75c/0xd30 [ 1396.568028][T20771] ? __swap_duplicate+0x29b/0x2b0 [ 1396.573058][T20771] ? radix_tree_lookup+0xf9/0x150 [ 1396.578154][T20771] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1396.584237][T20771] __read_swap_cache_async+0x2f6/0x550 [ 1396.589709][T20771] swap_cluster_readahead+0x27c/0x4c0 [ 1396.595097][T20771] swapin_readahead+0xe9/0x7f0 [ 1396.599889][T20771] ? __filemap_get_folio+0x41a/0x5a0 [ 1396.605193][T20771] ? __perf_event_task_sched_in+0x769/0x790 [ 1396.611125][T20771] ? swap_cache_get_folio+0x6e/0x200 [ 1396.616465][T20771] do_swap_page+0x4a0/0x1670 [ 1396.621059][T20771] ? __rcu_read_lock+0x35/0x50 [ 1396.625825][T20771] ? pte_offset_map_nolock+0x124/0x1d0 [ 1396.631391][T20771] handle_mm_fault+0xa36/0x2dd0 [ 1396.636330][T20771] ? mt_find+0x1d9/0x310 [ 1396.640642][T20771] exc_page_fault+0x2f7/0x6c0 [ 1396.645330][T20771] asm_exc_page_fault+0x26/0x30 [ 1396.650246][T20771] RIP: 0010:__get_user_8+0x11/0x20 [ 1396.655490][T20771] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1396.675117][T20771] RSP: 0018:ffffc90000b87e38 EFLAGS: 00050202 [ 1396.681181][T20771] RAX: 0000555556bc2da8 RBX: ffffc90000b87e40 RCX: ffffffff814442c3 [ 1396.689153][T20771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888107784ad0 [ 1396.697120][T20771] RBP: ffffc90000b87ef8 R08: 0001888107784ad7 R09: 0000000000000000 [ 1396.705137][T20771] R10: 0001ffffffffffff R11: 0001888107784790 R12: ffff888107784100 [ 1396.713192][T20771] R13: ffff888107784ad0 R14: ffffc90000b87f58 R15: ffffc90000b87fd8 [ 1396.721163][T20771] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1396.727169][T20771] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1396.732928][T20771] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1396.738895][T20771] exit_to_user_mode_loop+0xcc/0xe0 [ 1396.744154][T20771] exit_to_user_mode_prepare+0x6c/0xb0 [ 1396.749699][T20771] irqentry_exit_to_user_mode+0x9/0x20 [ 1396.755195][T20771] irqentry_exit+0x12/0x40 [ 1396.759648][T20771] asm_exc_page_fault+0x26/0x30 [ 1396.764606][T20771] RIP: 0033:0x7ff5cf2d6c6b [ 1396.769089][T20771] Code: 00 31 f6 e8 b7 ea ff ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 <80> 3d 9e e4 13 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 [ 1396.788802][T20771] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010202 [ 1396.794884][T20771] RAX: 0000000000000001 RBX: 00007ff5cf43bf80 RCX: 0000000000154d20 [ 1396.802855][T20771] RDX: 00000000000001d8 RSI: 00007ffe2f8462a0 RDI: 00007ff5cf43bf80 [ 1396.810829][T20771] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1396.818797][T20771] R10: 00007ffe2f8f8080 R11: 0000000000040392 R12: 0000000000154ef7 [ 1396.826839][T20771] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000154bb6 [ 1396.834826][T20771] [ 1396.838004][T20771] memory: usage 307200kB, limit 307200kB, failcnt 112821 [ 1396.845143][T20771] memory+swap: usage 307840kB, limit 9007199254740988kB, failcnt 0 [ 1396.853037][T20771] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1396.860408][T20771] Memory cgroup stats for /syz1: [ 1396.860822][T20771] cache 0 [ 1396.868758][T20771] rss 8192 [ 1396.871836][T20771] shmem 0 [ 1396.874925][T20771] mapped_file 0 [ 1396.878401][T20771] dirty 0 [ 1396.881383][T20771] writeback 8192 [ 1396.884979][T20771] workingset_refault_anon 32856 [ 1396.889914][T20771] workingset_refault_file 2533 [ 1396.894665][T20771] swap 655360 [ 1396.898005][T20771] swapcached 12288 [ 1396.901727][T20771] pgpgin 445117 [ 1396.905250][T20771] pgpgout 445114 [ 1396.908802][T20771] pgfault 440442 [ 1396.912379][T20771] pgmajfault 13899 [ 1396.916175][T20771] inactive_anon 0 [ 1396.919803][T20771] active_anon 0 [ 1396.923274][T20771] inactive_file 0 [ 1396.926917][T20771] active_file 0 [ 1396.930380][T20771] unevictable 0 [ 1396.933830][T20771] hierarchical_memory_limit 314572800 [ 1396.939217][T20771] hierarchical_memsw_limit 9223372036854771712 [ 1396.945401][T20771] total_cache 0 [ 1396.948862][T20771] total_rss 8192 [ 1396.952413][T20771] total_shmem 0 [ 1396.955901][T20771] total_mapped_file 0 [ 1396.959950][T20771] total_dirty 0 [ 1396.963459][T20771] total_writeback 8192 [ 1396.967600][T20771] total_workingset_refault_anon 32856 [ 1396.973023][T20771] total_workingset_refault_file 2533 [ 1396.978328][T20771] total_swap 655360 [ 1396.982138][T20771] total_swapcached 12288 [ 1396.986473][T20771] total_pgpgin 445117 [ 1396.990498][T20771] total_pgpgout 445114 [ 1396.994562][T20771] total_pgfault 440442 [ 1396.998670][T20771] total_pgmajfault 13899 [ 1397.002909][T20771] total_inactive_anon 0 [ 1397.007088][T20771] total_active_anon 0 [ 1397.011150][T20771] total_inactive_file 0 [ 1397.015318][T20771] total_active_file 0 [ 1397.019301][T20771] total_unevictable 0 [ 1397.023281][T20771] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20771,uid=0 [ 1397.038698][T20771] Memory cgroup out of memory: Killed process 20771 (syz-executor.1) total-vm:46296kB, anon-rss:300kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xae0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:01 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 05:51:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x4, 0x1, 0x18}, './file0\x00'}) 05:51:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:51:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1397.288112][T20798] autofs4:pid:20798:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4.1), cmd(0xc0189375) [ 1397.301374][T20798] autofs4:pid:20798:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 05:51:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000080)) 05:51:02 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 05:51:02 executing program 2: r0 = io_uring_setup(0x67b6, &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0x0, 0x15, 0x0, 0x0) 05:51:02 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) socket$xdp(0x2c, 0x3, 0x0) 05:51:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x13, 0x0, &(0x7f0000000080)) 05:51:02 executing program 2: socket$inet(0xa, 0x3, 0x1) 05:51:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xaf0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:03 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x20) 05:51:03 executing program 2: socketpair(0x21, 0x0, 0x0, &(0x7f0000000280)) 05:51:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x17) 05:51:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x7, 0x8}}], 0x18}, 0x0) 05:51:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 05:51:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:03 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x1100, 0x8, 0x0, 0x0) 05:51:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) 05:51:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb00d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:04 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x18, 0x0, &(0x7f0000000080)) 05:51:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x17) 05:51:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c34"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 05:51:04 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:04 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x15, &(0x7f0000000080)=[0x0, 0xc378], 0x2) 05:51:04 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:04 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, &(0x7f0000000080)) [ 1400.300298][T20861] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1400.313878][T20861] CPU: 0 PID: 20861 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1400.324323][T20861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1400.334392][T20861] Call Trace: [ 1400.337676][T20861] [ 1400.340654][T20861] dump_stack_lvl+0xda/0x130 [ 1400.345325][T20861] dump_stack+0x15/0x20 [ 1400.349526][T20861] dump_header+0x82/0x2d0 [ 1400.353943][T20861] oom_kill_process+0x33a/0x4c0 [ 1400.358814][T20861] out_of_memory+0x9ca/0xbf0 [ 1400.363431][T20861] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1400.369525][T20861] mem_cgroup_out_of_memory+0x139/0x190 [ 1400.375092][T20861] try_charge_memcg+0x75c/0xd30 [ 1400.380089][T20861] ? __rcu_read_unlock+0x4d/0x70 [ 1400.385079][T20861] obj_cgroup_charge_pages+0xab/0x130 [ 1400.390464][T20861] __memcg_kmem_charge_page+0x9c/0x170 [ 1400.395978][T20861] __alloc_pages+0x1bb/0x340 [ 1400.400578][T20861] alloc_pages_mpol+0xb1/0x1d0 [ 1400.405351][T20861] alloc_pages+0xe0/0x100 [ 1400.409716][T20861] __vmalloc_node_range+0x6d2/0xea0 [ 1400.414941][T20861] kvmalloc_node+0x121/0x160 [ 1400.419542][T20861] ? xt_alloc_table_info+0x3d/0x80 [ 1400.424724][T20861] xt_alloc_table_info+0x3d/0x80 [ 1400.429695][T20861] do_arpt_set_ctl+0x634/0x13b0 [ 1400.434602][T20861] ? __futex_wait+0x227/0x280 [ 1400.439310][T20861] ? __futex_wake_mark+0x70/0x70 [ 1400.444286][T20861] ? tcp_release_cb+0xfe/0x370 [ 1400.449125][T20861] ? _raw_spin_unlock_bh+0x36/0x40 [ 1400.454313][T20861] nf_setsockopt+0x18d/0x1b0 [ 1400.458928][T20861] ip_setsockopt+0xe6/0x100 [ 1400.463508][T20861] tcp_setsockopt+0x90/0xa0 [ 1400.468046][T20861] sock_common_setsockopt+0x61/0x70 [ 1400.473265][T20861] ? sock_common_recvmsg+0xe0/0xe0 [ 1400.478399][T20861] __sys_setsockopt+0x1d4/0x240 [ 1400.483319][T20861] __x64_sys_setsockopt+0x66/0x80 [ 1400.488371][T20861] do_syscall_64+0x44/0x110 [ 1400.492889][T20861] ? irqentry_exit+0x12/0x40 [ 1400.497498][T20861] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1400.503556][T20861] RIP: 0033:0x7ff5cf31cae9 [ 1400.507979][T20861] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1400.527628][T20861] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1400.536102][T20861] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1400.544089][T20861] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1400.552071][T20861] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1400.560047][T20861] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.568240][T20861] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1400.576261][T20861] [ 1400.579440][T20861] memory: usage 307184kB, limit 307200kB, failcnt 113015 [ 1400.586689][T20861] memory+swap: usage 307820kB, limit 9007199254740988kB, failcnt 0 [ 1400.594617][T20861] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1400.602033][T20861] Memory cgroup stats for /syz1: [ 1400.602204][T20861] cache 0 [ 1400.610136][T20861] rss 20480 [ 1400.613252][T20861] shmem 0 [ 1400.616217][T20861] mapped_file 0 [ 1400.619685][T20861] dirty 0 [ 1400.622633][T20861] writeback 0 [ 1400.625942][T20861] workingset_refault_anon 33005 [ 1400.630873][T20861] workingset_refault_file 2533 [ 1400.635657][T20861] swap 634880 [ 1400.638957][T20861] swapcached 28672 [ 1400.642684][T20861] pgpgin 445335 [ 1400.646265][T20861] pgpgout 445327 [ 1400.649817][T20861] pgfault 440896 [ 1400.653427][T20861] pgmajfault 13968 [ 1400.657173][T20861] inactive_anon 24576 [ 1400.661160][T20861] active_anon 4096 [ 1400.664917][T20861] inactive_file 0 [ 1400.668577][T20861] active_file 0 [ 1400.672048][T20861] unevictable 0 [ 1400.675567][T20861] hierarchical_memory_limit 314572800 [ 1400.680946][T20861] hierarchical_memsw_limit 9223372036854771712 [ 1400.687130][T20861] total_cache 0 [ 1400.690675][T20861] total_rss 20480 [ 1400.694314][T20861] total_shmem 0 [ 1400.697800][T20861] total_mapped_file 0 [ 1400.701795][T20861] total_dirty 0 [ 1400.705346][T20861] total_writeback 0 [ 1400.709225][T20861] total_workingset_refault_anon 33005 [ 1400.714606][T20861] total_workingset_refault_file 2533 [ 1400.719932][T20861] total_swap 634880 [ 1400.723750][T20861] total_swapcached 28672 [ 1400.728022][T20861] total_pgpgin 445335 [ 1400.732024][T20861] total_pgpgout 445327 [ 1400.736144][T20861] total_pgfault 440896 [ 1400.740280][T20861] total_pgmajfault 13968 [ 1400.744536][T20861] total_inactive_anon 24576 [ 1400.749099][T20861] total_active_anon 4096 [ 1400.753348][T20861] total_inactive_file 0 [ 1400.757552][T20861] total_active_file 0 [ 1400.761545][T20861] total_unevictable 0 [ 1400.765573][T20861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20859,uid=0 [ 1400.780909][T20861] Memory cgroup out of memory: Killed process 20859 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb10d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:05 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:05 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 05:51:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x17) 05:51:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:05 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xb, 0x0, 0x0) 05:51:05 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:05 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080), 0x2) 05:51:05 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) 05:51:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r1) 05:51:05 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000000476926dab8e9e0"]}) [ 1401.897215][T20896] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1401.908568][T20896] CPU: 0 PID: 20896 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1401.918985][T20896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1401.929036][T20896] Call Trace: [ 1401.932317][T20896] [ 1401.935254][T20896] dump_stack_lvl+0xda/0x130 [ 1401.939978][T20896] dump_stack+0x15/0x20 [ 1401.944212][T20896] dump_header+0x82/0x2d0 [ 1401.948589][T20896] oom_kill_process+0x33a/0x4c0 [ 1401.953492][T20896] out_of_memory+0x9ca/0xbf0 [ 1401.958271][T20896] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1401.964403][T20896] mem_cgroup_out_of_memory+0x139/0x190 [ 1401.970024][T20896] try_charge_memcg+0x75c/0xd30 [ 1401.974910][T20896] ? __swap_duplicate+0x29b/0x2b0 [ 1401.979966][T20896] ? radix_tree_lookup+0xf9/0x150 [ 1401.985043][T20896] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1401.991301][T20896] __read_swap_cache_async+0x2f6/0x550 [ 1401.996856][T20896] swap_cluster_readahead+0x27c/0x4c0 [ 1402.002299][T20896] swapin_readahead+0xe9/0x7f0 [ 1402.007066][T20896] ? __filemap_get_folio+0x41a/0x5a0 [ 1402.012353][T20896] ? _raw_spin_unlock+0x26/0x40 [ 1402.017230][T20896] ? swap_cache_get_folio+0x6e/0x200 [ 1402.022588][T20896] do_swap_page+0x4a0/0x1670 [ 1402.027211][T20896] ? __rcu_read_lock+0x35/0x50 [ 1402.031975][T20896] ? pte_offset_map_nolock+0x124/0x1d0 [ 1402.037619][T20896] handle_mm_fault+0xa36/0x2dd0 [ 1402.042546][T20896] exc_page_fault+0x3ff/0x6c0 [ 1402.047408][T20896] asm_exc_page_fault+0x26/0x30 [ 1402.052404][T20896] RIP: 0033:0x7ff5cf2d6ae4 [ 1402.056834][T20896] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1402.076494][T20896] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1402.082648][T20896] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1402.090680][T20896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1402.098743][T20896] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1402.106781][T20896] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000156427 [ 1402.114770][T20896] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 00000000001560e6 [ 1402.122815][T20896] [ 1402.125940][T20896] memory: usage 307200kB, limit 307200kB, failcnt 113222 [ 1402.132994][T20896] memory+swap: usage 307836kB, limit 9007199254740988kB, failcnt 0 [ 1402.141012][T20896] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1402.148333][T20896] Memory cgroup stats for /syz1: [ 1402.149145][T20896] cache 0 [ 1402.157038][T20896] rss 8192 [ 1402.160170][T20896] shmem 0 [ 1402.163104][T20896] mapped_file 0 [ 1402.166601][T20896] dirty 0 [ 1402.169545][T20896] writeback 8192 [ 1402.173080][T20896] workingset_refault_anon 33124 [ 1402.177955][T20896] workingset_refault_file 2533 [ 1402.182722][T20896] swap 651264 [ 1402.186030][T20896] swapcached 16384 [ 1402.189768][T20896] pgpgin 445477 [ 1402.193215][T20896] pgpgout 445473 [ 1402.196862][T20896] pgfault 441104 [ 1402.200412][T20896] pgmajfault 14022 [ 1402.204185][T20896] inactive_anon 0 [ 1402.207856][T20896] active_anon 0 [ 1402.211318][T20896] inactive_file 0 [ 1402.214979][T20896] active_file 0 [ 1402.218444][T20896] unevictable 0 [ 1402.221910][T20896] hierarchical_memory_limit 314572800 [ 1402.227371][T20896] hierarchical_memsw_limit 9223372036854771712 [ 1402.233551][T20896] total_cache 0 [ 1402.237167][T20896] total_rss 8192 [ 1402.240725][T20896] total_shmem 0 [ 1402.244196][T20896] total_mapped_file 0 [ 1402.248203][T20896] total_dirty 0 [ 1402.251669][T20896] total_writeback 8192 [ 1402.255780][T20896] total_workingset_refault_anon 33124 [ 1402.261170][T20896] total_workingset_refault_file 2533 [ 1402.266534][T20896] total_swap 651264 [ 1402.270384][T20896] total_swapcached 16384 [ 1402.274623][T20896] total_pgpgin 445477 [ 1402.278710][T20896] total_pgpgout 445473 [ 1402.282837][T20896] total_pgfault 441104 [ 1402.286921][T20896] total_pgmajfault 14022 [ 1402.291165][T20896] total_inactive_anon 0 [ 1402.295332][T20896] total_active_anon 0 [ 1402.299307][T20896] total_inactive_file 0 [ 1402.303448][T20896] total_active_file 0 [ 1402.307503][T20896] total_unevictable 0 [ 1402.311503][T20896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20896,uid=0 [ 1402.326826][T20896] Memory cgroup out of memory: Killed process 20896 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb20d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 05:51:07 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 05:51:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x17) 05:51:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 05:51:07 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) 05:51:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 05:51:07 executing program 3: r0 = io_uring_setup(0x2004, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0x0, 0x2], 0x2) 05:51:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 05:51:07 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000040)={{0xf60f, 0x1, 0x18}, './file0\x00'}) [ 1403.368949][T20924] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1403.380337][T20924] CPU: 1 PID: 20924 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1403.390854][T20924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1403.400984][T20924] Call Trace: [ 1403.404277][T20924] [ 1403.407226][T20924] dump_stack_lvl+0xda/0x130 [ 1403.411848][T20924] dump_stack+0x15/0x20 [ 1403.416125][T20924] dump_header+0x82/0x2d0 [ 1403.420485][T20924] oom_kill_process+0x33a/0x4c0 [ 1403.425380][T20924] out_of_memory+0x9ca/0xbf0 [ 1403.430067][T20924] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1403.436173][T20924] mem_cgroup_out_of_memory+0x139/0x190 [ 1403.441811][T20924] try_charge_memcg+0x75c/0xd30 [ 1403.446760][T20924] ? __swap_duplicate+0x29b/0x2b0 [ 1403.451940][T20924] ? radix_tree_lookup+0xf9/0x150 [ 1403.457039][T20924] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1403.463160][T20924] __read_swap_cache_async+0x2f6/0x550 [ 1403.468720][T20924] swap_cluster_readahead+0x27c/0x4c0 [ 1403.474139][T20924] swapin_readahead+0xe9/0x7f0 [ 1403.478971][T20924] ? __filemap_get_folio+0x41a/0x5a0 [ 1403.484277][T20924] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1403.489941][T20924] ? swap_cache_get_folio+0x6e/0x200 [ 1403.495264][T20924] do_swap_page+0x4a0/0x1670 [ 1403.500513][T20924] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1403.505898][T20924] ? __rcu_read_lock+0x35/0x50 [ 1403.510688][T20924] ? pte_offset_map_nolock+0x124/0x1d0 [ 1403.516240][T20924] handle_mm_fault+0xa36/0x2dd0 [ 1403.521132][T20924] exc_page_fault+0x3ff/0x6c0 [ 1403.525923][T20924] asm_exc_page_fault+0x26/0x30 [ 1403.530825][T20924] RIP: 0033:0x7ff5cf2d6ae4 [ 1403.535261][T20924] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1403.555145][T20924] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010283 [ 1403.561229][T20924] RAX: 0000000000000000 RBX: 00007ff5cf43c050 RCX: 0000000000000000 [ 1403.569231][T20924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1403.577321][T20924] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1403.585319][T20924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000156a1d [ 1403.593313][T20924] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 00000000001566dc [ 1403.601318][T20924] [ 1403.604612][T20924] memory: usage 307200kB, limit 307200kB, failcnt 113483 [ 1403.611821][T20924] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 1403.619841][T20924] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1403.627188][T20924] Memory cgroup stats for /syz1: [ 1403.629815][T20924] cache 0 [ 1403.637781][T20924] rss 8192 [ 1403.640825][T20924] shmem 0 [ 1403.643811][T20924] mapped_file 0 [ 1403.647367][T20924] dirty 0 [ 1403.650315][T20924] writeback 0 [ 1403.653641][T20924] workingset_refault_anon 33149 [ 1403.658578][T20924] workingset_refault_file 2533 [ 1403.663418][T20924] swap 712704 [ 1403.666765][T20924] swapcached 8192 [ 1403.670412][T20924] pgpgin 445525 [ 1403.673887][T20924] pgpgout 445523 [ 1403.677526][T20924] pgfault 441211 [ 1403.681074][T20924] pgmajfault 14031 [ 1403.684863][T20924] inactive_anon 0 [ 1403.688528][T20924] active_anon 8192 [ 1403.692333][T20924] inactive_file 0 [ 1403.696053][T20924] active_file 0 [ 1403.699550][T20924] unevictable 0 [ 1403.703032][T20924] hierarchical_memory_limit 314572800 [ 1403.708647][T20924] hierarchical_memsw_limit 9223372036854771712 [ 1403.714926][T20924] total_cache 0 [ 1403.718477][T20924] total_rss 8192 [ 1403.722036][T20924] total_shmem 0 [ 1403.725623][T20924] total_mapped_file 0 [ 1403.729618][T20924] total_dirty 0 [ 1403.733093][T20924] total_writeback 0 [ 1403.737037][T20924] total_workingset_refault_anon 33149 [ 1403.742520][T20924] total_workingset_refault_file 2533 [ 1403.747854][T20924] total_swap 712704 [ 1403.751661][T20924] total_swapcached 8192 [ 1403.755969][T20924] total_pgpgin 445525 [ 1403.759993][T20924] total_pgpgout 445523 [ 1403.764128][T20924] total_pgfault 441211 [ 1403.768249][T20924] total_pgmajfault 14031 [ 1403.772527][T20924] total_inactive_anon 0 [ 1403.776753][T20924] total_active_anon 8192 [ 1403.781002][T20924] total_inactive_file 0 [ 1403.785300][T20924] total_active_file 0 [ 1403.789355][T20924] total_unevictable 0 [ 1403.793420][T20924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20924,uid=0 [ 1403.808868][T20924] Memory cgroup out of memory: Killed process 20924 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1403.874324][T20916] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1403.885760][T20916] CPU: 1 PID: 20916 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1403.896323][T20916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1403.906399][T20916] Call Trace: [ 1403.909761][T20916] [ 1403.912737][T20916] dump_stack_lvl+0xda/0x130 [ 1403.917359][T20916] dump_stack+0x15/0x20 [ 1403.921705][T20916] dump_header+0x82/0x2d0 [ 1403.926069][T20916] oom_kill_process+0x33a/0x4c0 [ 1403.931083][T20916] out_of_memory+0x9ca/0xbf0 [ 1403.935763][T20916] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1403.941896][T20916] mem_cgroup_out_of_memory+0x139/0x190 [ 1403.947521][T20916] try_charge_memcg+0x75c/0xd30 [ 1403.952397][T20916] ? __swap_duplicate+0x29b/0x2b0 [ 1403.957584][T20916] ? radix_tree_lookup+0xf9/0x150 [ 1403.962774][T20916] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1403.968875][T20916] __read_swap_cache_async+0x2f6/0x550 [ 1403.974498][T20916] swap_cluster_readahead+0x27c/0x4c0 [ 1403.979909][T20916] shmem_swapin_folio+0x343/0x830 [ 1403.984966][T20916] shmem_get_folio_gfp+0x242/0xb40 [ 1403.990200][T20916] ? ptep_set_access_flags+0x3e/0x70 [ 1403.995573][T20916] ? __rcu_read_unlock+0x4d/0x70 [ 1404.000807][T20916] shmem_fault+0x100/0x250 [ 1404.005299][T20916] ? put_swap_device+0xb0/0xb0 [ 1404.010122][T20916] handle_mm_fault+0x17db/0x2dd0 [ 1404.015192][T20916] exc_page_fault+0x3ff/0x6c0 [ 1404.019900][T20916] asm_exc_page_fault+0x26/0x30 [ 1404.024754][T20916] RIP: 0033:0x7fa159e46226 [ 1404.029310][T20916] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 1404.048939][T20916] RSP: 002b:00007ffea5cad718 EFLAGS: 00010287 [ 1404.055016][T20916] RAX: 0000001b2e924000 RBX: 00007fa159fbb0e8 RCX: 0000001b2e920000 [ 1404.063013][T20916] RDX: 0000001b2e924004 RSI: 0000000080000000 RDI: 000000008146a5c4 05:51:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb30d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 05:51:08 executing program 3: socketpair(0x29, 0x5, 0x1, &(0x7f0000000000)) 05:51:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) [ 1404.071075][T20916] RBP: 000000008146a5c4 R08: 0000001b2ed20000 R09: 00000000000005c4 [ 1404.079129][T20916] R10: 000000008146a5c8 R11: 00000000000408c2 R12: 0000000000006ad6 [ 1404.087125][T20916] R13: 0000000000000001 R14: 00007fa159faf000 R15: ffffffff8146ac51 [ 1404.095165][T20916] ? folio_activate_fn+0x4a1/0x5e0 [ 1404.100307][T20916] [ 1404.103560][T20916] memory: usage 307200kB, limit 307200kB, failcnt 187078 [ 1404.110684][T20916] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 1404.118671][T20916] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1404.126070][T20916] Memory cgroup stats for /syz0: [ 1404.126237][T20916] cache 4096 [ 1404.134456][T20916] rss 8192 [ 1404.137556][T20916] shmem 0 [ 1404.140554][T20916] mapped_file 0 [ 1404.144045][T20916] dirty 0 [ 1404.147135][T20916] writeback 16384 [ 1404.150792][T20916] workingset_refault_anon 37500 [ 1404.155785][T20916] workingset_refault_file 10296 [ 1404.160815][T20916] swap 430080 [ 1404.164110][T20916] swapcached 8192 [ 1404.167779][T20916] pgpgin 3565508 [ 1404.171373][T20916] pgpgout 3565505 [ 1404.175311][T20916] pgfault 3496542 [ 1404.178962][T20916] pgmajfault 17878 [ 1404.182742][T20916] inactive_anon 8192 [ 1404.186737][T20916] active_anon 0 [ 1404.190303][T20916] inactive_file 0 [ 1404.194066][T20916] active_file 4096 [ 1404.197851][T20916] unevictable 0 [ 1404.201406][T20916] hierarchical_memory_limit 314572800 [ 1404.206849][T20916] hierarchical_memsw_limit 9223372036854771712 [ 1404.213029][T20916] total_cache 4096 [ 1404.216961][T20916] total_rss 8192 [ 1404.220549][T20916] total_shmem 0 [ 1404.224260][T20916] total_mapped_file 0 [ 1404.228431][T20916] total_dirty 0 [ 1404.231962][T20916] total_writeback 0 [ 1404.236081][T20916] total_workingset_refault_anon 37500 [ 1404.241562][T20916] total_workingset_refault_file 10296 [ 1404.247013][T20916] total_swap 430080 [ 1404.250926][T20916] total_swapcached 8192 [ 1404.255151][T20916] total_pgpgin 3565508 [ 1404.259260][T20916] total_pgpgout 3565505 [ 1404.263457][T20916] total_pgfault 3496542 [ 1404.267677][T20916] total_pgmajfault 17878 [ 1404.271943][T20916] total_inactive_anon 8192 [ 1404.276519][T20916] total_active_anon 0 [ 1404.280545][T20916] total_inactive_file 0 [ 1404.284756][T20916] total_active_file 4096 [ 1404.289024][T20916] total_unevictable 0 [ 1404.293015][T20916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20916,uid=0 [ 1404.308448][T20916] Memory cgroup out of memory: Killed process 20916 (syz-executor.0) total-vm:48740kB, anon-rss:376kB, file-rss:10884kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 05:51:09 executing program 3: msgrcv(0x0, 0x0, 0x0, 0xff0f000000000000, 0x0) 05:51:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 05:51:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 05:51:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[]}) 05:51:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[]}) 05:51:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[]}) 05:51:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB]}) 05:51:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 05:51:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb40d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB]}) 05:51:10 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000540)={&(0x7f0000002000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000400)={0x0}, 0x1) 05:51:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB]}) 05:51:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 05:51:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00']}) 05:51:10 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x20) 05:51:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00']}) 05:51:10 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 05:51:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb50d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x2, 0x18}, './file0\x00'}) 05:51:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00']}) 05:51:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) [ 1406.278838][T21011] autofs4:pid:21011:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189375) [ 1406.292065][T21011] autofs4:pid:21011:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 05:51:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00Gi']}) 05:51:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)=0x2) 05:51:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00']}) 05:51:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f0000000080)) 05:51:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00']}) 05:51:11 executing program 3: setresuid(0xee01, 0xffffffffffffffff, 0xee00) setresuid(0xee00, 0x0, 0xee01) 05:51:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 05:51:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1407.125753][T21013] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1407.137129][T21013] CPU: 1 PID: 21013 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1407.147789][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1407.157949][T21013] Call Trace: [ 1407.161490][T21013] [ 1407.164423][T21013] dump_stack_lvl+0xda/0x130 [ 1407.169039][T21013] dump_stack+0x15/0x20 [ 1407.173265][T21013] dump_header+0x82/0x2d0 [ 1407.177703][T21013] oom_kill_process+0x33a/0x4c0 [ 1407.182589][T21013] out_of_memory+0x9ca/0xbf0 [ 1407.187247][T21013] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1407.193370][T21013] mem_cgroup_out_of_memory+0x139/0x190 [ 1407.198937][T21013] try_charge_memcg+0x75c/0xd30 [ 1407.203873][T21013] ? __swap_duplicate+0x29b/0x2b0 [ 1407.208967][T21013] ? radix_tree_lookup+0xf9/0x150 [ 1407.214016][T21013] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1407.220095][T21013] __read_swap_cache_async+0x2f6/0x550 [ 1407.225568][T21013] swap_cluster_readahead+0x27c/0x4c0 [ 1407.231088][T21013] swapin_readahead+0xe9/0x7f0 [ 1407.235878][T21013] ? __filemap_get_folio+0x41a/0x5a0 [ 1407.241234][T21013] ? swap_cache_get_folio+0x6e/0x200 [ 1407.246572][T21013] do_swap_page+0x4a0/0x1670 [ 1407.251190][T21013] ? asm_exc_page_fault+0x26/0x30 [ 1407.256216][T21013] ? __rcu_read_lock+0x35/0x50 [ 1407.260982][T21013] ? pte_offset_map_nolock+0x124/0x1d0 [ 1407.266457][T21013] handle_mm_fault+0xa36/0x2dd0 [ 1407.271396][T21013] exc_page_fault+0x3ff/0x6c0 [ 1407.276089][T21013] asm_exc_page_fault+0x26/0x30 [ 1407.280942][T21013] RIP: 0033:0x7ff5cf2d6c72 [ 1407.285355][T21013] Code: ff 48 81 c3 d0 00 00 00 48 39 dd 0f 84 68 fd ff ff 80 7b 20 00 48 89 df 74 e7 e8 49 cc ff ff 84 c0 74 d7 80 3d 9e e4 13 00 00 <48> 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 00 00 eb bd 48 89 f1 [ 1407.305119][T21013] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010202 [ 1407.311202][T21013] RAX: 0000000000000001 RBX: 00007ff5cf43bf80 RCX: 0000000000157818 [ 1407.319191][T21013] RDX: 0000000000000071 RSI: 00007ffe2f8462a0 RDI: 00007ff5cf43bf80 [ 1407.327214][T21013] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1407.335218][T21013] R10: 00007ffe2f8f8080 R11: 0000000000040b58 R12: 0000000000157888 [ 1407.343191][T21013] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000157547 [ 1407.351186][T21013] [ 1407.354515][T21013] memory: usage 307200kB, limit 307200kB, failcnt 113748 [ 1407.362127][T21013] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 [ 1407.370085][T21013] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1407.377392][T21013] Memory cgroup stats for /syz1: [ 1407.377809][T21013] cache 0 [ 1407.385761][T21013] rss 8192 [ 1407.388798][T21013] shmem 0 [ 1407.391731][T21013] mapped_file 0 [ 1407.395229][T21013] dirty 0 [ 1407.398195][T21013] writeback 12288 [ 1407.401867][T21013] workingset_refault_anon 33264 [ 1407.406739][T21013] workingset_refault_file 2533 [ 1407.411525][T21013] swap 659456 [ 1407.414841][T21013] swapcached 16384 [ 1407.418623][T21013] pgpgin 445709 [ 1407.422091][T21013] pgpgout 445705 [ 1407.425652][T21013] pgfault 441582 [ 1407.429222][T21013] pgmajfault 14076 [ 1407.432950][T21013] inactive_anon 4096 [ 1407.436881][T21013] active_anon 0 [ 1407.440466][T21013] inactive_file 0 [ 1407.444094][T21013] active_file 0 [ 1407.447591][T21013] unevictable 0 [ 1407.451191][T21013] hierarchical_memory_limit 314572800 [ 1407.456612][T21013] hierarchical_memsw_limit 9223372036854771712 [ 1407.462773][T21013] total_cache 0 [ 1407.466252][T21013] total_rss 8192 [ 1407.469819][T21013] total_shmem 0 [ 1407.473296][T21013] total_mapped_file 0 [ 1407.477304][T21013] total_dirty 0 [ 1407.480772][T21013] total_writeback 12288 [ 1407.484955][T21013] total_workingset_refault_anon 33264 [ 1407.490395][T21013] total_workingset_refault_file 2533 [ 1407.495890][T21013] total_swap 659456 [ 1407.499723][T21013] total_swapcached 16384 [ 1407.503954][T21013] total_pgpgin 445709 [ 1407.507956][T21013] total_pgpgout 445705 [ 1407.512081][T21013] total_pgfault 441582 [ 1407.516189][T21013] total_pgmajfault 14076 [ 1407.520440][T21013] total_inactive_anon 4096 [ 1407.524916][T21013] total_active_anon 0 [ 1407.528905][T21013] total_inactive_file 0 [ 1407.533069][T21013] total_active_file 0 [ 1407.537134][T21013] total_unevictable 0 [ 1407.541148][T21013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21013,uid=0 [ 1407.556518][T21013] Memory cgroup out of memory: Killed process 21013 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00']}) 05:51:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb60d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:12 executing program 4: syslog(0x3, &(0x7f0000000000)=""/22, 0x16) 05:51:12 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000040)=ANY=[@ANYRES32]) 05:51:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 05:51:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}, 0x0) 05:51:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 05:51:12 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='\x00'}, 0x18) 05:51:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 05:51:12 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x40086602, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:51:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}], 0x18}, 0x0) [ 1408.590355][T21042] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1408.601737][T21042] CPU: 1 PID: 21042 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1408.612277][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1408.622381][T21042] Call Trace: [ 1408.625746][T21042] [ 1408.628697][T21042] dump_stack_lvl+0xda/0x130 [ 1408.633317][T21042] dump_stack+0x15/0x20 [ 1408.637544][T21042] dump_header+0x82/0x2d0 [ 1408.641911][T21042] oom_kill_process+0x33a/0x4c0 [ 1408.646863][T21042] out_of_memory+0x9ca/0xbf0 [ 1408.651503][T21042] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1408.657617][T21042] mem_cgroup_out_of_memory+0x139/0x190 [ 1408.663322][T21042] try_charge_memcg+0x75c/0xd30 [ 1408.668238][T21042] ? __swap_duplicate+0x29b/0x2b0 [ 1408.673298][T21042] ? radix_tree_lookup+0xf9/0x150 [ 1408.678380][T21042] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1408.684529][T21042] __read_swap_cache_async+0x2f6/0x550 [ 1408.690085][T21042] swap_cluster_readahead+0x27c/0x4c0 [ 1408.695530][T21042] swapin_readahead+0xe9/0x7f0 [ 1408.700389][T21042] ? __filemap_get_folio+0x41a/0x5a0 [ 1408.705717][T21042] ? _raw_spin_unlock+0x26/0x40 [ 1408.710633][T21042] ? swap_cache_get_folio+0x6e/0x200 [ 1408.716060][T21042] do_swap_page+0x4a0/0x1670 [ 1408.720696][T21042] ? __rcu_read_lock+0x35/0x50 [ 1408.725487][T21042] ? pte_offset_map_nolock+0x124/0x1d0 [ 1408.731027][T21042] handle_mm_fault+0xa36/0x2dd0 [ 1408.735960][T21042] exc_page_fault+0x3ff/0x6c0 [ 1408.740686][T21042] asm_exc_page_fault+0x26/0x30 [ 1408.745633][T21042] RIP: 0033:0x7ff5cf2d6ae4 [ 1408.750069][T21042] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1408.769703][T21042] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1408.775924][T21042] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1408.783929][T21042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1408.791935][T21042] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1408.800043][T21042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000157e73 [ 1408.808053][T21042] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000157b32 [ 1408.816051][T21042] [ 1408.819219][T21042] memory: usage 307200kB, limit 307200kB, failcnt 113904 [ 1408.826421][T21042] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 1408.834422][T21042] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1408.841820][T21042] Memory cgroup stats for /syz1: [ 1408.843601][T21042] cache 0 [ 1408.851548][T21042] rss 16384 [ 1408.854673][T21042] shmem 0 [ 1408.857674][T21042] mapped_file 0 [ 1408.861138][T21042] dirty 0 [ 1408.864220][T21042] writeback 0 [ 1408.867676][T21042] workingset_refault_anon 33284 [ 1408.872668][T21042] workingset_refault_file 2533 [ 1408.877498][T21042] swap 712704 [ 1408.880795][T21042] swapcached 16384 [ 1408.884532][T21042] pgpgin 445752 [ 1408.888057][T21042] pgpgout 445748 [ 1408.891675][T21042] pgfault 441665 [ 1408.895271][T21042] pgmajfault 14087 [ 1408.899075][T21042] inactive_anon 0 [ 1408.902723][T21042] active_anon 16384 [ 1408.906662][T21042] inactive_file 0 [ 1408.910369][T21042] active_file 0 [ 1408.913870][T21042] unevictable 0 [ 1408.917488][T21042] hierarchical_memory_limit 314572800 [ 1408.923009][T21042] hierarchical_memsw_limit 9223372036854771712 [ 1408.929218][T21042] total_cache 0 [ 1408.932712][T21042] total_rss 16384 [ 1408.936404][T21042] total_shmem 0 [ 1408.939923][T21042] total_mapped_file 0 [ 1408.943908][T21042] total_dirty 0 [ 1408.947493][T21042] total_writeback 0 [ 1408.951308][T21042] total_workingset_refault_anon 33284 [ 1408.956736][T21042] total_workingset_refault_file 2533 [ 1408.962040][T21042] total_swap 712704 [ 1408.965915][T21042] total_swapcached 16384 [ 1408.970230][T21042] total_pgpgin 445752 [ 1408.974220][T21042] total_pgpgout 445748 [ 1408.978365][T21042] total_pgfault 441665 [ 1408.982460][T21042] total_pgmajfault 14087 [ 1408.986800][T21042] total_inactive_anon 0 [ 1408.990964][T21042] total_active_anon 16384 [ 1408.995336][T21042] total_inactive_file 0 [ 1408.999493][T21042] total_active_file 0 [ 1409.003576][T21042] total_unevictable 0 [ 1409.007602][T21042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21042,uid=0 [ 1409.022974][T21042] Memory cgroup out of memory: Killed process 21042 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb70d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00G']}) 05:51:13 executing program 3: msgsnd(0x0, &(0x7f0000000480)={0x1}, 0x8, 0xf94a95644cc9beae) 05:51:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) 05:51:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b32"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 05:51:13 executing program 4: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 05:51:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}, 0x0) 05:51:14 executing program 3: setresuid(0xee01, 0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0xee01) 05:51:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 05:51:14 executing program 4: r0 = socket$inet(0x2, 0x3, 0xfb) getsockopt$inet_pktinfo(r0, 0x11, 0x8, 0x0, 0x0) [ 1410.093171][T21079] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1410.104609][T21079] CPU: 1 PID: 21079 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1410.115071][T21079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1410.125154][T21079] Call Trace: [ 1410.128443][T21079] [ 1410.131433][T21079] dump_stack_lvl+0xda/0x130 [ 1410.136071][T21079] dump_stack+0x15/0x20 [ 1410.140318][T21079] dump_header+0x82/0x2d0 [ 1410.144751][T21079] oom_kill_process+0x33a/0x4c0 [ 1410.149714][T21079] out_of_memory+0x9ca/0xbf0 [ 1410.154347][T21079] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1410.160472][T21079] mem_cgroup_out_of_memory+0x139/0x190 [ 1410.166081][T21079] try_charge_memcg+0x75c/0xd30 [ 1410.171013][T21079] ? __swap_duplicate+0x29b/0x2b0 [ 1410.176130][T21079] ? radix_tree_lookup+0xf9/0x150 [ 1410.181216][T21079] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1410.187418][T21079] __read_swap_cache_async+0x2f6/0x550 [ 1410.193017][T21079] swap_cluster_readahead+0x27c/0x4c0 [ 1410.198571][T21079] swapin_readahead+0xe9/0x7f0 [ 1410.203373][T21079] ? __filemap_get_folio+0x41a/0x5a0 [ 1410.208831][T21079] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1410.214580][T21079] ? swap_cache_get_folio+0x6e/0x200 [ 1410.219992][T21079] do_swap_page+0x4a0/0x1670 [ 1410.224616][T21079] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1410.229938][T21079] ? __rcu_read_lock+0x35/0x50 [ 1410.234946][T21079] ? pte_offset_map_nolock+0x124/0x1d0 [ 1410.240451][T21079] handle_mm_fault+0xa36/0x2dd0 [ 1410.245363][T21079] exc_page_fault+0x3ff/0x6c0 [ 1410.250184][T21079] asm_exc_page_fault+0x26/0x30 [ 1410.255234][T21079] RIP: 0033:0x7ff5cf2d6ae4 [ 1410.259714][T21079] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1410.279492][T21079] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1410.285596][T21079] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1410.293660][T21079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1410.301733][T21079] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1410.309810][T21079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000158471 [ 1410.317833][T21079] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000158130 [ 1410.325824][T21079] [ 1410.329159][T21079] memory: usage 307200kB, limit 307200kB, failcnt 114074 [ 1410.336316][T21079] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 1410.344345][T21079] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1410.351704][T21079] Memory cgroup stats for /syz1: [ 1410.351990][T21079] cache 0 [ 1410.360072][T21079] rss 8192 [ 1410.363146][T21079] shmem 0 [ 1410.366178][T21079] mapped_file 0 [ 1410.369642][T21079] dirty 0 [ 1410.372571][T21079] writeback 8192 [ 1410.376217][T21079] workingset_refault_anon 33317 [ 1410.381099][T21079] workingset_refault_file 2533 [ 1410.385903][T21079] swap 729088 [ 1410.389224][T21079] swapcached 8192 [ 1410.392905][T21079] pgpgin 445808 [ 1410.396422][T21079] pgpgout 445806 [ 1410.399990][T21079] pgfault 441795 [ 1410.403530][T21079] pgmajfault 14101 [ 1410.407365][T21079] inactive_anon 0 [ 1410.411043][T21079] active_anon 0 [ 1410.414534][T21079] inactive_file 0 [ 1410.418352][T21079] active_file 0 [ 1410.421845][T21079] unevictable 0 [ 1410.425356][T21079] hierarchical_memory_limit 314572800 [ 1410.430748][T21079] hierarchical_memsw_limit 9223372036854771712 [ 1410.437156][T21079] total_cache 0 [ 1410.440648][T21079] total_rss 8192 [ 1410.444202][T21079] total_shmem 0 [ 1410.447688][T21079] total_mapped_file 0 [ 1410.451669][T21079] total_dirty 0 [ 1410.455184][T21079] total_writeback 8192 [ 1410.459352][T21079] total_workingset_refault_anon 33317 [ 1410.464760][T21079] total_workingset_refault_file 2533 [ 1410.470058][T21079] total_swap 729088 [ 1410.473881][T21079] total_swapcached 8192 [ 1410.478168][T21079] total_pgpgin 445808 [ 1410.482154][T21079] total_pgpgout 445806 [ 1410.486244][T21079] total_pgfault 441795 [ 1410.490354][T21079] total_pgmajfault 14101 [ 1410.494591][T21079] total_inactive_anon 0 [ 1410.498769][T21079] total_active_anon 0 [ 1410.502765][T21079] total_inactive_file 0 [ 1410.506946][T21079] total_active_file 0 [ 1410.510950][T21079] total_unevictable 0 [ 1410.515029][T21079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21079,uid=0 [ 1410.530423][T21079] Memory cgroup out of memory: Killed process 21079 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1410.548139][T21071] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1410.559523][T21071] CPU: 0 PID: 21071 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1410.570008][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1410.580128][T21071] Call Trace: [ 1410.583428][T21071] [ 1410.586376][T21071] dump_stack_lvl+0xda/0x130 [ 1410.590996][T21071] dump_stack+0x15/0x20 [ 1410.595180][T21071] dump_header+0x82/0x2d0 [ 1410.599588][T21071] oom_kill_process+0x33a/0x4c0 [ 1410.604509][T21071] out_of_memory+0x9ca/0xbf0 [ 1410.609197][T21071] mem_cgroup_out_of_memory+0x139/0x190 [ 1410.614770][T21071] try_charge_memcg+0x75c/0xd30 [ 1410.619656][T21071] ? __swap_duplicate+0x29b/0x2b0 [ 1410.624706][T21071] ? radix_tree_lookup+0xf9/0x150 [ 1410.629877][T21071] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1410.636019][T21071] __read_swap_cache_async+0x2f6/0x550 [ 1410.641555][T21071] swap_cluster_readahead+0x27c/0x4c0 [ 1410.647010][T21071] swapin_readahead+0xe9/0x7f0 [ 1410.651790][T21071] ? __filemap_get_folio+0x41a/0x5a0 [ 1410.657128][T21071] ? swap_cache_get_folio+0x6e/0x200 [ 1410.662426][T21071] do_swap_page+0x4a0/0x1670 [ 1410.667090][T21071] ? asm_exc_page_fault+0x26/0x30 [ 1410.672202][T21071] ? __rcu_read_lock+0x35/0x50 [ 1410.676978][T21071] ? pte_offset_map_nolock+0x124/0x1d0 [ 1410.682452][T21071] handle_mm_fault+0xa36/0x2dd0 [ 1410.687336][T21071] exc_page_fault+0x3ff/0x6c0 [ 1410.692054][T21071] asm_exc_page_fault+0x26/0x30 [ 1410.696913][T21071] RIP: 0033:0x7fa159e5475f [ 1410.701395][T21071] Code: 00 00 0f 84 53 02 00 00 41 80 bd 94 00 00 00 01 19 c0 83 e0 f8 83 c0 0a 09 d0 89 c3 bf 0d f0 ad 0b e8 a5 1a ff ff 41 8b 7d 24 9c 1a ff ff 41 8b 7d 28 e8 93 1a ff ff 89 ef e8 8c 1a ff ff 89 [ 1410.721039][T21071] RSP: 002b:00007ffea5cad780 EFLAGS: 00010287 [ 1410.727255][T21071] RAX: 0000001b2e923924 RBX: 0000000000000001 RCX: 0000001b2e920000 [ 1410.735234][T21071] RDX: 0000001b2e923928 RSI: 0000000000000000 RDI: 0000000000000003 [ 1410.743335][T21071] RBP: 00000000000003e7 R08: 0000001b2ed20000 R09: 00007ffea5df90b0 [ 1410.751326][T21071] R10: 00007ffea5df9080 R11: 0000000000040da4 R12: 000000000015843d [ 1410.759408][T21071] R13: 00007fa159fbb050 R14: 00007fa159a1f000 R15: 00000000001580fc [ 1410.767539][T21071] [ 1410.770721][T21071] memory: usage 307200kB, limit 307200kB, failcnt 188382 [ 1410.777878][T21071] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0 [ 1410.785806][T21071] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1410.793102][T21071] Memory cgroup stats for /syz0: [ 1410.794067][T21071] cache 4096 [ 1410.802408][T21071] rss 8192 [ 1410.805482][T21071] shmem 0 [ 1410.808426][T21071] mapped_file 0 [ 1410.811968][T21071] dirty 0 [ 1410.814935][T21071] writeback 0 [ 1410.818314][T21071] workingset_refault_anon 37718 [ 1410.823178][T21071] workingset_refault_file 10296 [ 1410.828076][T21071] swap 409600 [ 1410.831392][T21071] swapcached 8192 [ 1410.835072][T21071] pgpgin 3582211 [ 1410.838657][T21071] pgpgout 3582208 [ 1410.842336][T21071] pgfault 3513579 [ 1410.846078][T21071] pgmajfault 17993 [ 1410.849799][T21071] inactive_anon 0 [ 1410.853437][T21071] active_anon 8192 [ 1410.857279][T21071] inactive_file 0 [ 1410.860918][T21071] active_file 4096 [ 1410.864642][T21071] unevictable 0 [ 1410.868127][T21071] hierarchical_memory_limit 314572800 [ 1410.873568][T21071] hierarchical_memsw_limit 9223372036854771712 [ 1410.879783][T21071] total_cache 4096 [ 1410.883517][T21071] total_rss 8192 [ 1410.887094][T21071] total_shmem 0 [ 1410.890742][T21071] total_mapped_file 0 [ 1410.894747][T21071] total_dirty 0 [ 1410.898239][T21071] total_writeback 0 [ 1410.902050][T21071] total_workingset_refault_anon 37718 [ 1410.907456][T21071] total_workingset_refault_file 10296 [ 1410.912841][T21071] total_swap 409600 [ 1410.916696][T21071] total_swapcached 8192 [ 1410.920945][T21071] total_pgpgin 3582211 [ 1410.925058][T21071] total_pgpgout 3582208 [ 1410.929228][T21071] total_pgfault 3513579 [ 1410.933386][T21071] total_pgmajfault 17993 [ 1410.937647][T21071] total_inactive_anon 0 [ 1410.941794][T21071] total_active_anon 8192 [ 1410.946050][T21071] total_inactive_file 0 [ 1410.950201][T21071] total_active_file 4096 [ 1410.954435][T21071] total_unevictable 0 [ 1410.958500][T21071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21071,uid=0 [ 1410.973924][T21071] Memory cgroup out of memory: Killed process 21071 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb80d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 05:51:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_u8={{0x21}}], 0x18}, 0x0) 05:51:15 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0x1000000000000, 0x0, 0x10, r0, 0x0) 05:51:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 05:51:15 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x14, 0x0, &(0x7f0000000080)) 05:51:15 executing program 3: r0 = socket(0x23, 0x5, 0x0) write$binfmt_script(r0, 0x0, 0x0) 05:51:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:15 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000140)=ANY=[@ANYRESDEC]) 05:51:15 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0xfffffffff000, 0x0, 0x10, r0, 0x0) 05:51:15 executing program 2: syz_io_uring_setup(0x6c31, &(0x7f0000000040)={0x0, 0xeb63}, &(0x7f00000000c0), &(0x7f0000000100)) [ 1411.822324][T21092] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1411.833796][T21092] CPU: 1 PID: 21092 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1411.844342][T21092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1411.854482][T21092] Call Trace: [ 1411.857819][T21092] [ 1411.860771][T21092] dump_stack_lvl+0xda/0x130 [ 1411.865413][T21092] dump_stack+0x15/0x20 [ 1411.869619][T21092] dump_header+0x82/0x2d0 [ 1411.874024][T21092] oom_kill_process+0x33a/0x4c0 [ 1411.878907][T21092] out_of_memory+0x9ca/0xbf0 [ 1411.883596][T21092] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1411.889745][T21092] mem_cgroup_out_of_memory+0x139/0x190 [ 1411.895331][T21092] try_charge_memcg+0x75c/0xd30 [ 1411.900257][T21092] ? __swap_duplicate+0x29b/0x2b0 [ 1411.905397][T21092] ? radix_tree_lookup+0xf9/0x150 [ 1411.910529][T21092] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1411.916784][T21092] __read_swap_cache_async+0x2f6/0x550 [ 1411.922293][T21092] swap_cluster_readahead+0x27c/0x4c0 [ 1411.927712][T21092] swapin_readahead+0xe9/0x7f0 [ 1411.932645][T21092] ? __filemap_get_folio+0x41a/0x5a0 [ 1411.937985][T21092] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1411.943673][T21092] ? swap_cache_get_folio+0x6e/0x200 [ 1411.949053][T21092] do_swap_page+0x4a0/0x1670 [ 1411.953684][T21092] ? pte_offset_map_nolock+0x124/0x1d0 [ 1411.959246][T21092] handle_mm_fault+0xa36/0x2dd0 [ 1411.964142][T21092] exc_page_fault+0x3ff/0x6c0 [ 1411.968865][T21092] asm_exc_page_fault+0x26/0x30 [ 1411.973741][T21092] RIP: 0033:0x7ff5cf2d6ae4 [ 1411.978183][T21092] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1411.997929][T21092] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1412.004038][T21092] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1412.012047][T21092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1412.020062][T21092] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1412.028092][T21092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000158b1c [ 1412.036102][T21092] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 00000000001587db [ 1412.044110][T21092] [ 1412.047275][T21092] memory: usage 307200kB, limit 307200kB, failcnt 114334 [ 1412.054312][T21092] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 1412.062332][T21092] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1412.069657][T21092] Memory cgroup stats for /syz1: [ 1412.071567][T21092] cache 0 [ 1412.079538][T21092] rss 8192 [ 1412.082572][T21092] shmem 0 [ 1412.085549][T21092] mapped_file 0 [ 1412.089057][T21092] dirty 0 [ 1412.092064][T21092] writeback 8192 [ 1412.095675][T21092] workingset_refault_anon 33350 [ 1412.100543][T21092] workingset_refault_file 2533 [ 1412.105514][T21092] swap 720896 [ 1412.108852][T21092] swapcached 8192 [ 1412.112536][T21092] pgpgin 445864 [ 1412.116045][T21092] pgpgout 445862 [ 1412.119599][T21092] pgfault 441934 [ 1412.123160][T21092] pgmajfault 14118 [ 1412.126937][T21092] inactive_anon 0 [ 1412.130573][T21092] active_anon 0 [ 1412.134102][T21092] inactive_file 0 [ 1412.137858][T21092] active_file 0 [ 1412.141416][T21092] unevictable 0 [ 1412.144908][T21092] hierarchical_memory_limit 314572800 [ 1412.150351][T21092] hierarchical_memsw_limit 9223372036854771712 [ 1412.156566][T21092] total_cache 0 [ 1412.160035][T21092] total_rss 8192 [ 1412.163631][T21092] total_shmem 0 [ 1412.167220][T21092] total_mapped_file 0 [ 1412.171253][T21092] total_dirty 0 [ 1412.174754][T21092] total_writeback 8192 [ 1412.178834][T21092] total_workingset_refault_anon 33350 [ 1412.184284][T21092] total_workingset_refault_file 2533 [ 1412.189641][T21092] total_swap 720896 [ 1412.193455][T21092] total_swapcached 8192 [ 1412.197650][T21092] total_pgpgin 445864 [ 1412.201636][T21092] total_pgpgout 445862 [ 1412.205837][T21092] total_pgfault 441934 [ 1412.209992][T21092] total_pgmajfault 14118 [ 1412.214248][T21092] total_inactive_anon 0 [ 1412.218443][T21092] total_active_anon 0 [ 1412.222430][T21092] total_inactive_file 0 [ 1412.226704][T21092] total_active_file 0 [ 1412.230763][T21092] total_unevictable 0 [ 1412.234834][T21092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21092,uid=0 [ 1412.250183][T21092] Memory cgroup out of memory: Killed process 21092 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1412.362208][T21116] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1412.375800][T21116] CPU: 0 PID: 21116 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1412.386494][T21116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1412.396603][T21116] Call Trace: [ 1412.399897][T21116] [ 1412.402835][T21116] dump_stack_lvl+0xda/0x130 [ 1412.407526][T21116] dump_stack+0x15/0x20 [ 1412.411746][T21116] dump_header+0x82/0x2d0 [ 1412.416139][T21116] oom_kill_process+0x33a/0x4c0 [ 1412.421018][T21116] out_of_memory+0x9ca/0xbf0 [ 1412.425628][T21116] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1412.431776][T21116] mem_cgroup_out_of_memory+0x139/0x190 [ 1412.437469][T21116] try_charge_memcg+0x75c/0xd30 [ 1412.442344][T21116] obj_cgroup_charge_pages+0xab/0x130 [ 1412.447737][T21116] __memcg_kmem_charge_page+0x9c/0x170 [ 1412.453213][T21116] __alloc_pages+0x1bb/0x340 [ 1412.457838][T21116] alloc_pages_mpol+0xb1/0x1d0 [ 1412.462631][T21116] alloc_pages+0xe0/0x100 [ 1412.466976][T21116] __vmalloc_node_range+0x6d2/0xea0 [ 1412.472322][T21116] kvmalloc_node+0x121/0x160 [ 1412.476956][T21116] ? xt_alloc_table_info+0x3d/0x80 [ 1412.482098][T21116] xt_alloc_table_info+0x3d/0x80 [ 1412.487247][T21116] do_arpt_set_ctl+0x634/0x13b0 [ 1412.492188][T21116] ? __futex_wait+0x227/0x280 [ 1412.496940][T21116] ? __futex_wake_mark+0x70/0x70 [ 1412.501946][T21116] ? tcp_release_cb+0xfe/0x370 [ 1412.506793][T21116] ? _raw_spin_unlock_bh+0x36/0x40 [ 1412.511936][T21116] nf_setsockopt+0x18d/0x1b0 [ 1412.516614][T21116] ip_setsockopt+0xe6/0x100 [ 1412.521218][T21116] tcp_setsockopt+0x90/0xa0 [ 1412.525759][T21116] sock_common_setsockopt+0x61/0x70 [ 1412.531008][T21116] ? sock_common_recvmsg+0xe0/0xe0 [ 1412.536170][T21116] __sys_setsockopt+0x1d4/0x240 [ 1412.541033][T21116] __x64_sys_setsockopt+0x66/0x80 [ 1412.546071][T21116] do_syscall_64+0x44/0x110 [ 1412.550701][T21116] ? syscall_exit_to_user_mode+0x38/0x140 [ 1412.556471][T21116] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1412.562505][T21116] RIP: 0033:0x7fa159e9bae9 [ 1412.566964][T21116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1412.586583][T21116] RSP: 002b:00007fa1591fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1412.595007][T21116] RAX: ffffffffffffffda RBX: 00007fa159fbb050 RCX: 00007fa159e9bae9 [ 1412.603260][T21116] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1412.611269][T21116] RBP: 00007fa159ee747a R08: 0000000000000438 R09: 0000000000000000 [ 1412.619245][T21116] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.627223][T21116] R13: 000000000000006e R14: 00007fa159fbb050 R15: 00007ffea5cad6d8 [ 1412.635241][T21116] [ 1412.638362][T21116] memory: usage 307200kB, limit 307200kB, failcnt 188860 [ 1412.645423][T21116] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0 [ 1412.653410][T21116] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1412.660730][T21116] Memory cgroup stats for /syz0: [ 1412.667207][T21116] cache 4096 [ 1412.675414][T21116] rss 8192 [ 1412.678519][T21116] shmem 0 [ 1412.681497][T21116] mapped_file 0 [ 1412.685002][T21116] dirty 0 [ 1412.687947][T21116] writeback 0 [ 1412.691288][T21116] workingset_refault_anon 37762 [ 1412.696174][T21116] workingset_refault_file 10296 [ 1412.701036][T21116] swap 409600 [ 1412.704329][T21116] swapcached 8192 [ 1412.708027][T21116] pgpgin 3586376 [ 1412.711614][T21116] pgpgout 3586373 [ 1412.715272][T21116] pgfault 3517852 [ 1412.718947][T21116] pgmajfault 18013 [ 1412.722675][T21116] inactive_anon 8192 [ 1412.726679][T21116] active_anon 0 [ 1412.730152][T21116] inactive_file 4096 [ 1412.734050][T21116] active_file 0 [ 1412.737629][T21116] unevictable 0 [ 1412.741162][T21116] hierarchical_memory_limit 314572800 [ 1412.746593][T21116] hierarchical_memsw_limit 9223372036854771712 [ 1412.752866][T21116] total_cache 4096 [ 1412.756703][T21116] total_rss 8192 [ 1412.760260][T21116] total_shmem 0 [ 1412.763726][T21116] total_mapped_file 0 [ 1412.767751][T21116] total_dirty 0 [ 1412.771260][T21116] total_writeback 0 [ 1412.775110][T21116] total_workingset_refault_anon 37762 [ 1412.780490][T21116] total_workingset_refault_file 10296 [ 1412.785899][T21116] total_swap 409600 [ 1412.789737][T21116] total_swapcached 8192 [ 1412.793931][T21116] total_pgpgin 3586376 [ 1412.798141][T21116] total_pgpgout 3586373 [ 1412.802297][T21116] total_pgfault 3517852 [ 1412.806477][T21116] total_pgmajfault 18013 [ 1412.810778][T21116] total_inactive_anon 8192 05:51:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xb90d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:17 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000040)={{0x35c, 0x1, 0x18}, './file0\x00'}) 05:51:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[]}) 05:51:17 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 05:51:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:17 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x3, 0x0, 0x0) [ 1412.815231][T21116] total_active_anon 0 [ 1412.819228][T21116] total_inactive_file 4096 [ 1412.823673][T21116] total_active_file 0 [ 1412.827716][T21116] total_unevictable 0 [ 1412.831701][T21116] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21110,uid=0 [ 1412.847045][T21116] Memory cgroup out of memory: Killed process 21110 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x10}]}}}], 0x18}, 0x0) 05:51:17 executing program 4: r0 = socket(0x1, 0x2, 0x0) recvfrom$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:51:17 executing program 2: r0 = socket$inet(0xa, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 05:51:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x5, 0x4, 0x4}, 0x48) 05:51:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) [ 1413.672496][T21126] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1413.686162][T21126] CPU: 0 PID: 21126 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1413.696650][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1413.707774][T21126] Call Trace: [ 1413.711107][T21126] [ 1413.714056][T21126] dump_stack_lvl+0xda/0x130 [ 1413.718730][T21126] dump_stack+0x15/0x20 [ 1413.722985][T21126] dump_header+0x82/0x2d0 [ 1413.727427][T21126] oom_kill_process+0x33a/0x4c0 [ 1413.732327][T21126] out_of_memory+0x9ca/0xbf0 [ 1413.736943][T21126] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1413.743118][T21126] mem_cgroup_out_of_memory+0x139/0x190 [ 1413.748744][T21126] try_charge_memcg+0x75c/0xd30 [ 1413.753708][T21126] obj_cgroup_charge_pages+0xab/0x130 [ 1413.759159][T21126] __memcg_kmem_charge_page+0x9c/0x170 [ 1413.764635][T21126] __alloc_pages+0x1bb/0x340 [ 1413.769235][T21126] alloc_pages_mpol+0xb1/0x1d0 [ 1413.774083][T21126] alloc_pages+0xe0/0x100 [ 1413.778500][T21126] __vmalloc_node_range+0x6d2/0xea0 [ 1413.783791][T21126] kvmalloc_node+0x121/0x160 [ 1413.788471][T21126] ? xt_alloc_table_info+0x3d/0x80 [ 1413.793652][T21126] xt_alloc_table_info+0x3d/0x80 [ 1413.798605][T21126] do_arpt_set_ctl+0x634/0x13b0 [ 1413.803530][T21126] ? __futex_wait+0x227/0x280 [ 1413.808262][T21126] ? __futex_wake_mark+0x70/0x70 [ 1413.813211][T21126] ? tcp_release_cb+0xfe/0x370 [ 1413.818040][T21126] ? _raw_spin_unlock_bh+0x36/0x40 [ 1413.823198][T21126] nf_setsockopt+0x18d/0x1b0 [ 1413.827876][T21126] ip_setsockopt+0xe6/0x100 [ 1413.832485][T21126] tcp_setsockopt+0x90/0xa0 [ 1413.837004][T21126] sock_common_setsockopt+0x61/0x70 [ 1413.842238][T21126] ? sock_common_recvmsg+0xe0/0xe0 [ 1413.847389][T21126] __sys_setsockopt+0x1d4/0x240 [ 1413.852338][T21126] __x64_sys_setsockopt+0x66/0x80 [ 1413.857444][T21126] do_syscall_64+0x44/0x110 [ 1413.861961][T21126] ? syscall_exit_to_user_mode+0x38/0x140 [ 1413.867807][T21126] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1413.873768][T21126] RIP: 0033:0x7ff5cf31cae9 [ 1413.878210][T21126] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1413.897829][T21126] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1413.906298][T21126] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1413.914276][T21126] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1413.922370][T21126] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1413.930444][T21126] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1413.938537][T21126] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1413.946595][T21126] [ 1413.949837][T21126] memory: usage 307200kB, limit 307200kB, failcnt 115046 [ 1413.957165][T21126] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 1413.965095][T21126] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 1413.972560][T21126] Memory cgroup stats for /syz1: [ 1413.997411][T21126] cache 0 [ 1414.005380][T21126] rss 28672 [ 1414.008500][T21126] shmem 0 [ 1414.011461][T21126] mapped_file 0 [ 1414.014956][T21126] dirty 0 [ 1414.017915][T21126] writeback 0 [ 1414.021203][T21126] workingset_refault_anon 33375 [ 1414.026082][T21126] workingset_refault_file 2533 [ 1414.030934][T21126] swap 712704 [ 1414.034231][T21126] swapcached 28672 [ 1414.038277][T21126] pgpgin 445912 [ 1414.041797][T21126] pgpgout 445905 [ 1414.045403][T21126] pgfault 442066 [ 1414.049478][T21126] pgmajfault 14129 [ 1414.053205][T21126] inactive_anon 0 [ 1414.056920][T21126] active_anon 28672 [ 1414.060765][T21126] inactive_file 0 [ 1414.064436][T21126] active_file 0 [ 1414.068014][T21126] unevictable 0 [ 1414.071539][T21126] hierarchical_memory_limit 314572800 [ 1414.076968][T21126] hierarchical_memsw_limit 9223372036854771712 [ 1414.083170][T21126] total_cache 0 [ 1414.086686][T21126] total_rss 28672 [ 1414.090374][T21126] total_shmem 0 [ 1414.093866][T21126] total_mapped_file 0 [ 1414.097950][T21126] total_dirty 0 [ 1414.101417][T21126] total_writeback 0 [ 1414.105286][T21126] total_workingset_refault_anon 33375 [ 1414.110887][T21126] total_workingset_refault_file 2533 [ 1414.116237][T21126] total_swap 712704 [ 1414.120088][T21126] total_swapcached 28672 [ 1414.124336][T21126] total_pgpgin 445912 [ 1414.128394][T21126] total_pgpgout 445905 [ 1414.132503][T21126] total_pgfault 442066 [ 1414.136644][T21126] total_pgmajfault 14129 [ 1414.140968][T21126] total_inactive_anon 0 [ 1414.145181][T21126] total_active_anon 28672 [ 1414.149563][T21126] total_inactive_file 0 [ 1414.153849][T21126] total_active_file 0 [ 1414.157993][T21126] total_unevictable 0 [ 1414.162063][T21126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21125,uid=0 [ 1414.177622][T21126] Memory cgroup out of memory: Killed process 21125 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xba0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:19 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x13, 0x0, 0x0) 05:51:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x0, 0x0, 0x6}, 0x48) 05:51:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:19 executing program 3: socket$inet(0x2, 0x2, 0x88) 05:51:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000003a40), 0x20) 05:51:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:19 executing program 4: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xa, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x20) 05:51:19 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB="96"]) [ 1415.213388][T21160] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1415.226982][T21160] CPU: 0 PID: 21160 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1415.237475][T21160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1415.247564][T21160] Call Trace: [ 1415.250861][T21160] [ 1415.253812][T21160] dump_stack_lvl+0xda/0x130 [ 1415.258460][T21160] dump_stack+0x15/0x20 [ 1415.262712][T21160] dump_header+0x82/0x2d0 [ 1415.267095][T21160] oom_kill_process+0x33a/0x4c0 [ 1415.272027][T21160] out_of_memory+0x9ca/0xbf0 [ 1415.276697][T21160] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1415.282803][T21160] mem_cgroup_out_of_memory+0x139/0x190 [ 1415.288488][T21160] try_charge_memcg+0x75c/0xd30 [ 1415.293398][T21160] obj_cgroup_charge_pages+0xab/0x130 [ 1415.298812][T21160] __memcg_kmem_charge_page+0x9c/0x170 [ 1415.304311][T21160] __alloc_pages+0x1bb/0x340 [ 1415.308969][T21160] alloc_pages_mpol+0xb1/0x1d0 [ 1415.313762][T21160] alloc_pages+0xe0/0x100 [ 1415.318131][T21160] __vmalloc_node_range+0x6d2/0xea0 [ 1415.323369][T21160] kvmalloc_node+0x121/0x160 [ 1415.328010][T21160] ? xt_alloc_table_info+0x3d/0x80 [ 1415.333215][T21160] xt_alloc_table_info+0x3d/0x80 [ 1415.338213][T21160] do_arpt_set_ctl+0x634/0x13b0 [ 1415.343198][T21160] ? __futex_wait+0x227/0x280 [ 1415.347924][T21160] ? __futex_wake_mark+0x70/0x70 [ 1415.352872][T21160] ? tcp_release_cb+0xfe/0x370 [ 1415.357687][T21160] ? _raw_spin_unlock_bh+0x36/0x40 [ 1415.362820][T21160] nf_setsockopt+0x18d/0x1b0 [ 1415.367448][T21160] ip_setsockopt+0xe6/0x100 [ 1415.371972][T21160] tcp_setsockopt+0x90/0xa0 [ 1415.376527][T21160] sock_common_setsockopt+0x61/0x70 [ 1415.381768][T21160] ? sock_common_recvmsg+0xe0/0xe0 [ 1415.386931][T21160] __sys_setsockopt+0x1d4/0x240 [ 1415.391799][T21160] __x64_sys_setsockopt+0x66/0x80 [ 1415.396861][T21160] do_syscall_64+0x44/0x110 [ 1415.401381][T21160] ? syscall_exit_to_user_mode+0x38/0x140 [ 1415.407139][T21160] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1415.413144][T21160] RIP: 0033:0x7ff5cf31cae9 [ 1415.417568][T21160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1415.437185][T21160] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1415.445603][T21160] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1415.453584][T21160] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1415.461769][T21160] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1415.469783][T21160] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.477759][T21160] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1415.485760][T21160] [ 1415.488869][T21160] memory: usage 307200kB, limit 307200kB, failcnt 115137 [ 1415.495921][T21160] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 1415.503828][T21160] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1415.511141][T21160] Memory cgroup stats for /syz1: [ 1415.511853][T21160] cache 0 [ 1415.519811][T21160] rss 8192 [ 1415.522841][T21160] shmem 0 [ 1415.525820][T21160] mapped_file 0 [ 1415.529281][T21160] dirty 0 [ 1415.532223][T21160] writeback 0 [ 1415.535610][T21160] workingset_refault_anon 33412 [ 1415.540464][T21160] workingset_refault_file 2533 [ 1415.545269][T21160] swap 684032 [ 1415.548560][T21160] swapcached 16384 [ 1415.552288][T21160] pgpgin 445972 [ 1415.555764][T21160] pgpgout 445968 [ 1415.559312][T21160] pgfault 442194 [ 1415.562925][T21160] pgmajfault 14151 [ 1415.566664][T21160] inactive_anon 16384 [ 1415.570672][T21160] active_anon 0 [ 1415.574220][T21160] inactive_file 0 [ 1415.577928][T21160] active_file 0 [ 1415.581392][T21160] unevictable 0 [ 1415.584883][T21160] hierarchical_memory_limit 314572800 [ 1415.590314][T21160] hierarchical_memsw_limit 9223372036854771712 [ 1415.596515][T21160] total_cache 0 [ 1415.599981][T21160] total_rss 8192 [ 1415.603564][T21160] total_shmem 0 [ 1415.607137][T21160] total_mapped_file 0 [ 1415.611140][T21160] total_dirty 0 [ 1415.614716][T21160] total_writeback 0 [ 1415.618537][T21160] total_workingset_refault_anon 33412 [ 1415.623922][T21160] total_workingset_refault_file 2533 [ 1415.629298][T21160] total_swap 684032 [ 1415.633203][T21160] total_swapcached 16384 [ 1415.637554][T21160] total_pgpgin 445972 [ 1415.641540][T21160] total_pgpgout 445968 [ 1415.645810][T21160] total_pgfault 442194 [ 1415.649900][T21160] total_pgmajfault 14151 [ 1415.654151][T21160] total_inactive_anon 16384 [ 1415.658693][T21160] total_active_anon 0 [ 1415.662683][T21160] total_inactive_file 0 [ 1415.666896][T21160] total_active_file 0 [ 1415.670941][T21160] total_unevictable 0 [ 1415.674957][T21160] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21159,uid=0 [ 1415.690406][T21160] Memory cgroup out of memory: Killed process 21159 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xbb0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:20 executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:20 executing program 3: r0 = io_uring_setup(0x2004, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0x30, 0x2], 0x2) 05:51:20 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) 05:51:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:20 executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:20 executing program 4: r0 = socket(0x23, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x26) 05:51:20 executing program 3: sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) 05:51:20 executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x0, 0x4, 0x0, 0x4}, 0x48) 05:51:20 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) [ 1416.679020][T21187] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1416.690420][T21187] CPU: 0 PID: 21187 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1416.700856][T21187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1416.710932][T21187] Call Trace: [ 1416.714269][T21187] [ 1416.717214][T21187] dump_stack_lvl+0xda/0x130 [ 1416.721839][T21187] dump_stack+0x15/0x20 [ 1416.726027][T21187] dump_header+0x82/0x2d0 [ 1416.730398][T21187] oom_kill_process+0x33a/0x4c0 [ 1416.735286][T21187] out_of_memory+0x9ca/0xbf0 [ 1416.739987][T21187] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1416.746167][T21187] mem_cgroup_out_of_memory+0x139/0x190 [ 1416.751819][T21187] try_charge_memcg+0x75c/0xd30 [ 1416.756733][T21187] ? __swap_duplicate+0x29b/0x2b0 [ 1416.761933][T21187] ? radix_tree_lookup+0xf9/0x150 [ 1416.767024][T21187] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1416.773133][T21187] __read_swap_cache_async+0x2f6/0x550 [ 1416.778626][T21187] swap_cluster_readahead+0x27c/0x4c0 [ 1416.784034][T21187] swapin_readahead+0xe9/0x7f0 [ 1416.788930][T21187] ? __filemap_get_folio+0x41a/0x5a0 [ 1416.794270][T21187] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1416.800004][T21187] ? swap_cache_get_folio+0x6e/0x200 [ 1416.805351][T21187] do_swap_page+0x4a0/0x1670 [ 1416.810004][T21187] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1416.815345][T21187] ? __rcu_read_lock+0x35/0x50 [ 1416.820147][T21187] ? pte_offset_map_nolock+0x124/0x1d0 [ 1416.825678][T21187] handle_mm_fault+0xa36/0x2dd0 [ 1416.830617][T21187] exc_page_fault+0x3ff/0x6c0 [ 1416.835488][T21187] asm_exc_page_fault+0x26/0x30 [ 1416.840369][T21187] RIP: 0033:0x7ff5cf2d6ae4 [ 1416.844824][T21187] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1416.864455][T21187] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1416.870613][T21187] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1416.878643][T21187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1416.886640][T21187] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1416.894636][T21187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000159e2c [ 1416.902808][T21187] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000159aeb [ 1416.910809][T21187] [ 1416.913929][T21187] memory: usage 307200kB, limit 307200kB, failcnt 115260 [ 1416.921091][T21187] memory+swap: usage 307872kB, limit 9007199254740988kB, failcnt 0 [ 1416.929007][T21187] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1416.936409][T21187] Memory cgroup stats for /syz1: [ 1416.936596][T21187] cache 0 [ 1416.944490][T21187] rss 8192 [ 1416.947559][T21187] shmem 0 [ 1416.950534][T21187] mapped_file 0 [ 1416.953987][T21187] dirty 0 [ 1416.956972][T21187] writeback 8192 [ 1416.960571][T21187] workingset_refault_anon 33459 [ 1416.965455][T21187] workingset_refault_file 2533 [ 1416.970332][T21187] swap 688128 [ 1416.973716][T21187] swapcached 16384 [ 1416.977460][T21187] pgpgin 446042 [ 1416.980923][T21187] pgpgout 446038 [ 1416.984488][T21187] pgfault 442354 [ 1416.988069][T21187] pgmajfault 14171 [ 1416.991864][T21187] inactive_anon 8192 [ 1416.995882][T21187] active_anon 0 [ 1416.999348][T21187] inactive_file 0 [ 1417.002984][T21187] active_file 0 [ 1417.006485][T21187] unevictable 0 [ 1417.009953][T21187] hierarchical_memory_limit 314572800 [ 1417.015346][T21187] hierarchical_memsw_limit 9223372036854771712 [ 1417.021503][T21187] total_cache 0 [ 1417.025119][T21187] total_rss 8192 [ 1417.028703][T21187] total_shmem 0 [ 1417.032224][T21187] total_mapped_file 0 [ 1417.036246][T21187] total_dirty 0 [ 1417.039805][T21187] total_writeback 8192 [ 1417.043878][T21187] total_workingset_refault_anon 33459 [ 1417.049282][T21187] total_workingset_refault_file 2533 [ 1417.054615][T21187] total_swap 688128 [ 1417.058518][T21187] total_swapcached 16384 [ 1417.062843][T21187] total_pgpgin 446042 [ 1417.066883][T21187] total_pgpgout 446038 [ 1417.071002][T21187] total_pgfault 442354 [ 1417.075102][T21187] total_pgmajfault 14171 [ 1417.079370][T21187] total_inactive_anon 8192 [ 1417.083777][T21187] total_active_anon 0 [ 1417.087787][T21187] total_inactive_file 0 [ 1417.092072][T21187] total_active_file 0 [ 1417.096072][T21187] total_unevictable 0 [ 1417.100056][T21187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21187,uid=0 [ 1417.115396][T21187] Memory cgroup out of memory: Killed process 21187 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1417.132747][T21191] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1417.146494][T21191] CPU: 1 PID: 21191 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1417.157019][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1417.167217][T21191] Call Trace: [ 1417.170523][T21191] [ 1417.173459][T21191] dump_stack_lvl+0xda/0x130 [ 1417.178147][T21191] dump_stack+0x15/0x20 [ 1417.182351][T21191] dump_header+0x82/0x2d0 [ 1417.186735][T21191] oom_kill_process+0x33a/0x4c0 [ 1417.191661][T21191] out_of_memory+0x9ca/0xbf0 [ 1417.196278][T21191] mem_cgroup_out_of_memory+0x139/0x190 [ 1417.201870][T21191] try_charge_memcg+0x75c/0xd30 [ 1417.206783][T21191] obj_cgroup_charge_pages+0xab/0x130 [ 1417.212179][T21191] __memcg_kmem_charge_page+0x9c/0x170 [ 1417.217693][T21191] __alloc_pages+0x1bb/0x340 [ 1417.222301][T21191] alloc_pages_mpol+0xb1/0x1d0 [ 1417.227088][T21191] alloc_pages+0xe0/0x100 [ 1417.231447][T21191] __vmalloc_node_range+0x6d2/0xea0 [ 1417.236758][T21191] kvmalloc_node+0x121/0x160 [ 1417.241359][T21191] ? xt_alloc_table_info+0x3d/0x80 [ 1417.246524][T21191] xt_alloc_table_info+0x3d/0x80 [ 1417.251710][T21191] do_arpt_set_ctl+0x634/0x13b0 [ 1417.256703][T21191] ? __futex_wait+0x227/0x280 [ 1417.261493][T21191] ? __futex_wake_mark+0x70/0x70 [ 1417.266471][T21191] ? tcp_release_cb+0xfe/0x370 [ 1417.271269][T21191] ? _raw_spin_unlock_bh+0x36/0x40 [ 1417.276563][T21191] nf_setsockopt+0x18d/0x1b0 [ 1417.281265][T21191] ip_setsockopt+0xe6/0x100 [ 1417.285789][T21191] tcp_setsockopt+0x90/0xa0 [ 1417.290436][T21191] sock_common_setsockopt+0x61/0x70 [ 1417.295704][T21191] ? sock_common_recvmsg+0xe0/0xe0 [ 1417.300989][T21191] __sys_setsockopt+0x1d4/0x240 [ 1417.305910][T21191] __x64_sys_setsockopt+0x66/0x80 [ 1417.310945][T21191] do_syscall_64+0x44/0x110 [ 1417.315546][T21191] ? syscall_exit_to_user_mode+0x38/0x140 [ 1417.321307][T21191] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1417.327290][T21191] RIP: 0033:0x7fa159e9bae9 [ 1417.331735][T21191] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1417.351527][T21191] RSP: 002b:00007fa1591fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1417.360013][T21191] RAX: ffffffffffffffda RBX: 00007fa159fbb050 RCX: 00007fa159e9bae9 [ 1417.368067][T21191] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1417.376069][T21191] RBP: 00007fa159ee747a R08: 0000000000000438 R09: 0000000000000000 [ 1417.384059][T21191] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1417.392036][T21191] R13: 000000000000006e R14: 00007fa159fbb050 R15: 00007ffea5cad6d8 [ 1417.400150][T21191] [ 1417.403423][T21191] memory: usage 307088kB, limit 307200kB, failcnt 190336 [ 1417.410600][T21191] memory+swap: usage 307528kB, limit 9007199254740988kB, failcnt 0 [ 1417.418606][T21191] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 1417.425996][T21191] Memory cgroup stats for /syz0: [ 1417.430563][T21191] cache 4096 [ 1417.438809][T21191] rss 0 [ 1417.441574][T21191] shmem 0 [ 1417.444576][T21191] mapped_file 0 [ 1417.448124][T21191] dirty 0 [ 1417.451124][T21191] writeback 0 [ 1417.454421][T21191] workingset_refault_anon 37921 [ 1417.459420][T21191] workingset_refault_file 10296 [ 1417.464310][T21191] swap 450560 [ 1417.467651][T21191] swapcached 0 [ 1417.471073][T21191] pgpgin 3598898 [ 1417.474801][T21191] pgpgout 3598897 [ 1417.478440][T21191] pgfault 3530615 [ 1417.482081][T21191] pgmajfault 18087 [ 1417.485895][T21191] inactive_anon 0 [ 1417.489535][T21191] active_anon 0 [ 1417.493001][T21191] inactive_file 0 [ 1417.496685][T21191] active_file 4096 [ 1417.500475][T21191] unevictable 0 [ 1417.503943][T21191] hierarchical_memory_limit 314572800 [ 1417.509476][T21191] hierarchical_memsw_limit 9223372036854771712 [ 1417.515735][T21191] total_cache 4096 [ 1417.519464][T21191] total_rss 0 [ 1417.522759][T21191] total_shmem 0 [ 1417.526247][T21191] total_mapped_file 0 [ 1417.530329][T21191] total_dirty 0 [ 1417.533802][T21191] total_writeback 0 [ 1417.537677][T21191] total_workingset_refault_anon 37921 [ 1417.543057][T21191] total_workingset_refault_file 10296 [ 1417.548459][T21191] total_swap 450560 [ 1417.552334][T21191] total_swapcached 0 [ 1417.556303][T21191] total_pgpgin 3598898 [ 1417.560395][T21191] total_pgpgout 3598897 [ 1417.564585][T21191] total_pgfault 3530615 [ 1417.568806][T21191] total_pgmajfault 18087 [ 1417.573152][T21191] total_inactive_anon 0 [ 1417.577452][T21191] total_active_anon 0 05:51:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xbc0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x0, 0x107b}, 0x48) 05:51:22 executing program 3: r0 = socket(0x1, 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, 0x0) 05:51:22 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) [ 1417.581449][T21191] total_inactive_file 0 [ 1417.585644][T21191] total_active_file 4096 [ 1417.589913][T21191] total_unevictable 0 [ 1417.593895][T21191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21177,uid=0 [ 1417.609366][T21191] Memory cgroup out of memory: Killed process 21177 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:22 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) setresuid(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 05:51:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:22 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:22 executing program 4: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x7, 0x0, 0x0) 05:51:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x10) 05:51:22 executing program 4: io_uring_setup(0x6012, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000000)={0xe}, 0x0, 0x0, 0x0, 0x0) 05:51:22 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) [ 1418.427866][T21210] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1418.439311][T21210] CPU: 1 PID: 21210 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1418.449760][T21210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1418.460240][T21210] Call Trace: [ 1418.463559][T21210] [ 1418.466513][T21210] dump_stack_lvl+0xda/0x130 [ 1418.471146][T21210] dump_stack+0x15/0x20 [ 1418.475406][T21210] dump_header+0x82/0x2d0 [ 1418.479774][T21210] oom_kill_process+0x33a/0x4c0 [ 1418.484736][T21210] out_of_memory+0x9ca/0xbf0 [ 1418.489453][T21210] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1418.495609][T21210] mem_cgroup_out_of_memory+0x139/0x190 [ 1418.501387][T21210] try_charge_memcg+0x75c/0xd30 [ 1418.506268][T21210] ? __swap_duplicate+0x29b/0x2b0 [ 1418.511401][T21210] ? radix_tree_lookup+0xf9/0x150 [ 1418.516554][T21210] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1418.522654][T21210] __read_swap_cache_async+0x2f6/0x550 [ 1418.528262][T21210] swap_cluster_readahead+0x27c/0x4c0 [ 1418.533740][T21210] swapin_readahead+0xe9/0x7f0 [ 1418.538607][T21210] ? __filemap_get_folio+0x41a/0x5a0 [ 1418.543918][T21210] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1418.549681][T21210] ? swap_cache_get_folio+0x6e/0x200 [ 1418.555035][T21210] do_swap_page+0x4a0/0x1670 [ 1418.559734][T21210] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1418.565081][T21210] ? __rcu_read_lock+0x35/0x50 [ 1418.569890][T21210] ? pte_offset_map_nolock+0x124/0x1d0 [ 1418.575460][T21210] handle_mm_fault+0xa36/0x2dd0 [ 1418.580463][T21210] exc_page_fault+0x3ff/0x6c0 [ 1418.585226][T21210] asm_exc_page_fault+0x26/0x30 [ 1418.590101][T21210] RIP: 0033:0x7ff5cf2d6ae4 [ 1418.594600][T21210] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1418.614242][T21210] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1418.620495][T21210] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1418.628493][T21210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1418.636484][T21210] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1418.644478][T21210] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015a511 [ 1418.652480][T21210] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015a1d0 [ 1418.660625][T21210] [ 1418.663814][T21210] memory: usage 307200kB, limit 307200kB, failcnt 115349 [ 1418.670936][T21210] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 1418.678883][T21210] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1418.686301][T21210] Memory cgroup stats for /syz1: [ 1418.688776][T21210] cache 0 [ 1418.696695][T21210] rss 8192 [ 1418.699763][T21210] shmem 0 [ 1418.702792][T21210] mapped_file 0 [ 1418.706292][T21210] dirty 0 [ 1418.709308][T21210] writeback 8192 [ 1418.712917][T21210] workingset_refault_anon 33525 [ 1418.717816][T21210] workingset_refault_file 2533 [ 1418.722583][T21210] swap 733184 [ 1418.725931][T21210] swapcached 20480 [ 1418.729709][T21210] pgpgin 446131 [ 1418.733275][T21210] pgpgout 446126 [ 1418.736905][T21210] pgfault 442515 [ 1418.740491][T21210] pgmajfault 14189 [ 1418.744259][T21210] inactive_anon 0 [ 1418.747968][T21210] active_anon 0 [ 1418.751490][T21210] inactive_file 0 [ 1418.755150][T21210] active_file 0 [ 1418.758679][T21210] unevictable 0 [ 1418.762177][T21210] hierarchical_memory_limit 314572800 [ 1418.767615][T21210] hierarchical_memsw_limit 9223372036854771712 [ 1418.773816][T21210] total_cache 0 [ 1418.777317][T21210] total_rss 8192 [ 1418.780926][T21210] total_shmem 0 [ 1418.784389][T21210] total_mapped_file 0 [ 1418.788425][T21210] total_dirty 0 [ 1418.792017][T21210] total_writeback 8192 [ 1418.796144][T21210] total_workingset_refault_anon 33525 [ 1418.801647][T21210] total_workingset_refault_file 2533 [ 1418.806973][T21210] total_swap 733184 [ 1418.810792][T21210] total_swapcached 20480 [ 1418.815116][T21210] total_pgpgin 446131 [ 1418.819104][T21210] total_pgpgout 446126 [ 1418.823174][T21210] total_pgfault 442515 [ 1418.827315][T21210] total_pgmajfault 14189 [ 1418.831564][T21210] total_inactive_anon 0 [ 1418.835788][T21210] total_active_anon 0 [ 1418.839778][T21210] total_inactive_file 0 [ 1418.843944][T21210] total_active_file 0 [ 1418.847969][T21210] total_unevictable 0 [ 1418.852030][T21210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21210,uid=0 [ 1418.867357][T21210] Memory cgroup out of memory: Killed process 21210 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1418.937131][T21229] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1418.950889][T21229] CPU: 0 PID: 21229 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1418.961361][T21229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1418.971453][T21229] Call Trace: [ 1418.974785][T21229] [ 1418.977732][T21229] dump_stack_lvl+0xda/0x130 [ 1418.982360][T21229] dump_stack+0x15/0x20 [ 1418.986590][T21229] dump_header+0x82/0x2d0 [ 1418.990948][T21229] oom_kill_process+0x33a/0x4c0 [ 1418.995822][T21229] out_of_memory+0x9ca/0xbf0 [ 1419.000430][T21229] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1419.006594][T21229] mem_cgroup_out_of_memory+0x139/0x190 [ 1419.012232][T21229] try_charge_memcg+0x75c/0xd30 [ 1419.017226][T21229] obj_cgroup_charge_pages+0xab/0x130 [ 1419.022650][T21229] __memcg_kmem_charge_page+0x9c/0x170 [ 1419.028194][T21229] __alloc_pages+0x1bb/0x340 [ 1419.032912][T21229] alloc_pages_mpol+0xb1/0x1d0 [ 1419.037707][T21229] alloc_pages+0xe0/0x100 [ 1419.042182][T21229] __vmalloc_node_range+0x6d2/0xea0 [ 1419.047429][T21229] kvmalloc_node+0x121/0x160 [ 1419.052122][T21229] ? xt_alloc_table_info+0x3d/0x80 [ 1419.057265][T21229] xt_alloc_table_info+0x3d/0x80 [ 1419.062269][T21229] do_arpt_set_ctl+0x634/0x13b0 [ 1419.067193][T21229] ? __futex_wait+0x227/0x280 [ 1419.071894][T21229] ? __futex_wake_mark+0x70/0x70 [ 1419.076963][T21229] ? tcp_release_cb+0xfe/0x370 [ 1419.081761][T21229] ? _raw_spin_unlock_bh+0x36/0x40 [ 1419.086946][T21229] nf_setsockopt+0x18d/0x1b0 [ 1419.091578][T21229] ip_setsockopt+0xe6/0x100 [ 1419.096129][T21229] tcp_setsockopt+0x90/0xa0 [ 1419.100666][T21229] sock_common_setsockopt+0x61/0x70 [ 1419.105964][T21229] ? sock_common_recvmsg+0xe0/0xe0 [ 1419.111204][T21229] __sys_setsockopt+0x1d4/0x240 [ 1419.116067][T21229] __x64_sys_setsockopt+0x66/0x80 [ 1419.121179][T21229] do_syscall_64+0x44/0x110 [ 1419.125824][T21229] ? syscall_exit_to_user_mode+0x38/0x140 [ 1419.131564][T21229] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1419.137526][T21229] RIP: 0033:0x7fa159e9bae9 [ 1419.141959][T21229] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1419.161576][T21229] RSP: 002b:00007fa1591fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1419.170068][T21229] RAX: ffffffffffffffda RBX: 00007fa159fbb050 RCX: 00007fa159e9bae9 [ 1419.178112][T21229] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1419.186121][T21229] RBP: 00007fa159ee747a R08: 0000000000000438 R09: 0000000000000000 [ 1419.194110][T21229] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.202090][T21229] R13: 000000000000006e R14: 00007fa159fbb050 R15: 00007ffea5cad6d8 [ 1419.210076][T21229] [ 1419.213334][T21229] memory: usage 307200kB, limit 307200kB, failcnt 190526 [ 1419.220411][T21229] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 1419.228326][T21229] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 05:51:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xbd0d0000, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x10) 05:51:23 executing program 3: setresuid(0xee00, 0x0, 0xee01) setresuid(0xffffffffffffffff, 0xee00, 0x0) r0 = getuid() r1 = getuid() r2 = getuid() setresuid(r0, r1, r2) 05:51:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:23 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="010180000000000018"]) [ 1419.235769][T21229] Memory cgroup stats for /syz0: [ 1419.235983][T21229] cache 8192 [ 1419.244364][T21229] rss 12288 [ 1419.247519][T21229] shmem 4096 [ 1419.250882][T21229] mapped_file 4096 [ 1419.254617][T21229] dirty 0 [ 1419.257760][T21229] writeback 0 [ 1419.261056][T21229] workingset_refault_anon 37983 [ 1419.265960][T21229] workingset_refault_file 10296 [ 1419.270896][T21229] swap 401408 [ 1419.274187][T21229] swapcached 12288 [ 1419.278027][T21229] pgpgin 3603081 [ 1419.281590][T21229] pgpgout 3603076 [ 1419.283096][T21239] autofs4:pid:21239:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(8388865.0), cmd(0xc0189374) [ 1419.285268][T21229] pgfault 3534896 [ 1419.285278][T21229] pgmajfault 18115 [ 1419.285286][T21229] inactive_anon 16384 [ 1419.285294][T21229] active_anon 0 [ 1419.285301][T21229] inactive_file 4096 [ 1419.285334][T21229] active_file 0 [ 1419.285342][T21229] unevictable 0 [ 1419.299508][T21239] autofs4:pid:21239:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1419.302658][T21229] hierarchical_memory_limit 314572800 [ 1419.341725][T21229] hierarchical_memsw_limit 9223372036854771712 [ 1419.347932][T21229] total_cache 8192 [ 1419.351678][T21229] total_rss 12288 [ 1419.355381][T21229] total_shmem 4096 [ 1419.359108][T21229] total_mapped_file 4096 [ 1419.363449][T21229] total_dirty 0 [ 1419.366951][T21229] total_writeback 0 [ 1419.370768][T21229] total_workingset_refault_anon 37983 [ 1419.376208][T21229] total_workingset_refault_file 10296 [ 1419.381676][T21229] total_swap 401408 05:51:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x86, 0x2}]}}}], 0x18}, 0x0) [ 1419.385599][T21229] total_swapcached 12288 [ 1419.389855][T21229] total_pgpgin 3603081 [ 1419.393992][T21229] total_pgpgout 3603076 [ 1419.398201][T21229] total_pgfault 3534896 [ 1419.402362][T21229] total_pgmajfault 18115 [ 1419.406638][T21229] total_inactive_anon 16384 [ 1419.411159][T21229] total_active_anon 0 [ 1419.415202][T21229] total_inactive_file 4096 [ 1419.419651][T21229] total_active_file 0 [ 1419.423668][T21229] total_unevictable 0 [ 1419.427710][T21229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21220,uid=0 [ 1419.443188][T21229] Memory cgroup out of memory: Killed process 21220 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:24 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) 05:51:24 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) 05:51:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x10) 05:51:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:24 executing program 3: mq_open(&(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0, 0x0) 05:51:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) [ 1420.161583][T21235] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1420.172964][T21235] CPU: 1 PID: 21235 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1420.183404][T21235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1420.193571][T21235] Call Trace: [ 1420.196908][T21235] [ 1420.199913][T21235] dump_stack_lvl+0xda/0x130 [ 1420.204654][T21235] dump_stack+0x15/0x20 [ 1420.208862][T21235] dump_header+0x82/0x2d0 [ 1420.213271][T21235] oom_kill_process+0x33a/0x4c0 [ 1420.218198][T21235] out_of_memory+0x9ca/0xbf0 [ 1420.222824][T21235] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1420.228988][T21235] mem_cgroup_out_of_memory+0x139/0x190 [ 1420.234603][T21235] try_charge_memcg+0x75c/0xd30 [ 1420.239477][T21235] ? __swap_duplicate+0x29b/0x2b0 [ 1420.244525][T21235] ? radix_tree_lookup+0xf9/0x150 [ 1420.249563][T21235] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1420.255643][T21235] __read_swap_cache_async+0x2f6/0x550 [ 1420.261160][T21235] swap_cluster_readahead+0x452/0x4c0 [ 1420.266619][T21235] swapin_readahead+0xe9/0x7f0 [ 1420.271390][T21235] ? __filemap_get_folio+0x41a/0x5a0 [ 1420.276786][T21235] ? _raw_spin_unlock+0x26/0x40 [ 1420.281707][T21235] ? swap_cache_get_folio+0x6e/0x200 [ 1420.287051][T21235] do_swap_page+0x4a0/0x1670 [ 1420.291701][T21235] ? __rcu_read_lock+0x35/0x50 [ 1420.296531][T21235] ? pte_offset_map_nolock+0x124/0x1d0 [ 1420.302017][T21235] handle_mm_fault+0xa36/0x2dd0 [ 1420.306975][T21235] exc_page_fault+0x3ff/0x6c0 [ 1420.311764][T21235] asm_exc_page_fault+0x26/0x30 [ 1420.316623][T21235] RIP: 0033:0x7ff5cf2d6ae4 [ 1420.321109][T21235] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1420.340724][T21235] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1420.346812][T21235] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1420.354827][T21235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1420.362857][T21235] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1420.370910][T21235] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015ab7d [ 1420.378907][T21235] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015a83c [ 1420.386888][T21235] [ 1420.390226][T21235] memory: usage 307200kB, limit 307200kB, failcnt 115526 [ 1420.397299][T21235] memory+swap: usage 307876kB, limit 9007199254740988kB, failcnt 0 [ 1420.405280][T21235] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1420.412575][T21235] Memory cgroup stats for /syz1: [ 1420.412756][T21235] cache 0 [ 1420.420737][T21235] rss 8192 [ 1420.423834][T21235] shmem 0 [ 1420.426885][T21235] mapped_file 0 [ 1420.430406][T21235] dirty 0 [ 1420.433429][T21235] writeback 0 [ 1420.436779][T21235] workingset_refault_anon 33561 [ 1420.441634][T21235] workingset_refault_file 2533 [ 1420.446475][T21235] swap 692224 [ 1420.449989][T21235] swapcached 8192 [ 1420.453694][T21235] pgpgin 446190 [ 1420.457183][T21235] pgpgout 446188 [ 1420.460725][T21235] pgfault 442665 [ 1420.464332][T21235] pgmajfault 14201 [ 1420.468193][T21235] inactive_anon 0 [ 1420.471830][T21235] active_anon 0 [ 1420.475379][T21235] inactive_file 0 [ 1420.479069][T21235] active_file 0 [ 1420.482566][T21235] unevictable 0 [ 1420.486056][T21235] hierarchical_memory_limit 314572800 [ 1420.491468][T21235] hierarchical_memsw_limit 9223372036854771712 [ 1420.497680][T21235] total_cache 0 [ 1420.501145][T21235] total_rss 8192 [ 1420.504728][T21235] total_shmem 0 [ 1420.508198][T21235] total_mapped_file 0 [ 1420.512195][T21235] total_dirty 0 [ 1420.515676][T21235] total_writeback 0 [ 1420.519497][T21235] total_workingset_refault_anon 33561 [ 1420.524930][T21235] total_workingset_refault_file 2533 [ 1420.530227][T21235] total_swap 692224 [ 1420.534116][T21235] total_swapcached 8192 [ 1420.538315][T21235] total_pgpgin 446190 [ 1420.542944][T21235] total_pgpgout 446188 [ 1420.547070][T21235] total_pgfault 442665 [ 1420.551248][T21235] total_pgmajfault 14201 [ 1420.555539][T21235] total_inactive_anon 0 [ 1420.559728][T21235] total_active_anon 0 [ 1420.564074][T21235] total_inactive_file 0 [ 1420.568274][T21235] total_active_file 0 [ 1420.572270][T21235] total_unevictable 0 [ 1420.576318][T21235] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21235,uid=0 [ 1420.591768][T21235] Memory cgroup out of memory: Killed process 21235 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:25 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x801c581f, 0x0) 05:51:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xf4ffffff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 05:51:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:25 executing program 3: socket$inet(0xa, 0x2, 0x73) 05:51:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xa, 0x0, &(0x7f0000000080)) 05:51:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_u8={{0x18}}], 0x18}, 0x0) 05:51:25 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:51:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000), 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, 0x0, &(0x7f0000000080)) [ 1421.717611][T21275] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1421.728982][T21275] CPU: 1 PID: 21275 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1421.739543][T21275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1421.749620][T21275] Call Trace: [ 1421.752915][T21275] [ 1421.755917][T21275] dump_stack_lvl+0xda/0x130 [ 1421.760568][T21275] dump_stack+0x15/0x20 [ 1421.764757][T21275] dump_header+0x82/0x2d0 [ 1421.769118][T21275] oom_kill_process+0x33a/0x4c0 [ 1421.774030][T21275] out_of_memory+0x9ca/0xbf0 [ 1421.778674][T21275] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1421.784784][T21275] mem_cgroup_out_of_memory+0x139/0x190 [ 1421.790358][T21275] try_charge_memcg+0x75c/0xd30 [ 1421.795283][T21275] ? __swap_duplicate+0x29b/0x2b0 [ 1421.800466][T21275] ? radix_tree_lookup+0xf9/0x150 [ 1421.805571][T21275] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1421.811681][T21275] __read_swap_cache_async+0x2f6/0x550 [ 1421.817225][T21275] swap_cluster_readahead+0x27c/0x4c0 [ 1421.823188][T21275] swapin_readahead+0xe9/0x7f0 [ 1421.827985][T21275] ? __filemap_get_folio+0x41a/0x5a0 [ 1421.833491][T21275] ? swap_cache_get_folio+0x6e/0x200 [ 1421.838857][T21275] do_swap_page+0x4a0/0x1670 [ 1421.843471][T21275] ? asm_exc_page_fault+0x26/0x30 [ 1421.848518][T21275] ? __rcu_read_lock+0x35/0x50 [ 1421.853363][T21275] ? pte_offset_map_nolock+0x124/0x1d0 [ 1421.858904][T21275] handle_mm_fault+0xa36/0x2dd0 [ 1421.863850][T21275] exc_page_fault+0x3ff/0x6c0 [ 1421.868610][T21275] asm_exc_page_fault+0x26/0x30 [ 1421.873544][T21275] RIP: 0033:0x7ff5cf2d6abd [ 1421.878028][T21275] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6e 16 00 00 0f 8e 12 ff ff ff e8 2c 08 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 [ 1421.897674][T21275] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010202 [ 1421.903901][T21275] RAX: 000000000015b188 RBX: 00007ff5cf43d980 RCX: 000000000015aec8 [ 1421.911960][T21275] RDX: 00000000000002c0 RSI: 00007ffe2f8462a0 RDI: 7fffffffffffffff [ 1421.920031][T21275] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1421.928062][T21275] R10: 00007ffe2f8f8080 R11: 000000000004158e R12: 000000000015b1df [ 1421.936134][T21275] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015ae9e [ 1421.944142][T21275] [ 1421.947434][T21275] memory: usage 307200kB, limit 307200kB, failcnt 116261 [ 1421.954588][T21275] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 1421.962531][T21275] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1421.969911][T21275] Memory cgroup stats for /syz1: [ 1421.970152][T21275] cache 0 [ 1421.978102][T21275] rss 8192 [ 1421.981118][T21275] shmem 0 [ 1421.984144][T21275] mapped_file 0 [ 1421.987662][T21275] dirty 0 [ 1421.990639][T21275] writeback 16384 [ 1421.994314][T21275] workingset_refault_anon 33607 [ 1421.999198][T21275] workingset_refault_file 2533 [ 1422.004049][T21275] swap 737280 [ 1422.007410][T21275] swapcached 20480 [ 1422.011264][T21275] pgpgin 446259 [ 1422.014837][T21275] pgpgout 446254 [ 1422.018379][T21275] pgfault 442946 [ 1422.021916][T21275] pgmajfault 14225 [ 1422.025690][T21275] inactive_anon 0 [ 1422.029320][T21275] active_anon 0 [ 1422.032862][T21275] inactive_file 0 [ 1422.036516][T21275] active_file 0 [ 1422.040018][T21275] unevictable 0 [ 1422.043515][T21275] hierarchical_memory_limit 314572800 [ 1422.048911][T21275] hierarchical_memsw_limit 9223372036854771712 [ 1422.055180][T21275] total_cache 0 [ 1422.058648][T21275] total_rss 8192 [ 1422.062198][T21275] total_shmem 0 [ 1422.065689][T21275] total_mapped_file 0 [ 1422.069674][T21275] total_dirty 0 [ 1422.073196][T21275] total_writeback 16384 [ 1422.077449][T21275] total_workingset_refault_anon 33607 [ 1422.082830][T21275] total_workingset_refault_file 2533 [ 1422.088166][T21275] total_swap 737280 [ 1422.091977][T21275] total_swapcached 20480 [ 1422.096291][T21275] total_pgpgin 446259 [ 1422.100294][T21275] total_pgpgout 446254 [ 1422.104359][T21275] total_pgfault 442946 [ 1422.108501][T21275] total_pgmajfault 14225 [ 1422.112746][T21275] total_inactive_anon 0 [ 1422.116925][T21275] total_active_anon 0 [ 1422.120903][T21275] total_inactive_file 0 [ 1422.125082][T21275] total_active_file 0 [ 1422.129061][T21275] total_unevictable 0 [ 1422.133040][T21275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21275,uid=0 [ 1422.148360][T21275] Memory cgroup out of memory: Killed process 21275 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1422.176701][T21266] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1422.188067][T21266] CPU: 1 PID: 21266 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1422.198557][T21266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1422.208632][T21266] Call Trace: [ 1422.211927][T21266] [ 1422.214871][T21266] dump_stack_lvl+0xda/0x130 [ 1422.219522][T21266] dump_stack+0x15/0x20 [ 1422.223702][T21266] dump_header+0x82/0x2d0 [ 1422.228221][T21266] oom_kill_process+0x33a/0x4c0 [ 1422.233091][T21266] out_of_memory+0x9ca/0xbf0 [ 1422.237708][T21266] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1422.243842][T21266] mem_cgroup_out_of_memory+0x139/0x190 [ 1422.249533][T21266] try_charge_memcg+0x75c/0xd30 [ 1422.254408][T21266] ? __swap_duplicate+0x29b/0x2b0 [ 1422.259449][T21266] ? radix_tree_lookup+0xf9/0x150 [ 1422.264499][T21266] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1422.270705][T21266] __read_swap_cache_async+0x2f6/0x550 [ 1422.276184][T21266] swap_cluster_readahead+0x27c/0x4c0 [ 1422.281582][T21266] shmem_swapin_folio+0x343/0x830 [ 1422.286619][T21266] shmem_get_folio_gfp+0x242/0xb40 [ 1422.291856][T21266] shmem_fault+0x100/0x250 [ 1422.296279][T21266] ? put_swap_device+0xb0/0xb0 [ 1422.301123][T21266] handle_mm_fault+0x17db/0x2dd0 [ 1422.306076][T21266] exc_page_fault+0x3ff/0x6c0 [ 1422.310838][T21266] asm_exc_page_fault+0x26/0x30 [ 1422.315694][T21266] RIP: 0033:0x7fa159e46226 [ 1422.320116][T21266] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 1422.339739][T21266] RSP: 002b:00007ffea5cad778 EFLAGS: 00010283 [ 1422.345809][T21266] RAX: 0000001b2e923954 RBX: 0000000000000001 RCX: 0000001b2e920000 [ 1422.353867][T21266] RDX: 0000001b2e923958 RSI: 0000000000000000 RDI: 000000000badf00d [ 1422.361846][T21266] RBP: 00000000000003e7 R08: 0000001b2ed20000 R09: 00007ffea5df90b0 [ 1422.369916][T21266] R10: 00007ffea5df9080 R11: 0000000000041598 R12: 000000000015b1bd [ 1422.377935][T21266] R13: 00007fa159fbb050 R14: 00007fa159a1f000 R15: 000000000015ae7c [ 1422.385919][T21266] [ 1422.389097][T21266] memory: usage 307200kB, limit 307200kB, failcnt 191063 [ 1422.396157][T21266] memory+swap: usage 307604kB, limit 9007199254740988kB, failcnt 0 [ 1422.404098][T21266] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1422.411417][T21266] Memory cgroup stats for /syz0: [ 1422.413071][T21266] cache 4096 [ 1422.421260][T21266] rss 8192 [ 1422.424312][T21266] shmem 0 [ 1422.427278][T21266] mapped_file 0 [ 1422.430738][T21266] dirty 0 [ 1422.433835][T21266] writeback 4096 [ 1422.437501][T21266] workingset_refault_anon 38093 [ 1422.442355][T21266] workingset_refault_file 10296 [ 1422.447337][T21266] swap 417792 [ 1422.450750][T21266] swapcached 12288 [ 1422.454479][T21266] pgpgin 3611433 [ 1422.458217][T21266] pgpgout 3611429 [ 1422.461908][T21266] pgfault 3543412 [ 1422.465598][T21266] pgmajfault 18162 [ 1422.469324][T21266] inactive_anon 0 [ 1422.472968][T21266] active_anon 0 [ 1422.476526][T21266] inactive_file 4096 [ 1422.480464][T21266] active_file 0 [ 1422.483991][T21266] unevictable 0 [ 1422.487545][T21266] hierarchical_memory_limit 314572800 [ 1422.492988][T21266] hierarchical_memsw_limit 9223372036854771712 [ 1422.499273][T21266] total_cache 4096 [ 1422.502991][T21266] total_rss 8192 [ 1422.506620][T21266] total_shmem 0 [ 1422.510116][T21266] total_mapped_file 0 [ 1422.514153][T21266] total_dirty 0 [ 1422.517664][T21266] total_writeback 4096 [ 1422.521774][T21266] total_workingset_refault_anon 38093 [ 1422.527243][T21266] total_workingset_refault_file 10296 [ 1422.532665][T21266] total_swap 417792 [ 1422.536498][T21266] total_swapcached 12288 [ 1422.540791][T21266] total_pgpgin 3611433 [ 1422.544919][T21266] total_pgpgout 3611429 [ 1422.549083][T21266] total_pgfault 3543412 [ 1422.553235][T21266] total_pgmajfault 18162 [ 1422.557845][T21266] total_inactive_anon 0 [ 1422.562068][T21266] total_active_anon 0 [ 1422.566154][T21266] total_inactive_file 4096 [ 1422.570576][T21266] total_active_file 0 [ 1422.574560][T21266] total_unevictable 0 05:51:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xf5ffffff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:27 executing program 4: socket$inet(0xa, 0x2, 0x3a) 05:51:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r0) 05:51:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000), 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) [ 1422.578583][T21266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21266,uid=0 [ 1422.594038][T21266] Memory cgroup out of memory: Killed process 21266 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:27 executing program 3: io_uring_setup(0x4a7d, &(0x7f0000000000)={0x0, 0x0, 0x2104}) 05:51:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:27 executing program 4: setresuid(0xee01, 0xffffffffffffffff, 0xee00) r0 = getuid() setresuid(0xee00, r0, 0xee01) r1 = getuid() setresuid(0xee00, r1, 0xee01) 05:51:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000), 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 05:51:27 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0xd500fe91fa7abadc, 0x0) 05:51:27 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:51:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x0, 0x0, 0x4ae5}, 0x48) [ 1423.427493][T21302] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1423.441210][T21302] CPU: 0 PID: 21302 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1423.451679][T21302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1423.461843][T21302] Call Trace: [ 1423.465141][T21302] [ 1423.468150][T21302] dump_stack_lvl+0xda/0x130 [ 1423.472808][T21302] dump_stack+0x15/0x20 [ 1423.476991][T21302] dump_header+0x82/0x2d0 [ 1423.481477][T21302] oom_kill_process+0x33a/0x4c0 [ 1423.486358][T21302] out_of_memory+0x9ca/0xbf0 [ 1423.491018][T21302] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1423.497137][T21302] mem_cgroup_out_of_memory+0x139/0x190 [ 1423.502789][T21302] try_charge_memcg+0x75c/0xd30 [ 1423.507846][T21302] obj_cgroup_charge_pages+0xab/0x130 [ 1423.513261][T21302] __memcg_kmem_charge_page+0x9c/0x170 [ 1423.518751][T21302] __alloc_pages+0x1bb/0x340 [ 1423.523400][T21302] alloc_pages_mpol+0xb1/0x1d0 [ 1423.528193][T21302] alloc_pages+0xe0/0x100 [ 1423.532581][T21302] __vmalloc_node_range+0x6d2/0xea0 [ 1423.537870][T21302] kvmalloc_node+0x121/0x160 [ 1423.542491][T21302] ? xt_alloc_table_info+0x3d/0x80 [ 1423.547679][T21302] xt_alloc_table_info+0x3d/0x80 [ 1423.552654][T21302] do_arpt_set_ctl+0x634/0x13b0 [ 1423.557650][T21302] ? __futex_wait+0x220/0x280 [ 1423.562348][T21302] ? __futex_wake_mark+0x70/0x70 [ 1423.567503][T21302] ? tcp_release_cb+0xfe/0x370 [ 1423.572310][T21302] ? _raw_spin_unlock_bh+0x36/0x40 [ 1423.577529][T21302] nf_setsockopt+0x18d/0x1b0 [ 1423.582190][T21302] ip_setsockopt+0xe6/0x100 [ 1423.586900][T21302] tcp_setsockopt+0x90/0xa0 [ 1423.591449][T21302] sock_common_setsockopt+0x61/0x70 [ 1423.596692][T21302] ? sock_common_recvmsg+0xe0/0xe0 [ 1423.601851][T21302] __sys_setsockopt+0x1d4/0x240 [ 1423.606734][T21302] __x64_sys_setsockopt+0x66/0x80 [ 1423.611937][T21302] do_syscall_64+0x44/0x110 [ 1423.617207][T21302] ? syscall_exit_to_user_mode+0x38/0x140 [ 1423.623057][T21302] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1423.628987][T21302] RIP: 0033:0x7ff5cf31cae9 [ 1423.633421][T21302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1423.653194][T21302] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1423.661635][T21302] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1423.669776][T21302] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1423.677809][T21302] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1423.685807][T21302] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.693807][T21302] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1423.701987][T21302] [ 1423.705157][T21302] memory: usage 307200kB, limit 307200kB, failcnt 116457 [ 1423.712197][T21302] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 1423.720131][T21302] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1423.727534][T21302] Memory cgroup stats for /syz1: [ 1423.727689][T21302] cache 0 [ 1423.735657][T21302] rss 8192 [ 1423.738700][T21302] shmem 0 [ 1423.741654][T21302] mapped_file 0 [ 1423.745156][T21302] dirty 0 [ 1423.748152][T21302] writeback 0 [ 1423.751473][T21302] workingset_refault_anon 33655 [ 1423.756505][T21302] workingset_refault_file 2533 [ 1423.761287][T21302] swap 667648 [ 1423.764589][T21302] swapcached 8192 [ 1423.768351][T21302] pgpgin 446330 [ 1423.771814][T21302] pgpgout 446328 [ 1423.775400][T21302] pgfault 443121 [ 1423.778956][T21302] pgmajfault 14240 [ 1423.782793][T21302] inactive_anon 0 [ 1423.786470][T21302] active_anon 8192 [ 1423.790622][T21302] inactive_file 0 [ 1423.794337][T21302] active_file 0 [ 1423.797843][T21302] unevictable 0 [ 1423.801315][T21302] hierarchical_memory_limit 314572800 [ 1423.806732][T21302] hierarchical_memsw_limit 9223372036854771712 [ 1423.812891][T21302] total_cache 0 [ 1423.816393][T21302] total_rss 8192 [ 1423.819954][T21302] total_shmem 0 [ 1423.823500][T21302] total_mapped_file 0 [ 1423.827550][T21302] total_dirty 0 [ 1423.831016][T21302] total_writeback 0 [ 1423.834885][T21302] total_workingset_refault_anon 33655 [ 1423.840310][T21302] total_workingset_refault_file 2533 [ 1423.845632][T21302] total_swap 667648 [ 1423.849442][T21302] total_swapcached 8192 [ 1423.853689][T21302] total_pgpgin 446330 [ 1423.857721][T21302] total_pgpgout 446328 [ 1423.861799][T21302] total_pgfault 443121 [ 1423.865961][T21302] total_pgmajfault 14240 [ 1423.870214][T21302] total_inactive_anon 0 [ 1423.874371][T21302] total_active_anon 8192 [ 1423.878661][T21302] total_inactive_file 0 [ 1423.882816][T21302] total_active_file 0 [ 1423.886838][T21302] total_unevictable 0 [ 1423.890835][T21302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21301,uid=0 [ 1423.906212][T21302] Memory cgroup out of memory: Killed process 21301 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1423.945961][T21304] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1423.957379][T21304] CPU: 1 PID: 21304 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1423.967819][T21304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1423.977896][T21304] Call Trace: [ 1423.981182][T21304] [ 1423.984136][T21304] dump_stack_lvl+0xda/0x130 [ 1423.988755][T21304] dump_stack+0x15/0x20 [ 1423.993054][T21304] dump_header+0x82/0x2d0 [ 1423.997412][T21304] oom_kill_process+0x33a/0x4c0 [ 1424.002338][T21304] out_of_memory+0x9ca/0xbf0 [ 1424.006967][T21304] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1424.013138][T21304] mem_cgroup_out_of_memory+0x139/0x190 [ 1424.018795][T21304] try_charge_memcg+0x75c/0xd30 [ 1424.023672][T21304] ? __swap_duplicate+0x29b/0x2b0 [ 1424.028727][T21304] ? radix_tree_lookup+0xf9/0x150 [ 1424.033782][T21304] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1424.039920][T21304] __read_swap_cache_async+0x2f6/0x550 [ 1424.045463][T21304] swap_cluster_readahead+0x27c/0x4c0 [ 1424.050940][T21304] shmem_swapin_folio+0x343/0x830 [ 1424.055986][T21304] shmem_get_folio_gfp+0x242/0xb40 [ 1424.061205][T21304] ? _raw_spin_unlock+0x26/0x40 [ 1424.066148][T21304] ? ptep_set_access_flags+0x3e/0x70 [ 1424.071505][T21304] ? __rcu_read_unlock+0x4d/0x70 [ 1424.076467][T21304] shmem_fault+0x100/0x250 [ 1424.080886][T21304] ? put_swap_device+0xb0/0xb0 [ 1424.085899][T21304] handle_mm_fault+0x17db/0x2dd0 [ 1424.090930][T21304] exc_page_fault+0x3ff/0x6c0 [ 1424.095644][T21304] asm_exc_page_fault+0x26/0x30 [ 1424.100503][T21304] RIP: 0033:0x7fa159e46226 [ 1424.104921][T21304] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 1424.124546][T21304] RSP: 002b:00007ffea5cad778 EFLAGS: 00010287 [ 1424.130622][T21304] RAX: 0000001b2e923990 RBX: 0000000000000001 RCX: 0000001b2e920000 [ 1424.138631][T21304] RDX: 0000001b2e923994 RSI: 0000000000000000 RDI: 000000000badf00d [ 1424.146609][T21304] RBP: 00000000000003e7 R08: 0000001b2ed20000 R09: 00007ffea5df90b0 [ 1424.154609][T21304] R10: 00007ffea5df9080 R11: 00000000000416f6 R12: 000000000015b966 [ 1424.162588][T21304] R13: 00007fa159fbb050 R14: 00007fa159a1f000 R15: 000000000015b625 [ 1424.170584][T21304] [ 1424.173918][T21304] memory: usage 307200kB, limit 307200kB, failcnt 191499 [ 1424.181065][T21304] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 1424.189120][T21304] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1424.196459][T21304] Memory cgroup stats for /syz0: [ 1424.198674][T21304] cache 4096 [ 1424.206898][T21304] rss 8192 [ 1424.209935][T21304] shmem 0 [ 1424.212874][T21304] mapped_file 0 [ 1424.216393][T21304] dirty 0 [ 1424.219348][T21304] writeback 8192 [ 1424.222978][T21304] workingset_refault_anon 38143 [ 1424.227965][T21304] workingset_refault_file 10296 [ 1424.232916][T21304] swap 458752 [ 1424.236301][T21304] swapcached 8192 [ 1424.240027][T21304] pgpgin 3615604 [ 1424.243578][T21304] pgpgout 3615601 [ 1424.247248][T21304] pgfault 3547741 [ 1424.250886][T21304] pgmajfault 18181 [ 1424.254603][T21304] inactive_anon 0 [ 1424.258282][T21304] active_anon 0 [ 1424.261766][T21304] inactive_file 4096 [ 1424.265678][T21304] active_file 0 [ 1424.269150][T21304] unevictable 0 [ 1424.272633][T21304] hierarchical_memory_limit 314572800 [ 1424.278030][T21304] hierarchical_memsw_limit 9223372036854771712 [ 1424.284199][T21304] total_cache 4096 [ 1424.288040][T21304] total_rss 8192 [ 1424.291723][T21304] total_shmem 0 [ 1424.295312][T21304] total_mapped_file 0 [ 1424.299310][T21304] total_dirty 0 [ 1424.302784][T21304] total_writeback 8192 [ 1424.306935][T21304] total_workingset_refault_anon 38143 [ 1424.312384][T21304] total_workingset_refault_file 10296 [ 1424.317878][T21304] total_swap 458752 [ 1424.321684][T21304] total_swapcached 8192 [ 1424.325874][T21304] total_pgpgin 3615604 [ 1424.329948][T21304] total_pgpgout 3615601 [ 1424.334107][T21304] total_pgfault 3547741 [ 1424.338318][T21304] total_pgmajfault 18181 [ 1424.342913][T21304] total_inactive_anon 0 [ 1424.347185][T21304] total_active_anon 0 [ 1424.351165][T21304] total_inactive_file 4096 [ 1424.355609][T21304] total_active_file 0 [ 1424.359682][T21304] total_unevictable 0 [ 1424.363671][T21304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21304,uid=0 [ 1424.378992][T21304] Memory cgroup out of memory: Killed process 21304 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8836kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfbffffff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0}, 0x10) 05:51:29 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 05:51:29 executing program 3: syz_io_uring_setup(0x20c3, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58) 05:51:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) 05:51:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0}, 0x10) 05:51:29 executing program 3: socket$inet6_sctp(0xa, 0x6801462c46340611, 0x84) 05:51:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x9}]}}}], 0x18}, 0x0) 05:51:29 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000040)={{0x300, 0x1, 0x18}, './file0\x00'}) 05:51:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0}, 0x10) [ 1425.250092][T21332] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1425.263738][T21332] CPU: 0 PID: 21332 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1425.274199][T21332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1425.284297][T21332] Call Trace: [ 1425.287592][T21332] [ 1425.290565][T21332] dump_stack_lvl+0xda/0x130 [ 1425.295281][T21332] dump_stack+0x15/0x20 [ 1425.299647][T21332] dump_header+0x82/0x2d0 [ 1425.304100][T21332] oom_kill_process+0x33a/0x4c0 [ 1425.309058][T21332] out_of_memory+0x9ca/0xbf0 [ 1425.313758][T21332] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1425.319930][T21332] mem_cgroup_out_of_memory+0x139/0x190 [ 1425.325524][T21332] try_charge_memcg+0x75c/0xd30 [ 1425.330439][T21332] obj_cgroup_charge_pages+0xab/0x130 [ 1425.335866][T21332] __memcg_kmem_charge_page+0x9c/0x170 [ 1425.341401][T21332] __alloc_pages+0x1bb/0x340 [ 1425.346002][T21332] alloc_pages_mpol+0xb1/0x1d0 [ 1425.350779][T21332] alloc_pages+0xe0/0x100 [ 1425.355125][T21332] __vmalloc_node_range+0x6d2/0xea0 [ 1425.360371][T21332] kvmalloc_node+0x121/0x160 [ 1425.364975][T21332] ? xt_alloc_table_info+0x3d/0x80 [ 1425.370124][T21332] xt_alloc_table_info+0x3d/0x80 [ 1425.375082][T21332] do_arpt_set_ctl+0x634/0x13b0 [ 1425.380065][T21332] ? __bpf_prog_run32+0x74/0xa0 [ 1425.384980][T21332] ? tcp_release_cb+0xfe/0x370 [ 1425.389920][T21332] ? _raw_spin_unlock_bh+0x36/0x40 [ 1425.395056][T21332] nf_setsockopt+0x18d/0x1b0 [ 1425.399711][T21332] ip_setsockopt+0xe6/0x100 [ 1425.404366][T21332] tcp_setsockopt+0x90/0xa0 [ 1425.408885][T21332] sock_common_setsockopt+0x61/0x70 [ 1425.414323][T21332] ? sock_common_recvmsg+0xe0/0xe0 [ 1425.419540][T21332] __sys_setsockopt+0x1d4/0x240 [ 1425.424404][T21332] __x64_sys_setsockopt+0x66/0x80 [ 1425.429479][T21332] do_syscall_64+0x44/0x110 [ 1425.433997][T21332] ? syscall_exit_to_user_mode+0x38/0x140 [ 1425.439736][T21332] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1425.445666][T21332] RIP: 0033:0x7ff5cf31cae9 [ 1425.450086][T21332] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1425.469704][T21332] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1425.478122][T21332] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1425.486103][T21332] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1425.494079][T21332] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1425.502080][T21332] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.510056][T21332] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1425.518046][T21332] [ 1425.521348][T21332] memory: usage 307196kB, limit 307200kB, failcnt 116688 [ 1425.528504][T21332] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 [ 1425.536435][T21332] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1425.543733][T21332] Memory cgroup stats for /syz1: [ 1425.555301][T21332] cache 0 [ 1425.563185][T21332] rss 8192 [ 1425.566348][T21332] shmem 0 [ 1425.569297][T21332] mapped_file 0 [ 1425.572768][T21332] dirty 0 [ 1425.575747][T21332] writeback 8192 [ 1425.579300][T21332] workingset_refault_anon 33704 [ 1425.584243][T21332] workingset_refault_file 2533 [ 1425.589097][T21332] swap 663552 [ 1425.592392][T21332] swapcached 12288 [ 1425.596131][T21332] pgpgin 446402 [ 1425.599730][T21332] pgpgout 446399 [ 1425.603336][T21332] pgfault 443334 [ 1425.606904][T21332] pgmajfault 14260 [ 1425.610632][T21332] inactive_anon 4096 [ 1425.614528][T21332] active_anon 8192 [ 1425.618285][T21332] inactive_file 0 [ 1425.621921][T21332] active_file 0 [ 1425.625401][T21332] unevictable 0 [ 1425.628861][T21332] hierarchical_memory_limit 314572800 [ 1425.634323][T21332] hierarchical_memsw_limit 9223372036854771712 [ 1425.640581][T21332] total_cache 0 [ 1425.644046][T21332] total_rss 8192 [ 1425.647616][T21332] total_shmem 0 [ 1425.651085][T21332] total_mapped_file 0 [ 1425.655141][T21332] total_dirty 0 [ 1425.658608][T21332] total_writeback 8192 [ 1425.662686][T21332] total_workingset_refault_anon 33704 [ 1425.668093][T21332] total_workingset_refault_file 2533 [ 1425.673423][T21332] total_swap 663552 [ 1425.677267][T21332] total_swapcached 12288 [ 1425.681600][T21332] total_pgpgin 446402 [ 1425.685688][T21332] total_pgpgout 446399 [ 1425.689839][T21332] total_pgfault 443334 [ 1425.693912][T21332] total_pgmajfault 14260 [ 1425.698190][T21332] total_inactive_anon 4096 [ 1425.702646][T21332] total_active_anon 8192 [ 1425.707785][T21332] total_inactive_file 0 [ 1425.711953][T21332] total_active_file 0 [ 1425.715979][T21332] total_unevictable 0 [ 1425.719968][T21332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21331,uid=0 [ 1425.735298][T21332] Memory cgroup out of memory: Killed process 21331 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfeffffff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)}, 0x10) 05:51:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000f, 0x13, r0, 0x0) 05:51:30 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 05:51:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)}, 0x10) 05:51:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x0, 0x0, 0x0, 0x4}, 0x48) 05:51:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)}, 0x10) 05:51:30 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) [ 1425.996286][ T27] audit: type=1400 audit(1701409890.683:684): avc: denied { execute } for pid=21356 comm="syz-executor.4" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 05:51:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xc, 0x0, &(0x7f0000000080)) 05:51:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) [ 1426.776008][T21363] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1426.787416][T21363] CPU: 1 PID: 21363 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1426.797902][T21363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1426.808066][T21363] Call Trace: [ 1426.811430][T21363] [ 1426.814384][T21363] dump_stack_lvl+0xda/0x130 [ 1426.819016][T21363] dump_stack+0x15/0x20 [ 1426.823276][T21363] dump_header+0x82/0x2d0 [ 1426.827717][T21363] oom_kill_process+0x33a/0x4c0 [ 1426.832600][T21363] out_of_memory+0x9ca/0xbf0 [ 1426.837289][T21363] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1426.843407][T21363] mem_cgroup_out_of_memory+0x139/0x190 [ 1426.849070][T21363] try_charge_memcg+0x75c/0xd30 [ 1426.853992][T21363] ? __swap_duplicate+0x29b/0x2b0 [ 1426.859101][T21363] ? radix_tree_lookup+0xf9/0x150 [ 1426.864274][T21363] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1426.870377][T21363] __read_swap_cache_async+0x2f6/0x550 [ 1426.875890][T21363] swap_cluster_readahead+0x27c/0x4c0 [ 1426.881300][T21363] swapin_readahead+0xe9/0x7f0 [ 1426.886098][T21363] ? __filemap_get_folio+0x41a/0x5a0 [ 1426.891503][T21363] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1426.897176][T21363] ? swap_cache_get_folio+0x6e/0x200 [ 1426.902552][T21363] do_swap_page+0x4a0/0x1670 [ 1426.907176][T21363] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1426.912498][T21363] ? __rcu_read_lock+0x35/0x50 [ 1426.917331][T21363] ? pte_offset_map_nolock+0x124/0x1d0 [ 1426.922816][T21363] handle_mm_fault+0xa36/0x2dd0 [ 1426.927704][T21363] exc_page_fault+0x3ff/0x6c0 [ 1426.932497][T21363] asm_exc_page_fault+0x26/0x30 [ 1426.937375][T21363] RIP: 0033:0x7ff5cf2d6abd [ 1426.941812][T21363] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6e 16 00 00 0f 8e 12 ff ff ff e8 2c 08 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 [ 1426.961461][T21363] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010212 [ 1426.967649][T21363] RAX: 000000000015c54c RBX: 00007ff5cf43d980 RCX: 000000000015c250 [ 1426.975721][T21363] RDX: 00000000000002fc RSI: 00007ffe2f8462a0 RDI: 7fffffffffffffff [ 1426.983790][T21363] RBP: 00007ff5cf43d980 R08: 0000000000000010 R09: 00007ffe2f8f80b0 [ 1426.991802][T21363] R10: 00007ffe2f8f8080 R11: 0000000000041922 R12: 000000000015c5ea [ 1426.999863][T21363] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015c2a9 [ 1427.007847][T21363] [ 1427.011044][T21363] memory: usage 307200kB, limit 307200kB, failcnt 116778 [ 1427.018157][T21363] memory+swap: usage 307884kB, limit 9007199254740988kB, failcnt 0 [ 1427.026126][T21363] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1427.033487][T21363] Memory cgroup stats for /syz1: [ 1427.033693][T21363] cache 0 [ 1427.041750][T21363] rss 8192 [ 1427.044843][T21363] shmem 0 [ 1427.047795][T21363] mapped_file 0 [ 1427.051272][T21363] dirty 0 [ 1427.054217][T21363] writeback 12288 [ 1427.057917][T21363] workingset_refault_anon 33750 [ 1427.062810][T21363] workingset_refault_file 2533 [ 1427.067635][T21363] swap 700416 [ 1427.070923][T21363] swapcached 20480 [ 1427.074788][T21363] pgpgin 446471 [ 1427.078310][T21363] pgpgout 446466 [ 1427.081869][T21363] pgfault 443479 [ 1427.085558][T21363] pgmajfault 14279 [ 1427.089282][T21363] inactive_anon 4096 [ 1427.093168][T21363] active_anon 0 [ 1427.096658][T21363] inactive_file 0 [ 1427.100407][T21363] active_file 0 [ 1427.103922][T21363] unevictable 0 [ 1427.107411][T21363] hierarchical_memory_limit 314572800 [ 1427.112805][T21363] hierarchical_memsw_limit 9223372036854771712 [ 1427.118993][T21363] total_cache 0 [ 1427.122517][T21363] total_rss 8192 [ 1427.126156][T21363] total_shmem 0 [ 1427.129657][T21363] total_mapped_file 0 [ 1427.133630][T21363] total_dirty 0 [ 1427.137177][T21363] total_writeback 12288 [ 1427.141339][T21363] total_workingset_refault_anon 33750 [ 1427.146741][T21363] total_workingset_refault_file 2533 [ 1427.152149][T21363] total_swap 700416 [ 1427.156010][T21363] total_swapcached 20480 [ 1427.160285][T21363] total_pgpgin 446471 [ 1427.164382][T21363] total_pgpgout 446466 [ 1427.168508][T21363] total_pgfault 443479 [ 1427.172748][T21363] total_pgmajfault 14279 [ 1427.177021][T21363] total_inactive_anon 4096 [ 1427.181441][T21363] total_active_anon 0 [ 1427.185449][T21363] total_inactive_file 0 [ 1427.189603][T21363] total_active_file 0 [ 1427.193586][T21363] total_unevictable 0 [ 1427.197623][T21363] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21363,uid=0 [ 1427.212976][T21363] Memory cgroup out of memory: Killed process 21363 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1427.233990][T21352] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1427.245420][T21352] CPU: 0 PID: 21352 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1427.255861][T21352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1427.266000][T21352] Call Trace: [ 1427.269293][T21352] [ 1427.272233][T21352] dump_stack_lvl+0xda/0x130 [ 1427.276852][T21352] dump_stack+0x15/0x20 [ 1427.281069][T21352] dump_header+0x82/0x2d0 [ 1427.285424][T21352] oom_kill_process+0x33a/0x4c0 [ 1427.290411][T21352] out_of_memory+0x9ca/0xbf0 [ 1427.295040][T21352] mem_cgroup_out_of_memory+0x139/0x190 [ 1427.300640][T21352] try_charge_memcg+0x75c/0xd30 [ 1427.305544][T21352] ? __swap_duplicate+0x29b/0x2b0 [ 1427.310588][T21352] ? radix_tree_lookup+0xf9/0x150 [ 1427.315649][T21352] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1427.321747][T21352] __read_swap_cache_async+0x2f6/0x550 [ 1427.327257][T21352] swap_cluster_readahead+0x27c/0x4c0 [ 1427.332754][T21352] swapin_readahead+0xe9/0x7f0 [ 1427.337593][T21352] ? __filemap_get_folio+0x41a/0x5a0 [ 1427.342903][T21352] ? __perf_event_task_sched_in+0x769/0x790 [ 1427.348873][T21352] ? swap_cache_get_folio+0x6e/0x200 [ 1427.354253][T21352] do_swap_page+0x4a0/0x1670 [ 1427.358923][T21352] ? __rcu_read_lock+0x35/0x50 [ 1427.363788][T21352] ? pte_offset_map_nolock+0x124/0x1d0 [ 1427.369259][T21352] handle_mm_fault+0xa36/0x2dd0 [ 1427.374193][T21352] ? mt_find+0x1d9/0x310 [ 1427.378456][T21352] exc_page_fault+0x2f7/0x6c0 [ 1427.383204][T21352] asm_exc_page_fault+0x26/0x30 [ 1427.388065][T21352] RIP: 0010:__get_user_8+0x11/0x20 [ 1427.393247][T21352] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1427.412863][T21352] RSP: 0018:ffffc90000783e38 EFLAGS: 00050202 [ 1427.418937][T21352] RAX: 0000555556440da8 RBX: ffffc90000783e40 RCX: ffffffff814442c3 [ 1427.426914][T21352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881396dcad0 [ 1427.435068][T21352] RBP: ffffc90000783ef8 R08: 00018881396dcad7 R09: 0000000000000000 [ 1427.443066][T21352] R10: 0001ffffffffffff R11: 00018881396dc790 R12: ffff8881396dc100 [ 1427.451042][T21352] R13: ffff8881396dcad0 R14: ffffc90000783f58 R15: ffffc90000783fd8 [ 1427.459025][T21352] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1427.465018][T21352] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1427.470851][T21352] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1427.476761][T21352] exit_to_user_mode_loop+0xcc/0xe0 [ 1427.482045][T21352] exit_to_user_mode_prepare+0x6c/0xb0 [ 1427.487541][T21352] irqentry_exit_to_user_mode+0x9/0x20 [ 1427.493067][T21352] irqentry_exit+0x12/0x40 [ 1427.497524][T21352] asm_exc_page_fault+0x26/0x30 [ 1427.502417][T21352] RIP: 0033:0x7fa159e46228 [ 1427.506842][T21352] Code: 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 89 38 <48> 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 8d 3d [ 1427.526511][T21352] RSP: 002b:00007ffea5cad778 EFLAGS: 00010283 [ 1427.532627][T21352] RAX: 0000001b2e9238e0 RBX: 0000000000000001 RCX: 0000001b2e920000 [ 1427.540607][T21352] RDX: 0000001b2e9238e4 RSI: 0000000000000000 RDI: 000000000badf00d [ 1427.548675][T21352] RBP: 00000000000003e7 R08: 0000001b2ed20000 R09: 00007ffea5df90b0 [ 1427.556671][T21352] R10: 00007ffea5df9080 R11: 000000000004192a R12: 000000000015c56e [ 1427.564709][T21352] R13: 00007fa159fbb050 R14: 00007fa159a1f000 R15: 000000000015c22d [ 1427.572769][T21352] [ 1427.575992][T21352] memory: usage 307200kB, limit 307200kB, failcnt 192125 [ 1427.583029][T21352] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 1427.591015][T21352] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1427.598472][T21352] Memory cgroup stats for /syz0: [ 1427.599602][T21352] cache 4096 [ 1427.607889][T21352] rss 8192 [ 1427.610987][T21352] shmem 0 [ 1427.613928][T21352] mapped_file 0 [ 1427.617467][T21352] dirty 0 [ 1427.620444][T21352] writeback 0 [ 1427.623738][T21352] workingset_refault_anon 38230 [ 1427.628652][T21352] workingset_refault_file 10296 [ 1427.633556][T21352] swap 462848 [ 1427.636902][T21352] swapcached 8192 [ 1427.640554][T21352] pgpgin 3623934 [ 1427.644115][T21352] pgpgout 3623931 [ 1427.647841][T21352] pgfault 3556218 [ 1427.651492][T21352] pgmajfault 18227 [ 1427.655265][T21352] inactive_anon 8192 [ 1427.659218][T21352] active_anon 0 [ 1427.662683][T21352] inactive_file 4096 [ 1427.666622][T21352] active_file 0 [ 1427.670167][T21352] unevictable 0 [ 1427.673632][T21352] hierarchical_memory_limit 314572800 [ 1427.679045][T21352] hierarchical_memsw_limit 9223372036854771712 [ 1427.685239][T21352] total_cache 4096 [ 1427.688998][T21352] total_rss 8192 [ 1427.692549][T21352] total_shmem 0 [ 1427.696041][T21352] total_mapped_file 0 [ 1427.700158][T21352] total_dirty 0 [ 1427.703625][T21352] total_writeback 0 [ 1427.707501][T21352] total_workingset_refault_anon 38230 [ 1427.712877][T21352] total_workingset_refault_file 10296 [ 1427.718364][T21352] total_swap 462848 [ 1427.722182][T21352] total_swapcached 8192 [ 1427.726379][T21352] total_pgpgin 3623934 [ 1427.730458][T21352] total_pgpgout 3623931 [ 1427.734614][T21352] total_pgfault 3556218 [ 1427.738896][T21352] total_pgmajfault 18227 [ 1427.743168][T21352] total_inactive_anon 8192 [ 1427.747620][T21352] total_active_anon 0 [ 1427.751618][T21352] total_inactive_file 4096 [ 1427.756117][T21352] total_active_file 0 [ 1427.760185][T21352] total_unevictable 0 [ 1427.764212][T21352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21352,uid=0 05:51:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xff0f2020, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:32 executing program 3: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xc, 0x0, 0x0) 05:51:32 executing program 4: setresuid(0xee00, 0x0, 0xee01) r0 = getuid() setresuid(0xee00, r0, 0xee01) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) 05:51:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 05:51:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1427.779664][T21352] Memory cgroup out of memory: Killed process 21352 (syz-executor.0) total-vm:48740kB, anon-rss:504kB, file-rss:11012kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 05:51:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x0, 0x4}, 0x48) 05:51:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 05:51:32 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f00000001c0)=ANY=[@ANYBLOB="478d"]) 05:51:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:32 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 05:51:32 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 05:51:32 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) setresuid(0x0, 0x0, 0x0) [ 1428.582737][T21384] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1428.594176][T21384] CPU: 0 PID: 21384 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1428.604620][T21384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1428.614769][T21384] Call Trace: [ 1428.618068][T21384] [ 1428.621013][T21384] dump_stack_lvl+0xda/0x130 [ 1428.625633][T21384] dump_stack+0x15/0x20 [ 1428.629856][T21384] dump_header+0x82/0x2d0 [ 1428.634241][T21384] oom_kill_process+0x33a/0x4c0 [ 1428.639111][T21384] out_of_memory+0x9ca/0xbf0 [ 1428.643729][T21384] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1428.649961][T21384] mem_cgroup_out_of_memory+0x139/0x190 [ 1428.655526][T21384] try_charge_memcg+0x75c/0xd30 [ 1428.660424][T21384] ? __swap_duplicate+0x29b/0x2b0 [ 1428.665477][T21384] ? radix_tree_lookup+0xf9/0x150 [ 1428.670524][T21384] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1428.676674][T21384] __read_swap_cache_async+0x2f6/0x550 [ 1428.682194][T21384] swap_cluster_readahead+0x27c/0x4c0 [ 1428.687683][T21384] swapin_readahead+0xe9/0x7f0 [ 1428.692543][T21384] ? __filemap_get_folio+0x41a/0x5a0 [ 1428.698142][T21384] ? __perf_event_task_sched_in+0x769/0x790 [ 1428.704083][T21384] ? swap_cache_get_folio+0x6e/0x200 [ 1428.709384][T21384] do_swap_page+0x4a0/0x1670 [ 1428.713990][T21384] ? __rcu_read_lock+0x35/0x50 [ 1428.718893][T21384] ? pte_offset_map_nolock+0x124/0x1d0 [ 1428.724368][T21384] handle_mm_fault+0xa36/0x2dd0 [ 1428.729247][T21384] ? mt_find+0x1d9/0x310 [ 1428.733603][T21384] exc_page_fault+0x2f7/0x6c0 [ 1428.738324][T21384] asm_exc_page_fault+0x26/0x30 [ 1428.743188][T21384] RIP: 0010:__get_user_8+0x11/0x20 [ 1428.748349][T21384] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1428.768048][T21384] RSP: 0018:ffffc90000bdfe38 EFLAGS: 00050202 [ 1428.774120][T21384] RAX: 0000555556bc2da8 RBX: ffffc90000bdfe40 RCX: ffffffff814442c3 [ 1428.782096][T21384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888146084ad0 [ 1428.790188][T21384] RBP: ffffc90000bdfef8 R08: 0001888146084ad7 R09: 0000000000000000 [ 1428.798294][T21384] R10: 0001ffffffffffff R11: 0001888146084790 R12: ffff888146084100 [ 1428.806353][T21384] R13: ffff888146084ad0 R14: ffffc90000bdff58 R15: ffffc90000bdffd8 [ 1428.814507][T21384] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1428.820430][T21384] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1428.826221][T21384] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1428.832132][T21384] exit_to_user_mode_loop+0xcc/0xe0 [ 1428.837364][T21384] exit_to_user_mode_prepare+0x6c/0xb0 [ 1428.842850][T21384] irqentry_exit_to_user_mode+0x9/0x20 [ 1428.848357][T21384] irqentry_exit+0x12/0x40 [ 1428.852794][T21384] asm_exc_page_fault+0x26/0x30 [ 1428.857653][T21384] RIP: 0033:0x7ff5cf2d6ae4 [ 1428.862088][T21384] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1428.881710][T21384] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1428.887781][T21384] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1428.895884][T21384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1428.903863][T21384] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1428.911948][T21384] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015cca8 [ 1428.919936][T21384] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015c967 [ 1428.928000][T21384] [ 1428.931153][T21384] memory: usage 307200kB, limit 307200kB, failcnt 116964 [ 1428.938285][T21384] memory+swap: usage 307836kB, limit 9007199254740988kB, failcnt 0 [ 1428.946257][T21384] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1428.953550][T21384] Memory cgroup stats for /syz1: [ 1428.953812][T21384] cache 0 [ 1428.961751][T21384] rss 8192 [ 1428.964836][T21384] shmem 0 [ 1428.967785][T21384] mapped_file 0 [ 1428.971260][T21384] dirty 0 [ 1428.974210][T21384] writeback 8192 [ 1428.977839][T21384] workingset_refault_anon 33808 [ 1428.982734][T21384] workingset_refault_file 2533 [ 1428.987648][T21384] swap 651264 [ 1428.990975][T21384] swapcached 16384 [ 1428.994737][T21384] pgpgin 446552 [ 1428.998209][T21384] pgpgout 446548 [ 1429.001764][T21384] pgfault 443634 [ 1429.005355][T21384] pgmajfault 14300 [ 1429.009140][T21384] inactive_anon 0 [ 1429.012779][T21384] active_anon 0 [ 1429.016371][T21384] inactive_file 0 [ 1429.020075][T21384] active_file 0 [ 1429.023544][T21384] unevictable 0 [ 1429.027050][T21384] hierarchical_memory_limit 314572800 [ 1429.032481][T21384] hierarchical_memsw_limit 9223372036854771712 [ 1429.038682][T21384] total_cache 0 [ 1429.042226][T21384] total_rss 8192 [ 1429.045821][T21384] total_shmem 0 [ 1429.049285][T21384] total_mapped_file 0 [ 1429.053461][T21384] total_dirty 0 [ 1429.057030][T21384] total_writeback 8192 [ 1429.061126][T21384] total_workingset_refault_anon 33808 [ 1429.066609][T21384] total_workingset_refault_file 2533 [ 1429.071972][T21384] total_swap 651264 [ 1429.075864][T21384] total_swapcached 16384 [ 1429.080168][T21384] total_pgpgin 446552 [ 1429.084203][T21384] total_pgpgout 446548 [ 1429.088318][T21384] total_pgfault 443634 [ 1429.092466][T21384] total_pgmajfault 14300 [ 1429.096737][T21384] total_inactive_anon 0 [ 1429.100901][T21384] total_active_anon 0 [ 1429.104999][T21384] total_inactive_file 0 [ 1429.109165][T21384] total_active_file 0 [ 1429.113153][T21384] total_unevictable 0 [ 1429.117216][T21384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21384,uid=0 [ 1429.132506][T21384] Memory cgroup out of memory: Killed process 21384 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xffefffff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:34 executing program 2: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x15, &(0x7f0000000080), 0x2) 05:51:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}, 0x0) 05:51:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x11, 0x8, 0x0, 0x0) 05:51:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x2900, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 05:51:34 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 05:51:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0) 05:51:34 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x3, 0x5800) 05:51:34 executing program 3: clock_gettime(0x38c99167e97d9aa5, 0x0) 05:51:34 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) [ 1430.072377][T21422] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1430.085988][T21422] CPU: 0 PID: 21422 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1430.096440][T21422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1430.106567][T21422] Call Trace: [ 1430.109880][T21422] [ 1430.112826][T21422] dump_stack_lvl+0xda/0x130 [ 1430.117524][T21422] dump_stack+0x15/0x20 [ 1430.121788][T21422] dump_header+0x82/0x2d0 [ 1430.126228][T21422] oom_kill_process+0x33a/0x4c0 [ 1430.131217][T21422] out_of_memory+0x9ca/0xbf0 [ 1430.135848][T21422] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1430.142097][T21422] mem_cgroup_out_of_memory+0x139/0x190 [ 1430.147820][T21422] try_charge_memcg+0x75c/0xd30 [ 1430.152760][T21422] ? __swap_duplicate+0x29b/0x2b0 [ 1430.157828][T21422] ? radix_tree_lookup+0xf9/0x150 [ 1430.162890][T21422] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1430.168992][T21422] __read_swap_cache_async+0x2f6/0x550 [ 1430.174576][T21422] swap_cluster_readahead+0x27c/0x4c0 [ 1430.179998][T21422] swapin_readahead+0xe9/0x7f0 [ 1430.184798][T21422] ? __filemap_get_folio+0x41a/0x5a0 [ 1430.190115][T21422] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1430.195825][T21422] ? swap_cache_get_folio+0x6e/0x200 [ 1430.201170][T21422] do_swap_page+0x4a0/0x1670 [ 1430.205812][T21422] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1430.211157][T21422] ? __rcu_read_lock+0x35/0x50 [ 1430.215936][T21422] ? pte_offset_map_nolock+0x124/0x1d0 [ 1430.221458][T21422] handle_mm_fault+0xa36/0x2dd0 [ 1430.226424][T21422] exc_page_fault+0x3ff/0x6c0 [ 1430.231186][T21422] asm_exc_page_fault+0x26/0x30 [ 1430.236066][T21422] RIP: 0033:0x7ff5cf2d6ae4 [ 1430.240521][T21422] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1430.260193][T21422] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1430.266298][T21422] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1430.274446][T21422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1430.282449][T21422] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1430.290447][T21422] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015d2cf [ 1430.298625][T21422] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015cf8e [ 1430.306623][T21422] [ 1430.309782][T21422] memory: usage 307200kB, limit 307200kB, failcnt 117169 [ 1430.316847][T21422] memory+swap: usage 307892kB, limit 9007199254740988kB, failcnt 0 [ 1430.324778][T21422] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1430.332088][T21422] Memory cgroup stats for /syz1: [ 1430.333164][T21422] cache 0 [ 1430.341180][T21422] rss 8192 [ 1430.344225][T21422] shmem 0 [ 1430.347250][T21422] mapped_file 0 [ 1430.350725][T21422] dirty 0 [ 1430.353777][T21422] writeback 12288 [ 1430.357475][T21422] workingset_refault_anon 33843 [ 1430.362406][T21422] workingset_refault_file 2533 [ 1430.367299][T21422] swap 708608 [ 1430.370596][T21422] swapcached 16384 [ 1430.374328][T21422] pgpgin 446610 [ 1430.377830][T21422] pgpgout 446606 [ 1430.381389][T21422] pgfault 443761 [ 1430.384983][T21422] pgmajfault 14312 [ 1430.388723][T21422] inactive_anon 0 [ 1430.392417][T21422] active_anon 0 [ 1430.395910][T21422] inactive_file 0 [ 1430.399553][T21422] active_file 0 [ 1430.403090][T21422] unevictable 0 [ 1430.406673][T21422] hierarchical_memory_limit 314572800 [ 1430.412065][T21422] hierarchical_memsw_limit 9223372036854771712 [ 1430.418343][T21422] total_cache 0 [ 1430.421845][T21422] total_rss 8192 [ 1430.425480][T21422] total_shmem 0 [ 1430.429022][T21422] total_mapped_file 0 [ 1430.433097][T21422] total_dirty 0 [ 1430.436655][T21422] total_writeback 12288 [ 1430.440903][T21422] total_workingset_refault_anon 33843 [ 1430.446413][T21422] total_workingset_refault_file 2533 [ 1430.451706][T21422] total_swap 708608 [ 1430.455614][T21422] total_swapcached 16384 [ 1430.459899][T21422] total_pgpgin 446610 [ 1430.463936][T21422] total_pgpgout 446606 [ 1430.468085][T21422] total_pgfault 443761 [ 1430.472308][T21422] total_pgmajfault 14312 [ 1430.476609][T21422] total_inactive_anon 0 [ 1430.480770][T21422] total_active_anon 0 [ 1430.484772][T21422] total_inactive_file 0 [ 1430.488933][T21422] total_active_file 0 [ 1430.492923][T21422] total_unevictable 0 [ 1430.496952][T21422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21422,uid=0 [ 1430.512316][T21422] Memory cgroup out of memory: Killed process 21422 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1430.529853][T21427] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1430.543431][T21427] CPU: 1 PID: 21427 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1430.553860][T21427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1430.563928][T21427] Call Trace: [ 1430.567231][T21427] [ 1430.570268][T21427] dump_stack_lvl+0xda/0x130 [ 1430.574955][T21427] dump_stack+0x15/0x20 [ 1430.579217][T21427] dump_header+0x82/0x2d0 [ 1430.583664][T21427] oom_kill_process+0x33a/0x4c0 [ 1430.588598][T21427] out_of_memory+0x9ca/0xbf0 [ 1430.593263][T21427] mem_cgroup_out_of_memory+0x139/0x190 [ 1430.598820][T21427] try_charge_memcg+0x75c/0xd30 [ 1430.603754][T21427] obj_cgroup_charge_pages+0xab/0x130 [ 1430.609210][T21427] __memcg_kmem_charge_page+0x9c/0x170 [ 1430.614689][T21427] __alloc_pages+0x1bb/0x340 [ 1430.619303][T21427] alloc_pages_mpol+0xb1/0x1d0 [ 1430.624377][T21427] alloc_pages+0xe0/0x100 [ 1430.628769][T21427] __vmalloc_node_range+0x6d2/0xea0 [ 1430.634095][T21427] kvmalloc_node+0x121/0x160 [ 1430.638692][T21427] ? xt_alloc_table_info+0x3d/0x80 [ 1430.643869][T21427] xt_alloc_table_info+0x3d/0x80 [ 1430.648817][T21427] do_arpt_set_ctl+0x634/0x13b0 [ 1430.653765][T21427] ? __futex_wait+0x227/0x280 [ 1430.658481][T21427] ? __futex_wake_mark+0x70/0x70 [ 1430.663516][T21427] ? tcp_release_cb+0xfe/0x370 [ 1430.668426][T21427] ? _raw_spin_unlock_bh+0x36/0x40 [ 1430.673743][T21427] nf_setsockopt+0x18d/0x1b0 [ 1430.678352][T21427] ip_setsockopt+0xe6/0x100 [ 1430.682868][T21427] tcp_setsockopt+0x90/0xa0 [ 1430.687402][T21427] sock_common_setsockopt+0x61/0x70 [ 1430.692639][T21427] ? sock_common_recvmsg+0xe0/0xe0 [ 1430.697857][T21427] __sys_setsockopt+0x1d4/0x240 [ 1430.702818][T21427] __x64_sys_setsockopt+0x66/0x80 [ 1430.707859][T21427] do_syscall_64+0x44/0x110 [ 1430.712444][T21427] ? syscall_exit_to_user_mode+0x38/0x140 [ 1430.718192][T21427] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1430.724125][T21427] RIP: 0033:0x7fa159e9bae9 [ 1430.728613][T21427] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1430.748291][T21427] RSP: 002b:00007fa1591fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1430.756736][T21427] RAX: ffffffffffffffda RBX: 00007fa159fbb050 RCX: 00007fa159e9bae9 [ 1430.764718][T21427] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1430.772806][T21427] RBP: 00007fa159ee747a R08: 0000000000000438 R09: 0000000000000000 [ 1430.780778][T21427] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1430.788852][T21427] R13: 000000000000006e R14: 00007fa159fbb050 R15: 00007ffea5cad6d8 [ 1430.796831][T21427] [ 1430.799988][T21427] memory: usage 307052kB, limit 307200kB, failcnt 192615 [ 1430.807078][T21427] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 1430.815007][T21427] kmem: usage 307040kB, limit 9007199254740988kB, failcnt 0 [ 1430.822298][T21427] Memory cgroup stats for /syz0: [ 1430.824015][T21427] cache 4096 [ 1430.832215][T21427] rss 8192 [ 1430.835284][T21427] shmem 0 [ 1430.838350][T21427] mapped_file 0 [ 1430.841819][T21427] dirty 0 [ 1430.844782][T21427] writeback 0 [ 1430.848154][T21427] workingset_refault_anon 38317 [ 1430.853022][T21427] workingset_refault_file 10296 [ 1430.857991][T21427] swap 454656 [ 1430.861346][T21427] swapcached 8192 [ 1430.865011][T21427] pgpgin 3632263 [ 1430.868570][T21427] pgpgout 3632260 [ 1430.872236][T21427] pgfault 3564692 [ 1430.875937][T21427] pgmajfault 18266 [ 1430.879758][T21427] inactive_anon 8192 [ 1430.883709][T21427] active_anon 0 [ 1430.887251][T21427] inactive_file 0 [ 1430.890955][T21427] active_file 4096 [ 1430.894730][T21427] unevictable 0 [ 1430.898241][T21427] hierarchical_memory_limit 314572800 [ 1430.903620][T21427] hierarchical_memsw_limit 9223372036854771712 [ 1430.909874][T21427] total_cache 4096 [ 1430.913599][T21427] total_rss 8192 [ 1430.917191][T21427] total_shmem 0 [ 1430.920768][T21427] total_mapped_file 0 [ 1430.924830][T21427] total_dirty 0 [ 1430.928299][T21427] total_writeback 0 [ 1430.932145][T21427] total_workingset_refault_anon 38317 [ 1430.937632][T21427] total_workingset_refault_file 10296 [ 1430.943127][T21427] total_swap 454656 [ 1430.946996][T21427] total_swapcached 8192 [ 1430.951154][T21427] total_pgpgin 3632263 [ 1430.955332][T21427] total_pgpgout 3632260 [ 1430.959507][T21427] total_pgfault 3564692 [ 1430.963666][T21427] total_pgmajfault 18266 [ 1430.967950][T21427] total_inactive_anon 8192 [ 1430.972373][T21427] total_active_anon 0 [ 1430.976389][T21427] total_inactive_file 0 [ 1430.980581][T21427] total_active_file 4096 [ 1430.984844][T21427] total_unevictable 0 [ 1430.988823][T21427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21414,uid=0 [ 1431.004209][T21427] Memory cgroup out of memory: Killed process 21414 (syz-executor.0) total-vm:46560kB, anon-rss:504kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfffdffff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) 05:51:35 executing program 2: setresuid(0xee00, 0x0, 0xee01) r0 = getuid() setresuid(0xee00, r0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:35 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x1018, r0}, './file0\x00'}) 05:51:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:35 executing program 2: setresuid(0xee00, 0x0, 0xee01) r0 = getuid() setresuid(0xee00, r0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x0) 05:51:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x5, 0x0, 0x0) 05:51:35 executing program 2: setresuid(0xee00, 0x0, 0xee01) r0 = getuid() setresuid(0xee00, r0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:35 executing program 3: setresuid(0xee00, 0x0, 0xee01) r0 = getuid() setresuid(0xee00, r0, 0xee01) 05:51:36 executing program 4: r0 = socket$inet(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 1431.864393][T21447] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1431.875773][T21447] CPU: 0 PID: 21447 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1431.886300][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1431.896381][T21447] Call Trace: [ 1431.899731][T21447] [ 1431.902689][T21447] dump_stack_lvl+0xda/0x130 [ 1431.907376][T21447] dump_stack+0x15/0x20 [ 1431.911564][T21447] dump_header+0x82/0x2d0 [ 1431.915938][T21447] oom_kill_process+0x33a/0x4c0 [ 1431.920845][T21447] out_of_memory+0x9ca/0xbf0 [ 1431.925490][T21447] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1431.931614][T21447] mem_cgroup_out_of_memory+0x139/0x190 [ 1431.937267][T21447] try_charge_memcg+0x75c/0xd30 [ 1431.942485][T21447] ? __swap_duplicate+0x29b/0x2b0 [ 1431.947538][T21447] ? radix_tree_lookup+0xf9/0x150 [ 1431.952721][T21447] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1431.959024][T21447] __read_swap_cache_async+0x2f6/0x550 [ 1431.964540][T21447] swap_cluster_readahead+0x27c/0x4c0 [ 1431.969947][T21447] swapin_readahead+0xe9/0x7f0 [ 1431.974740][T21447] ? __filemap_get_folio+0x41a/0x5a0 [ 1431.980082][T21447] ? __bpf_prog_run32+0x74/0xa0 [ 1431.984957][T21447] ? swap_cache_get_folio+0x6e/0x200 [ 1431.990268][T21447] do_swap_page+0x4a0/0x1670 [ 1431.994944][T21447] ? __rcu_read_unlock+0x4d/0x70 [ 1431.999975][T21447] ? __rcu_read_lock+0x35/0x50 [ 1432.004751][T21447] ? pte_offset_map_nolock+0x124/0x1d0 [ 1432.010223][T21447] handle_mm_fault+0xa36/0x2dd0 [ 1432.015137][T21447] exc_page_fault+0x3ff/0x6c0 [ 1432.019853][T21447] asm_exc_page_fault+0x26/0x30 [ 1432.024722][T21447] RIP: 0033:0x7ff5cf2d6ae4 [ 1432.029278][T21447] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1432.049025][T21447] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1432.055192][T21447] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1432.063239][T21447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1432.071236][T21447] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1432.079226][T21447] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015d97f [ 1432.087214][T21447] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015d63e [ 1432.095203][T21447] [ 1432.098586][T21447] memory: usage 307200kB, limit 307200kB, failcnt 117362 [ 1432.105652][T21447] memory+swap: usage 307848kB, limit 9007199254740988kB, failcnt 0 [ 1432.113607][T21447] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1432.121020][T21447] Memory cgroup stats for /syz1: [ 1432.123940][T21447] cache 0 [ 1432.131885][T21447] rss 12288 [ 1432.135107][T21447] shmem 0 [ 1432.138117][T21447] mapped_file 0 [ 1432.141582][T21447] dirty 0 [ 1432.144526][T21447] writeback 12288 [ 1432.148188][T21447] workingset_refault_anon 33885 [ 1432.153052][T21447] workingset_refault_file 2533 [ 1432.158021][T21447] swap 663552 [ 1432.161313][T21447] swapcached 20480 [ 1432.165094][T21447] pgpgin 446675 [ 1432.168609][T21447] pgpgout 446670 [ 1432.172172][T21447] pgfault 443866 [ 1432.175849][T21447] pgmajfault 14323 [ 1432.179682][T21447] inactive_anon 0 [ 1432.183319][T21447] active_anon 0 [ 1432.186805][T21447] inactive_file 0 [ 1432.190443][T21447] active_file 0 [ 1432.193925][T21447] unevictable 0 [ 1432.197415][T21447] hierarchical_memory_limit 314572800 [ 1432.202796][T21447] hierarchical_memsw_limit 9223372036854771712 [ 1432.209053][T21447] total_cache 0 [ 1432.212531][T21447] total_rss 12288 [ 1432.216296][T21447] total_shmem 0 [ 1432.219797][T21447] total_mapped_file 0 [ 1432.223832][T21447] total_dirty 0 [ 1432.227332][T21447] total_writeback 12288 [ 1432.231533][T21447] total_workingset_refault_anon 33885 [ 1432.236927][T21447] total_workingset_refault_file 2533 [ 1432.242217][T21447] total_swap 663552 [ 1432.246131][T21447] total_swapcached 20480 [ 1432.250375][T21447] total_pgpgin 446675 [ 1432.254344][T21447] total_pgpgout 446670 [ 1432.258462][T21447] total_pgfault 443866 [ 1432.262622][T21447] total_pgmajfault 14323 [ 1432.266906][T21447] total_inactive_anon 0 [ 1432.271063][T21447] total_active_anon 0 [ 1432.275112][T21447] total_inactive_file 0 [ 1432.279265][T21447] total_active_file 0 [ 1432.283265][T21447] total_unevictable 0 [ 1432.287270][T21447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21447,uid=0 [ 1432.302617][T21447] Memory cgroup out of memory: Killed process 21447 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:37 executing program 2: setresuid(0xee00, 0x0, 0xee01) r0 = getuid() setresuid(0xee00, r0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:37 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x40086602, &(0x7f0000000040)={{0x18, 0x1, 0x18}, './file0\x00'}) 05:51:37 executing program 4: r0 = io_uring_setup(0x4a7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000800)=""/188, 0xbc}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000008c0)}], 0x3) 05:51:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xffffefff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:37 executing program 2: setresuid(0xee00, 0x0, 0xee01) getuid() syslog(0x0, 0x0, 0x0) 05:51:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0x0, 0x0, 0x0, 0x4}, 0x48) 05:51:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 05:51:37 executing program 4: syz_io_uring_setup(0x75c9, &(0x7f0000005dc0), 0x0, 0x0) syz_io_uring_setup(0x1d1c, &(0x7f0000006280), &(0x7f0000006300), &(0x7f0000006340)) 05:51:37 executing program 2: setresuid(0xee00, 0x0, 0xee01) getuid() syslog(0x0, 0x0, 0x0) 05:51:37 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000200)={'vcan0\x00'}) 05:51:37 executing program 2: setresuid(0xee00, 0x0, 0xee01) getuid() syslog(0x0, 0x0, 0x0) 05:51:37 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8917, &(0x7f0000000200)={'vcan0\x00'}) 05:51:37 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, 0x0) [ 1433.353988][T21482] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1433.365480][T21482] CPU: 0 PID: 21482 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1433.376093][T21482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1433.386156][T21482] Call Trace: [ 1433.389436][T21482] [ 1433.392369][T21482] dump_stack_lvl+0xda/0x130 [ 1433.396978][T21482] dump_stack+0x15/0x20 [ 1433.401212][T21482] dump_header+0x82/0x2d0 [ 1433.405617][T21482] oom_kill_process+0x33a/0x4c0 [ 1433.410517][T21482] out_of_memory+0x9ca/0xbf0 [ 1433.415122][T21482] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1433.421256][T21482] mem_cgroup_out_of_memory+0x139/0x190 [ 1433.426961][T21482] try_charge_memcg+0x75c/0xd30 [ 1433.431894][T21482] ? __swap_duplicate+0x29b/0x2b0 [ 1433.436967][T21482] ? radix_tree_lookup+0xf9/0x150 [ 1433.442118][T21482] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1433.448210][T21482] __read_swap_cache_async+0x2f6/0x550 [ 1433.453685][T21482] swap_cluster_readahead+0x27c/0x4c0 [ 1433.459070][T21482] swapin_readahead+0xe9/0x7f0 [ 1433.463940][T21482] ? __filemap_get_folio+0x41a/0x5a0 [ 1433.469282][T21482] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1433.475084][T21482] ? swap_cache_get_folio+0x6e/0x200 [ 1433.480386][T21482] do_swap_page+0x4a0/0x1670 [ 1433.485043][T21482] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1433.490403][T21482] ? __rcu_read_lock+0x35/0x50 [ 1433.495175][T21482] ? pte_offset_map_nolock+0x124/0x1d0 [ 1433.500764][T21482] handle_mm_fault+0xa36/0x2dd0 [ 1433.505633][T21482] exc_page_fault+0x3ff/0x6c0 [ 1433.510327][T21482] asm_exc_page_fault+0x26/0x30 [ 1433.515272][T21482] RIP: 0033:0x7ff5cf2d6ae4 [ 1433.519698][T21482] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1433.539334][T21482] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1433.545403][T21482] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1433.553421][T21482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1433.561393][T21482] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1433.569448][T21482] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015df2b [ 1433.577442][T21482] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015dbea [ 1433.585484][T21482] [ 1433.588691][T21482] memory: usage 307200kB, limit 307200kB, failcnt 117518 [ 1433.595812][T21482] memory+swap: usage 307864kB, limit 9007199254740988kB, failcnt 0 05:51:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1433.603713][T21482] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1433.611042][T21482] Memory cgroup stats for /syz1: [ 1433.642996][T21482] cache 0 [ 1433.651089][T21482] rss 0 [ 1433.653888][T21482] shmem 0 [ 1433.657347][T21482] mapped_file 0 [ 1433.660819][T21482] dirty 0 [ 1433.663762][T21482] writeback 0 [ 1433.667078][T21482] workingset_refault_anon 33921 [ 1433.671935][T21482] workingset_refault_file 2533 [ 1433.676790][T21482] swap 688128 [ 1433.680086][T21482] swapcached 0 [ 1433.683810][T21482] pgpgin 446734 [ 1433.687373][T21482] pgpgout 446734 [ 1433.691005][T21482] pgfault 443963 [ 1433.694560][T21482] pgmajfault 14339 [ 1433.698403][T21482] inactive_anon 0 [ 1433.702050][T21482] active_anon 0 [ 1433.705601][T21482] inactive_file 0 [ 1433.709263][T21482] active_file 0 [ 1433.712727][T21482] unevictable 0 [ 1433.716395][T21482] hierarchical_memory_limit 314572800 [ 1433.721777][T21482] hierarchical_memsw_limit 9223372036854771712 [ 1433.728030][T21482] total_cache 0 [ 1433.731501][T21482] total_rss 0 [ 1433.734848][T21482] total_shmem 0 [ 1433.738309][T21482] total_mapped_file 0 [ 1433.742291][T21482] total_dirty 0 [ 1433.745792][T21482] total_writeback 0 [ 1433.749606][T21482] total_workingset_refault_anon 33921 [ 1433.755076][T21482] total_workingset_refault_file 2533 [ 1433.760402][T21482] total_swap 688128 [ 1433.764220][T21482] total_swapcached 0 [ 1433.768137][T21482] total_pgpgin 446734 [ 1433.772123][T21482] total_pgpgout 446734 [ 1433.776214][T21482] total_pgfault 443963 [ 1433.780361][T21482] total_pgmajfault 14339 [ 1433.784609][T21482] total_inactive_anon 0 [ 1433.788800][T21482] total_active_anon 0 [ 1433.792808][T21482] total_inactive_file 0 [ 1433.796984][T21482] total_active_file 0 [ 1433.800964][T21482] total_unevictable 0 [ 1433.804965][T21482] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21482,uid=0 [ 1433.820287][T21482] Memory cgroup out of memory: Killed process 21482 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0xff0f, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfffffdff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:38 executing program 3: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 05:51:38 executing program 2: setresuid(0xee00, 0x0, 0xee01) setresuid(0xee00, 0x0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:38 executing program 4: msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r0 = msgget(0x0, 0x6) msgrcv(r0, &(0x7f0000000000)={0x0, ""/203}, 0xd3, 0x1, 0x0) 05:51:38 executing program 2: setresuid(0xee00, 0x0, 0xee01) setresuid(0xee00, 0x0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 05:51:38 executing program 2: setresuid(0xee00, 0x0, 0xee01) setresuid(0xee00, 0x0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:38 executing program 2: r0 = getuid() setresuid(0xee00, r0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:38 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 05:51:38 executing program 2: r0 = getuid() setresuid(0xee00, r0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:39 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x5]}, 0x8}) [ 1434.923383][T21521] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1434.934836][T21521] CPU: 0 PID: 21521 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1434.945270][T21521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1434.955425][T21521] Call Trace: [ 1434.958728][T21521] [ 1434.961735][T21521] dump_stack_lvl+0xda/0x130 [ 1434.966403][T21521] dump_stack+0x15/0x20 [ 1434.970585][T21521] dump_header+0x82/0x2d0 [ 1434.974939][T21521] oom_kill_process+0x33a/0x4c0 [ 1434.979851][T21521] out_of_memory+0x9ca/0xbf0 [ 1434.984459][T21521] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1434.990560][T21521] mem_cgroup_out_of_memory+0x139/0x190 [ 1434.996200][T21521] try_charge_memcg+0x75c/0xd30 [ 1435.001100][T21521] ? __swap_duplicate+0x29b/0x2b0 [ 1435.006163][T21521] ? radix_tree_lookup+0xf9/0x150 [ 1435.011242][T21521] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1435.017351][T21521] __read_swap_cache_async+0x2f6/0x550 [ 1435.022864][T21521] swap_cluster_readahead+0x27c/0x4c0 [ 1435.028297][T21521] swapin_readahead+0xe9/0x7f0 [ 1435.033372][T21521] ? __filemap_get_folio+0x41a/0x5a0 [ 1435.038734][T21521] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1435.044375][T21521] ? swap_cache_get_folio+0x6e/0x200 [ 1435.049681][T21521] do_swap_page+0x4a0/0x1670 [ 1435.054275][T21521] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1435.059643][T21521] ? __rcu_read_lock+0x35/0x50 [ 1435.064483][T21521] ? pte_offset_map_nolock+0x124/0x1d0 [ 1435.070013][T21521] handle_mm_fault+0xa36/0x2dd0 [ 1435.075036][T21521] exc_page_fault+0x3ff/0x6c0 [ 1435.079738][T21521] asm_exc_page_fault+0x26/0x30 [ 1435.084599][T21521] RIP: 0033:0x7ff5cf2d6ae4 [ 1435.089012][T21521] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1435.108681][T21521] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1435.114905][T21521] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1435.122981][T21521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1435.131015][T21521] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1435.139029][T21521] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015e544 [ 1435.147016][T21521] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015e203 [ 1435.155003][T21521] [ 1435.158085][T21521] memory: usage 307200kB, limit 307200kB, failcnt 117702 [ 1435.165140][T21521] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 [ 1435.173064][T21521] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1435.180369][T21521] Memory cgroup stats for /syz1: [ 1435.180770][T21521] cache 0 [ 1435.188812][T21521] rss 8192 [ 1435.191831][T21521] shmem 0 [ 1435.194903][T21521] mapped_file 0 [ 1435.198403][T21521] dirty 0 [ 1435.201338][T21521] writeback 0 [ 1435.204625][T21521] workingset_refault_anon 34006 [ 1435.209556][T21521] workingset_refault_file 2533 [ 1435.214323][T21521] swap 659456 [ 1435.217651][T21521] swapcached 8192 [ 1435.221292][T21521] pgpgin 446842 [ 1435.224827][T21521] pgpgout 446840 [ 1435.228460][T21521] pgfault 444133 [ 1435.232013][T21521] pgmajfault 14362 [ 1435.235783][T21521] inactive_anon 8192 [ 1435.239678][T21521] active_anon 0 [ 1435.243128][T21521] inactive_file 0 [ 1435.246857][T21521] active_file 0 [ 1435.250316][T21521] unevictable 0 [ 1435.253823][T21521] hierarchical_memory_limit 314572800 [ 1435.259233][T21521] hierarchical_memsw_limit 9223372036854771712 [ 1435.265615][T21521] total_cache 0 [ 1435.269069][T21521] total_rss 8192 [ 1435.272653][T21521] total_shmem 0 [ 1435.276154][T21521] total_mapped_file 0 [ 1435.280172][T21521] total_dirty 0 [ 1435.283645][T21521] total_writeback 0 [ 1435.287484][T21521] total_workingset_refault_anon 34006 [ 1435.292933][T21521] total_workingset_refault_file 2533 [ 1435.298270][T21521] total_swap 659456 [ 1435.302077][T21521] total_swapcached 8192 [ 1435.306339][T21521] total_pgpgin 446842 [ 1435.310425][T21521] total_pgpgout 446840 [ 1435.314502][T21521] total_pgfault 444133 [ 1435.318660][T21521] total_pgmajfault 14362 [ 1435.322904][T21521] total_inactive_anon 8192 [ 1435.327442][T21521] total_active_anon 0 [ 1435.331423][T21521] total_inactive_file 0 [ 1435.335673][T21521] total_active_file 0 [ 1435.339654][T21521] total_unevictable 0 [ 1435.343684][T21521] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21521,uid=0 [ 1435.359007][T21521] Memory cgroup out of memory: Killed process 21521 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfffffff4, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000013c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)="04", 0x1}], 0x1, &(0x7f0000001200)=ANY=[@ANYBLOB="9800000000000000fb4c6cb525000000368b04631289d3c20939f29859c294ceea6a58d6a0e850ec207195ed2f804af0859abd8a8f8e0004779ddcf70d96827f90cf0bd358a1110c56a814e5263e3d4d2f6b2f53a630d60cf9bd1438a94465351225d817c7ec0fabffd2e769e4a337015a8ef0b820481e4b1949603bce4572f9a939716740c1331e9e80897bc0ba36871b6efedb777e0aced0"], 0x168}, 0x0) 05:51:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000013c0)=@nl=@proc={0x10, 0x0, 0x0, 0x8d1413b3aad76b5a}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)="04", 0x1}], 0x1, &(0x7f0000001200)=ANY=[@ANYBLOB="9800000000000000fb4c6cb525000000368b04631289d3c20939f29859c294ceea6a58d6a0e850ec207195ed2f804af0859abd8a8f8e0004779ddcf70d96827f90cf0bd358a1110c56a814e5263e3d4d2f6b2f53a630d60cf9bd1438a94465351225d817c7ec0fabffd2e769e4a337015a8ef0b820481e4b1949603bce4572f9a939716740c1331e9e80897bc0ba36871b6efedb777e0aced0"], 0x168}, 0x0) 05:51:40 executing program 2: r0 = getuid() setresuid(0xee00, r0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:40 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xb101, 0x0) 05:51:40 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 05:51:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x14}, 0x0) 05:51:40 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x40047452, 0x0) 05:51:40 executing program 2: setresuid(0xee00, 0x0, 0xee01) getuid() setresuid(0xee00, 0x0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:40 executing program 4: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) [ 1436.297825][T21547] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1436.309256][T21547] CPU: 1 PID: 21547 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1436.319839][T21547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1436.329905][T21547] Call Trace: [ 1436.333210][T21547] [ 1436.336147][T21547] dump_stack_lvl+0xda/0x130 [ 1436.340757][T21547] dump_stack+0x15/0x20 [ 1436.345011][T21547] dump_header+0x82/0x2d0 [ 1436.349400][T21547] oom_kill_process+0x33a/0x4c0 [ 1436.354286][T21547] out_of_memory+0x9ca/0xbf0 [ 1436.358959][T21547] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1436.365045][T21547] mem_cgroup_out_of_memory+0x139/0x190 [ 1436.370611][T21547] try_charge_memcg+0x75c/0xd30 [ 1436.375561][T21547] ? __swap_duplicate+0x29b/0x2b0 [ 1436.380598][T21547] ? radix_tree_lookup+0xf9/0x150 [ 1436.385735][T21547] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1436.391863][T21547] __read_swap_cache_async+0x2f6/0x550 [ 1436.397344][T21547] swap_cluster_readahead+0x27c/0x4c0 [ 1436.402731][T21547] swapin_readahead+0xe9/0x7f0 [ 1436.407587][T21547] ? __filemap_get_folio+0x41a/0x5a0 [ 1436.412886][T21547] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1436.418606][T21547] ? swap_cache_get_folio+0x6e/0x200 [ 1436.423931][T21547] do_swap_page+0x4a0/0x1670 [ 1436.428530][T21547] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1436.433915][T21547] ? __rcu_read_lock+0x35/0x50 [ 1436.438818][T21547] ? pte_offset_map_nolock+0x124/0x1d0 [ 1436.444291][T21547] handle_mm_fault+0xa36/0x2dd0 [ 1436.449159][T21547] exc_page_fault+0x3ff/0x6c0 [ 1436.453934][T21547] asm_exc_page_fault+0x26/0x30 [ 1436.458940][T21547] RIP: 0033:0x7ff5cf2d6ae4 [ 1436.463358][T21547] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1436.482991][T21547] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1436.489078][T21547] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1436.497068][T21547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1436.505074][T21547] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1436.513047][T21547] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015eae0 [ 1436.521025][T21547] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015e79f [ 1436.529076][T21547] [ 1436.532279][T21547] memory: usage 307200kB, limit 307200kB, failcnt 117817 [ 1436.539437][T21547] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 1436.547465][T21547] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 1436.554825][T21547] Memory cgroup stats for /syz1: [ 1436.556989][T21547] cache 0 [ 1436.564928][T21547] rss 8192 [ 1436.567956][T21547] shmem 0 [ 1436.570906][T21547] mapped_file 0 [ 1436.574409][T21547] dirty 0 [ 1436.577425][T21547] writeback 8192 [ 1436.580985][T21547] workingset_refault_anon 34039 [ 1436.585880][T21547] workingset_refault_file 2533 [ 1436.590644][T21547] swap 684032 [ 1436.593933][T21547] swapcached 36864 [ 1436.597682][T21547] pgpgin 446898 [ 1436.601145][T21547] pgpgout 446889 [ 1436.604711][T21547] pgfault 444267 [ 1436.608269][T21547] pgmajfault 14370 [ 1436.612019][T21547] inactive_anon 0 [ 1436.615688][T21547] active_anon 4096 [ 1436.619601][T21547] inactive_file 0 [ 1436.623238][T21547] active_file 0 [ 1436.626728][T21547] unevictable 0 [ 1436.630192][T21547] hierarchical_memory_limit 314572800 [ 1436.635597][T21547] hierarchical_memsw_limit 9223372036854771712 [ 1436.641766][T21547] total_cache 0 [ 1436.645257][T21547] total_rss 8192 [ 1436.648804][T21547] total_shmem 0 [ 1436.652273][T21547] total_mapped_file 0 [ 1436.656303][T21547] total_dirty 0 [ 1436.659763][T21547] total_writeback 8192 [ 1436.663859][T21547] total_workingset_refault_anon 34039 [ 1436.669252][T21547] total_workingset_refault_file 2533 [ 1436.674531][T21547] total_swap 684032 [ 1436.678449][T21547] total_swapcached 36864 [ 1436.682693][T21547] total_pgpgin 446898 [ 1436.686697][T21547] total_pgpgout 446889 [ 1436.690773][T21547] total_pgfault 444267 [ 1436.694903][T21547] total_pgmajfault 14370 [ 1436.699161][T21547] total_inactive_anon 0 [ 1436.703321][T21547] total_active_anon 4096 [ 1436.707585][T21547] total_inactive_file 0 [ 1436.711751][T21547] total_active_file 0 [ 1436.715797][T21547] total_unevictable 0 [ 1436.719835][T21547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21547,uid=0 [ 1436.735192][T21547] Memory cgroup out of memory: Killed process 21547 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1436.797126][T21548] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1436.808594][T21548] CPU: 0 PID: 21548 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1436.819109][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1436.829186][T21548] Call Trace: [ 1436.832487][T21548] [ 1436.835434][T21548] dump_stack_lvl+0xda/0x130 [ 1436.840130][T21548] dump_stack+0x15/0x20 [ 1436.844310][T21548] dump_header+0x82/0x2d0 [ 1436.848665][T21548] oom_kill_process+0x33a/0x4c0 [ 1436.853607][T21548] out_of_memory+0x9ca/0xbf0 [ 1436.858253][T21548] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1436.864360][T21548] mem_cgroup_out_of_memory+0x139/0x190 [ 1436.869940][T21548] try_charge_memcg+0x75c/0xd30 [ 1436.874896][T21548] ? __swap_duplicate+0x29b/0x2b0 [ 1436.879966][T21548] ? radix_tree_lookup+0xf9/0x150 [ 1436.885136][T21548] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1436.891317][T21548] __read_swap_cache_async+0x2f6/0x550 [ 1436.896886][T21548] swap_cluster_readahead+0x27c/0x4c0 [ 1436.902311][T21548] swapin_readahead+0xe9/0x7f0 [ 1436.907105][T21548] ? __filemap_get_folio+0x41a/0x5a0 [ 1436.912478][T21548] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1436.918193][T21548] ? swap_cache_get_folio+0x6e/0x200 [ 1436.923563][T21548] do_swap_page+0x4a0/0x1670 [ 1436.928305][T21548] ? __rcu_read_lock+0x35/0x50 [ 1436.933156][T21548] ? pte_offset_map_nolock+0x124/0x1d0 [ 1436.938668][T21548] handle_mm_fault+0xa36/0x2dd0 [ 1436.943628][T21548] ? mt_find+0x1d9/0x310 [ 1436.947902][T21548] exc_page_fault+0x2f7/0x6c0 [ 1436.952650][T21548] asm_exc_page_fault+0x26/0x30 [ 1436.957565][T21548] RIP: 0010:__get_user_8+0x11/0x20 [ 1436.962713][T21548] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1436.982463][T21548] RSP: 0018:ffffc90000b87e38 EFLAGS: 00050202 [ 1436.988560][T21548] RAX: 0000555556440da8 RBX: ffffc90000b87e40 RCX: ffffffff814442c3 [ 1436.996535][T21548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888102cb1a10 [ 1437.004518][T21548] RBP: ffffc90000b87ef8 R08: 0001888102cb1a17 R09: 0000000000000000 [ 1437.012490][T21548] R10: 0001ffffffffffff R11: 0001888102cb16d8 R12: ffff888102cb1040 [ 1437.020465][T21548] R13: ffff888102cb1a10 R14: ffffc90000b87f58 R15: ffffc90000b87fd8 [ 1437.028446][T21548] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1437.034397][T21548] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1437.040133][T21548] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1437.046113][T21548] exit_to_user_mode_loop+0xcc/0xe0 [ 1437.051374][T21548] exit_to_user_mode_prepare+0x6c/0xb0 [ 1437.056847][T21548] irqentry_exit_to_user_mode+0x9/0x20 [ 1437.062386][T21548] irqentry_exit+0x12/0x40 [ 1437.066820][T21548] asm_exc_page_fault+0x26/0x30 [ 1437.071731][T21548] RIP: 0033:0x7fa159e46226 [ 1437.076162][T21548] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 1437.095861][T21548] RSP: 002b:00007ffea5cad718 EFLAGS: 00010287 [ 1437.101941][T21548] RAX: 0000001b2e927000 RBX: 00007fa159fbb0e8 RCX: 0000001b2e920000 [ 1437.109934][T21548] RDX: 0000001b2e927004 RSI: 0000000080000000 RDI: 00000000815d6999 [ 1437.117905][T21548] RBP: 00000000815d6999 R08: 0000001b2ed20000 R09: 0000000000000999 [ 1437.125985][T21548] R10: 00000000815d699d R11: 0000000000041fd8 R12: 000000000003ce17 [ 1437.133979][T21548] R13: 0000000000000001 R14: 00007fa159faf000 R15: ffffffff815d6e80 [ 1437.142016][T21548] ? iput+0x550/0x5b0 [ 1437.146005][T21548] [ 1437.149100][T21548] memory: usage 307200kB, limit 307200kB, failcnt 194252 [ 1437.156166][T21548] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 1437.164069][T21548] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1437.171401][T21548] Memory cgroup stats for /syz0: [ 1437.171639][T21548] cache 4096 [ 1437.179909][T21548] rss 8192 [ 1437.182948][T21548] shmem 0 [ 1437.185898][T21548] mapped_file 0 [ 1437.189380][T21548] dirty 0 [ 1437.192382][T21548] writeback 12288 [ 1437.196081][T21548] workingset_refault_anon 38500 [ 1437.200942][T21548] workingset_refault_file 10296 [ 1437.205848][T21548] swap 405504 [ 1437.209244][T21548] swapcached 12288 [ 1437.212964][T21548] pgpgin 3648932 [ 1437.216524][T21548] pgpgout 3648928 [ 1437.220158][T21548] pgfault 3581691 [ 1437.223781][T21548] pgmajfault 18365 [ 1437.227514][T21548] inactive_anon 0 [ 1437.231147][T21548] active_anon 0 [ 1437.234597][T21548] inactive_file 0 [ 1437.238243][T21548] active_file 4096 [ 1437.242088][T21548] unevictable 0 [ 1437.245564][T21548] hierarchical_memory_limit 314572800 [ 1437.250934][T21548] hierarchical_memsw_limit 9223372036854771712 [ 1437.257233][T21548] total_cache 4096 [ 1437.260968][T21548] total_rss 8192 [ 1437.264539][T21548] total_shmem 0 [ 1437.268023][T21548] total_mapped_file 0 [ 1437.272001][T21548] total_dirty 0 [ 1437.275535][T21548] total_writeback 12288 [ 1437.279700][T21548] total_workingset_refault_anon 38500 [ 1437.285167][T21548] total_workingset_refault_file 10296 [ 1437.290536][T21548] total_swap 405504 [ 1437.294465][T21548] total_swapcached 12288 [ 1437.298726][T21548] total_pgpgin 3648932 [ 1437.302795][T21548] total_pgpgout 3648928 [ 1437.307043][T21548] total_pgfault 3581691 [ 1437.311245][T21548] total_pgmajfault 18365 [ 1437.315530][T21548] total_inactive_anon 0 [ 1437.319686][T21548] total_active_anon 0 [ 1437.323653][T21548] total_inactive_file 0 [ 1437.327872][T21548] total_active_file 4096 [ 1437.332211][T21548] total_unevictable 0 [ 1437.336217][T21548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21548,uid=0 [ 1437.351568][T21548] Memory cgroup out of memory: Killed process 21548 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8836kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:51:42 executing program 2: setresuid(0xee00, 0x0, 0xee01) getuid() setresuid(0xee00, 0x0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0xc0}}, 0x0) 05:51:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x10}, @void}}}, 0xc0}}, 0x0) 05:51:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfffffff5, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:42 executing program 2: setresuid(0xee00, 0x0, 0xee01) getuid() setresuid(0xee00, 0x0, 0xee01) syslog(0x0, 0x0, 0x0) 05:51:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}}, 0x0) 05:51:42 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891a, 0x0) 05:51:42 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, 0x0) 05:51:42 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8915, &(0x7f0000000200)={'vcan0\x00'}) 05:51:42 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891b, &(0x7f0000000200)={'vcan0\x00'}) 05:51:42 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x2}, &(0x7f0000000180)={0x7}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x5]}, 0x8}) 05:51:42 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) [ 1438.446016][T21574] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1438.457472][T21574] CPU: 0 PID: 21574 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1438.467909][T21574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1438.477984][T21574] Call Trace: [ 1438.481282][T21574] [ 1438.484250][T21574] dump_stack_lvl+0xda/0x130 [ 1438.488889][T21574] dump_stack+0x15/0x20 [ 1438.493179][T21574] dump_header+0x82/0x2d0 [ 1438.497536][T21574] oom_kill_process+0x33a/0x4c0 [ 1438.502483][T21574] out_of_memory+0x9ca/0xbf0 [ 1438.507158][T21574] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1438.513274][T21574] mem_cgroup_out_of_memory+0x139/0x190 [ 1438.519100][T21574] try_charge_memcg+0x75c/0xd30 [ 1438.523991][T21574] ? __swap_duplicate+0x29b/0x2b0 [ 1438.529195][T21574] ? radix_tree_lookup+0xf9/0x150 [ 1438.534269][T21574] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1438.540381][T21574] __read_swap_cache_async+0x2f6/0x550 [ 1438.545892][T21574] swap_cluster_readahead+0x27c/0x4c0 [ 1438.551386][T21574] swapin_readahead+0xe9/0x7f0 [ 1438.556186][T21574] ? __filemap_get_folio+0x41a/0x5a0 [ 1438.561503][T21574] ? __perf_event_task_sched_in+0x769/0x790 [ 1438.567561][T21574] ? swap_cache_get_folio+0x6e/0x200 [ 1438.572876][T21574] do_swap_page+0x4a0/0x1670 [ 1438.577528][T21574] ? __rcu_read_lock+0x35/0x50 [ 1438.582305][T21574] ? pte_offset_map_nolock+0x124/0x1d0 [ 1438.587865][T21574] handle_mm_fault+0xa36/0x2dd0 [ 1438.592727][T21574] ? mt_find+0x1d9/0x310 [ 1438.597012][T21574] exc_page_fault+0x2f7/0x6c0 [ 1438.601711][T21574] asm_exc_page_fault+0x26/0x30 [ 1438.606569][T21574] RIP: 0010:__get_user_8+0x11/0x20 [ 1438.611753][T21574] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1438.631440][T21574] RSP: 0018:ffffc900009d7e38 EFLAGS: 00050202 [ 1438.637522][T21574] RAX: 0000555556bc2da8 RBX: ffffc900009d7e40 RCX: ffffffff814442c3 [ 1438.645503][T21574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88813a433a90 [ 1438.653500][T21574] RBP: ffffc900009d7ef8 R08: 000188813a433a97 R09: 0000000000000000 [ 1438.661487][T21574] R10: 0001ffffffffffff R11: 000188813a433750 R12: ffff88813a4330c0 [ 1438.669461][T21574] R13: ffff88813a433a90 R14: ffffc900009d7f58 R15: ffffc900009d7fd8 [ 1438.677441][T21574] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1438.683561][T21574] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1438.689403][T21574] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1438.695467][T21574] exit_to_user_mode_loop+0xcc/0xe0 [ 1438.700720][T21574] exit_to_user_mode_prepare+0x6c/0xb0 [ 1438.706275][T21574] irqentry_exit_to_user_mode+0x9/0x20 [ 1438.711800][T21574] irqentry_exit+0x12/0x40 [ 1438.716237][T21574] asm_exc_page_fault+0x26/0x30 [ 1438.721171][T21574] RIP: 0033:0x7ff5cf2d6ae4 [ 1438.725589][T21574] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1438.745226][T21574] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1438.751297][T21574] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1438.759324][T21574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1438.767338][T21574] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1438.775360][T21574] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015f312 [ 1438.783344][T21574] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015efd1 [ 1438.791324][T21574] [ 1438.794534][T21574] memory: usage 307200kB, limit 307200kB, failcnt 117943 [ 1438.801632][T21574] memory+swap: usage 307860kB, limit 9007199254740988kB, failcnt 0 [ 1438.809569][T21574] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1438.816928][T21574] Memory cgroup stats for /syz1: [ 1438.817305][T21574] cache 0 [ 1438.825243][T21574] rss 8192 [ 1438.828295][T21574] shmem 0 [ 1438.831263][T21574] mapped_file 0 [ 1438.834769][T21574] dirty 0 [ 1438.837716][T21574] writeback 8192 [ 1438.841289][T21574] workingset_refault_anon 34085 [ 1438.846187][T21574] workingset_refault_file 2533 [ 1438.850960][T21574] swap 675840 [ 1438.854248][T21574] swapcached 8192 [ 1438.857939][T21574] pgpgin 446967 [ 1438.861411][T21574] pgpgout 446965 [ 1438.865061][T21574] pgfault 444423 [ 1438.868627][T21574] pgmajfault 14386 [ 1438.872401][T21574] inactive_anon 0 [ 1438.876067][T21574] active_anon 0 [ 1438.879528][T21574] inactive_file 0 [ 1438.883235][T21574] active_file 0 [ 1438.886837][T21574] unevictable 0 [ 1438.890422][T21574] hierarchical_memory_limit 314572800 05:51:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 05:51:43 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) [ 1438.895930][T21574] hierarchical_memsw_limit 9223372036854771712 [ 1438.902142][T21574] total_cache 0 [ 1438.905791][T21574] total_rss 8192 [ 1438.909407][T21574] total_shmem 0 [ 1438.912956][T21574] total_mapped_file 0 [ 1438.917047][T21574] total_dirty 0 [ 1438.920653][T21574] total_writeback 8192 [ 1438.924834][T21574] total_workingset_refault_anon 34085 [ 1438.930296][T21574] total_workingset_refault_file 2533 [ 1438.935618][T21574] total_swap 675840 [ 1438.939449][T21574] total_swapcached 8192 [ 1438.943636][T21574] total_pgpgin 446967 [ 1438.947664][T21574] total_pgpgout 446965 [ 1438.951935][T21574] total_pgfault 444423 [ 1438.956145][T21574] total_pgmajfault 14386 [ 1438.960468][T21574] total_inactive_anon 0 [ 1438.964645][T21574] total_active_anon 0 [ 1438.968689][T21574] total_inactive_file 0 [ 1438.972857][T21574] total_active_file 0 [ 1438.977029][T21574] total_unevictable 0 [ 1438.981015][T21574] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21574,uid=0 [ 1438.996413][T21574] Memory cgroup out of memory: Killed process 21574 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:43 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 05:51:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000013c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)="044972738050f2d13d053b2e001cfc58e6da6407dc33f1258d98b35923b53153007897247ffab7ce5b7db54dbcc26b96bc105ea6", 0x34}, {&(0x7f0000001440)="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", 0xe8d}], 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="9800000000000000fb4c6cb525000000368b04631289d3c20939f29859c294ceea6a58d6a0e850ec207195ed2f804af0859abd8a8f8e0004779ddcf70d96827f90cf0bd358a1110c56a814e5263e3d4d2f6b2f53a630d60cf9bd1438a94465351225d817c7ec0fabffd2e769e4a337015a8ef0b820481e4b1949603bce4572f9a939716740c1331e9e80897bc0ba36871b6efedb777e0aced0"], 0x168}, 0x0) 05:51:43 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8953, 0x0) 05:51:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfffffffb, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:44 executing program 2: r0 = socket(0x18, 0x800, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 05:51:44 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8922, &(0x7f0000000200)={'vcan0\x00'}) 05:51:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040001, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 05:51:44 executing program 2: setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000000080)=[{r1, 0x4}], 0x1, 0x0) 05:51:44 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000840)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x0, 0x40b}) 05:51:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2c, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x0) 05:51:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) [ 1440.051676][T21620] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1440.063062][T21620] CPU: 1 PID: 21620 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1440.073500][T21620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1440.083649][T21620] Call Trace: [ 1440.086974][T21620] [ 1440.089939][T21620] dump_stack_lvl+0xda/0x130 [ 1440.094565][T21620] dump_stack+0x15/0x20 [ 1440.098753][T21620] dump_header+0x82/0x2d0 [ 1440.103142][T21620] oom_kill_process+0x33a/0x4c0 [ 1440.108047][T21620] out_of_memory+0x9ca/0xbf0 [ 1440.112661][T21620] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1440.118878][T21620] mem_cgroup_out_of_memory+0x139/0x190 [ 1440.124464][T21620] try_charge_memcg+0x75c/0xd30 [ 1440.129384][T21620] ? __swap_duplicate+0x29b/0x2b0 [ 1440.134583][T21620] ? radix_tree_lookup+0xf9/0x150 [ 1440.139651][T21620] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1440.145799][T21620] __read_swap_cache_async+0x2f6/0x550 [ 1440.151285][T21620] swap_cluster_readahead+0x27c/0x4c0 [ 1440.156690][T21620] swapin_readahead+0xe9/0x7f0 [ 1440.161476][T21620] ? __filemap_get_folio+0x41a/0x5a0 [ 1440.166836][T21620] ? swap_cache_get_folio+0x6e/0x200 [ 1440.172207][T21620] do_swap_page+0x4a0/0x1670 [ 1440.176869][T21620] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1440.182353][T21620] ? __rcu_read_lock+0x35/0x50 [ 1440.187145][T21620] ? pte_offset_map_nolock+0x124/0x1d0 [ 1440.192749][T21620] handle_mm_fault+0xa36/0x2dd0 [ 1440.197654][T21620] exc_page_fault+0x3ff/0x6c0 [ 1440.202369][T21620] asm_exc_page_fault+0x26/0x30 [ 1440.207307][T21620] RIP: 0033:0x7ff5cf2d6ae4 [ 1440.211745][T21620] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1440.231512][T21620] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1440.237605][T21620] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 05:51:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000040)="2466eaa5cb9f86701997b43d09907a06047227091738d092b73bf994c287c130a8350ee2f0d4b6e4e8f0420e5c0e8c981cd341f16164c22870b8d88840e74f31c09d890e1a9272def706b45e72f850dbfd18dd3e3ee52e570f8a99a3921723161d9ad01b29c8d1c37c2b7b5ddbf57c6777cf25d700ef51", 0x77, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) 05:51:44 executing program 2: add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000000c0)="02", 0x1, 0xfffffffffffffffc) 05:51:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}}, 0x24}}, 0x0) [ 1440.245833][T21620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1440.253829][T21620] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1440.261908][T21620] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000015f995 [ 1440.269894][T21620] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000015f654 [ 1440.277898][T21620] [ 1440.281683][T21620] memory: usage 307200kB, limit 307200kB, failcnt 118136 [ 1440.289643][T21620] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 1440.297586][T21620] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1440.304961][T21620] Memory cgroup stats for /syz1: [ 1440.312986][T21620] cache 0 [ 1440.321003][T21620] rss 8192 [ 1440.324034][T21620] shmem 0 [ 1440.327032][T21620] mapped_file 0 [ 1440.330502][T21620] dirty 0 [ 1440.333448][T21620] writeback 8192 [ 1440.337051][T21620] workingset_refault_anon 34129 [ 1440.341905][T21620] workingset_refault_file 2533 [ 1440.346717][T21620] swap 720896 [ 1440.350084][T21620] swapcached 12288 [ 1440.350188][T21646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1440.353795][T21620] pgpgin 447034 [ 1440.353804][T21620] pgpgout 447031 [ 1440.353811][T21620] pgfault 444573 [ 1440.353819][T21620] pgmajfault 14407 [ 1440.377595][T21620] inactive_anon 0 [ 1440.381248][T21620] active_anon 0 [ 1440.384767][T21620] inactive_file 0 [ 1440.388408][T21620] active_file 0 [ 1440.391873][T21620] unevictable 0 [ 1440.395393][T21620] hierarchical_memory_limit 314572800 [ 1440.400771][T21620] hierarchical_memsw_limit 9223372036854771712 [ 1440.406954][T21620] total_cache 0 [ 1440.410425][T21620] total_rss 8192 [ 1440.414047][T21620] total_shmem 0 [ 1440.417570][T21620] total_mapped_file 0 [ 1440.421638][T21620] total_dirty 0 [ 1440.425129][T21620] total_writeback 8192 [ 1440.429200][T21620] total_workingset_refault_anon 34129 [ 1440.434603][T21620] total_workingset_refault_file 2533 [ 1440.440022][T21620] total_swap 720896 [ 1440.443830][T21620] total_swapcached 12288 [ 1440.448214][T21620] total_pgpgin 447034 [ 1440.452200][T21620] total_pgpgout 447031 [ 1440.456337][T21620] total_pgfault 444573 [ 1440.460419][T21620] total_pgmajfault 14407 [ 1440.464784][T21620] total_inactive_anon 0 [ 1440.469029][T21620] total_active_anon 0 [ 1440.473010][T21620] total_inactive_file 0 [ 1440.477399][T21620] total_active_file 0 [ 1440.481446][T21620] total_unevictable 0 [ 1440.485502][T21620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21620,uid=0 [ 1440.500848][T21620] Memory cgroup out of memory: Killed process 21620 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1440.519328][T21648] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 05:51:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xfffffffe, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000400)={[{@auto_da_alloc}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd00) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xb644) 05:51:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r2, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) [ 1440.755544][T21651] loop3: detected capacity change from 0 to 512 [ 1440.771353][T21653] loop2: detected capacity change from 0 to 512 [ 1440.790760][T21651] EXT4-fs (loop3): 1 orphan inode deleted [ 1440.796821][T21651] EXT4-fs mount: 2 callbacks suppressed 05:51:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)) 05:51:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) [ 1440.796837][T21651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.823342][T21651] ext4 filesystem being mounted at /root/syzkaller-testdir2466803383/syzkaller.kFtj1r/1619/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:51:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000400)={[{@auto_da_alloc}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x1dd00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xb644) [ 1440.867861][T21653] EXT4-fs (loop2): 1 orphan inode deleted [ 1440.873717][T21653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.887093][T21653] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4087/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.932366][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.943100][ T27] audit: type=1400 audit(1701409905.623:685): avc: denied { setattr } for pid=21652 comm="syz-executor.2" path="/root/syzkaller-testdir165072189/syzkaller.SVerck/4087/file1/cgroup.controllers" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1441.010396][T21672] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents [ 1441.037291][T21674] loop3: detected capacity change from 0 to 512 [ 1441.049635][T21672] EXT4-fs (loop2): Remounting filesystem read-only [ 1441.065209][T21672] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1441.075896][T21674] EXT4-fs (loop3): 1 orphan inode deleted [ 1441.081744][T21674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.113246][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.134778][T21674] ext4 filesystem being mounted at /root/syzkaller-testdir2466803383/syzkaller.kFtj1r/1620/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:51:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) 05:51:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xb644) 05:51:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1441.240192][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.292312][T21685] loop3: detected capacity change from 0 to 512 [ 1441.295951][T21683] loop2: detected capacity change from 0 to 512 [ 1441.346743][T21685] EXT4-fs (loop3): 1 orphan inode deleted [ 1441.352560][T21685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.381215][T21683] EXT4-fs (loop2): 1 orphan inode deleted [ 1441.387095][T21683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.389064][T21685] ext4 filesystem being mounted at /root/syzkaller-testdir2466803383/syzkaller.kFtj1r/1621/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.418681][T21683] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4088/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.449831][T28042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.497655][T21683] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents [ 1441.513870][T21683] EXT4-fs (loop2): Remounting filesystem read-only [ 1441.526391][T21683] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1441.545939][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0xffffffff, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000040)="2466eaa5cb9f86701997b43d09907a06047227091738d092b73bf994c287c130a8350ee2f0d4b6e4e8f0420e5c0e8c981cd341f16164c22870b8d88840e74f31c09d890e1a9272def706b45e72f850dbfd18dd3e3ee52e570f8a99a3921723161d9ad01b29c8d1c37c", 0x69, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) 05:51:46 executing program 3: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000) 05:51:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyL5gfz5wfM+5V9L3e2x0dc+9x7oB7FunIuJqRAxExLmIGM7Wp1m51mxstB/36OHd6WZJotG48VkSSbau81pJtjzSfkocjIi/XYv4Z/LDuLW19YWpSqW8krVL9cXlUm1t/fz84tRcea68NDExfmny8uTFybG+9HMkIq786aP//+e1P19567e337/5ydl/NdMayrY/2Y9+ane90PpddAxGxMpOBMvBQLYs5JwHAADb0zzG/0lE/Kp1/D8cA62jUwAAAGAvafxhKL5OIhoAAADAnpW25sAmaTGbCzAUaVostufw/iwOp5Vqrf6b2erq0kx7ruxIFNLZ+Up5LJsrPBKFpNkez+bYdtoXNrUnIuJYRPxv+FCrXZyuVmbyPvkBAAAA+8SRTeP/L4fb438AAABgjxnJOwEAAABgxxn/AwAAwN5n/A8AAAB72l+uX2+WRuf+1zO31lYXqrfOz5RrC8XF1enidHVluThXrc61vrNvcavXq1Sry7+LpdU7pXq5Vi/V1tZvLlZXl+o355+6BTYAAACwi4798v57SURs/P5QqzQdyDspYFckz/PgD3cuD2D3DeSdAJCbwbwTAHJTyDsBIHdbnQfoOXnn7f7nAgAA7IzRn/e+/u/cAOxtad4JAAC7zvV/2L8KZgDCvvfjLba/+PX/RuO5EgIAAPpuqFWStJhdCxyKNC0WI462bgtQSGbnK+WxbHzw7nDhR832eOuZyfP97zAAAAAAAAAAAAAAAAAAAAAAAAAA7GONRhINAAAAYE+LSD9OWt/mHzE6fGZo8/mBA8lXw61lRNx+5cZLd6bq9ZXx5vrPH6+vv5ytv5DHGQwAAABgs844vTOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB+evTw7nSn7GbcT/8YESPd4g/GwdbyYBQi4vAXSQw+8bwkIgb6EH/jXkQc7xY/aaYVI1kW3eIfyjF+GhFH+hAf9rP7zf3P1W7vvzROtZbd33+DWXlRvfd/6eP930CP/c/RbcY48eCNUs/49yJODHbf/3TiJz3in95m/H/8fX2917bGqxGjXT9/kqdileqLy6Xa2vr5+cWpufJceWliYvzS5OXJi5Njpdn5Sjn72TXGf3/x5rfP6v/hHvFHtuj/mW32/5sHdx7+tF0tdIt/9nT3z9/jPeKn2Wffr7N6c/top77Rrj/p5OvvnHxW/2d69H+rv//Zbfb/3F///cE2HwoA7ILa2vrCVKVSXlFRUVF5XMl7zwQAAPTb9wf9eWcCAAAAAAAAAAAAAAAAAAAA+9dufJ3Y5pgb+XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZvgsAAP//96DU7Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:46 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) [ 1441.673395][T21698] loop2: detected capacity change from 0 to 512 [ 1441.697745][T21698] EXT4-fs (loop2): 1 orphan inode deleted [ 1441.703539][T21698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.744111][T21698] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4089/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.812736][T21698] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents [ 1441.827244][T21698] EXT4-fs (loop2): Remounting filesystem read-only [ 1441.836097][T21698] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1441.857710][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:46 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x1a, 0x0, 0x0) 05:51:46 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x1c, 0x0, 0x0) 05:51:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x1dd00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:46 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000003c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) 05:51:46 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x11, @broadcast, 0x0, 0x4, 'sed\x00'}, 0x2c) [ 1441.956777][T21714] loop2: detected capacity change from 0 to 512 [ 1441.996589][T11981] IPVS: starting estimator thread 0... [ 1442.003348][T21714] EXT4-fs (loop2): 1 orphan inode deleted [ 1442.009261][T21714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1442.034794][T21714] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4090/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1442.084811][T21720] IPVS: using max 2448 ests per chain, 122400 per kthread [ 1442.115986][T21714] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents 05:51:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) [ 1442.146790][T21714] EXT4-fs (loop2): Remounting filesystem read-only [ 1442.163240][T21714] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1442.195290][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:47 executing program 4: r0 = socket(0x28, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 05:51:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:47 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x3}]}}}}}) 05:51:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x2, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 1442.763832][T21736] loop2: detected capacity change from 0 to 512 [ 1442.799039][T21736] EXT4-fs (loop2): 1 orphan inode deleted 05:51:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:47 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x4, 0x0, 0x7) 05:51:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 05:51:47 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) [ 1442.805011][T21736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:51:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000440)=ANY=[], 0x14}}, 0x0) 05:51:47 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ssrr={0x89, 0x3}]}}}}}) [ 1442.857540][T21736] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4091/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:51:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @remote}, 0x8) [ 1442.959682][T21736] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents [ 1442.990996][T21736] EXT4-fs (loop2): Remounting filesystem read-only [ 1443.001433][T21736] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1443.021820][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.469839][T21737] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1443.481244][T21737] CPU: 1 PID: 21737 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1443.491673][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1443.501739][T21737] Call Trace: [ 1443.505031][T21737] [ 1443.508060][T21737] dump_stack_lvl+0xda/0x130 [ 1443.512768][T21737] dump_stack+0x15/0x20 [ 1443.516936][T21737] dump_header+0x82/0x2d0 [ 1443.521291][T21737] oom_kill_process+0x33a/0x4c0 [ 1443.526172][T21737] out_of_memory+0x9ca/0xbf0 [ 1443.530785][T21737] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1443.536886][T21737] mem_cgroup_out_of_memory+0x139/0x190 [ 1443.542468][T21737] try_charge_memcg+0x75c/0xd30 [ 1443.547414][T21737] ? __swap_duplicate+0x29b/0x2b0 [ 1443.552544][T21737] ? radix_tree_lookup+0xf9/0x150 [ 1443.557645][T21737] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1443.563744][T21737] __read_swap_cache_async+0x2f6/0x550 [ 1443.569283][T21737] swap_cluster_readahead+0x27c/0x4c0 [ 1443.574747][T21737] swapin_readahead+0xe9/0x7f0 [ 1443.579537][T21737] ? __filemap_get_folio+0x41a/0x5a0 [ 1443.584843][T21737] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1443.590586][T21737] ? swap_cache_get_folio+0x6e/0x200 [ 1443.595944][T21737] do_swap_page+0x4a0/0x1670 [ 1443.600557][T21737] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1443.605909][T21737] ? __rcu_read_lock+0x35/0x50 [ 1443.610687][T21737] ? pte_offset_map_nolock+0x124/0x1d0 05:51:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:48 executing program 3: syz_io_uring_setup(0x719f, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) 05:51:48 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x48, 0x0, 0x0) 05:51:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) [ 1443.616191][T21737] handle_mm_fault+0xa36/0x2dd0 [ 1443.621159][T21737] exc_page_fault+0x3ff/0x6c0 [ 1443.625886][T21737] asm_exc_page_fault+0x26/0x30 [ 1443.630756][T21737] RIP: 0033:0x7ff5cf2d6ae4 [ 1443.635185][T21737] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1443.654902][T21737] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1443.661179][T21737] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1443.669259][T21737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1443.677305][T21737] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1443.685325][T21737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000160701 [ 1443.690266][T21764] loop2: detected capacity change from 0 to 512 [ 1443.693321][T21737] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 00000000001603c0 [ 1443.707563][T21737] [ 1443.710784][T21737] memory: usage 307200kB, limit 307200kB, failcnt 118347 [ 1443.717924][T21737] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 [ 1443.725925][T21737] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1443.733260][T21737] Memory cgroup stats for /syz1: [ 1443.747785][T21737] cache 0 [ 1443.756073][T21737] rss 0 [ 1443.758881][T21737] shmem 0 [ 1443.761836][T21737] mapped_file 0 [ 1443.766050][T21737] dirty 0 [ 1443.769006][T21737] writeback 0 [ 1443.772305][T21737] workingset_refault_anon 34270 [ 1443.777292][T21737] workingset_refault_file 2533 [ 1443.782066][T21737] swap 667648 [ 1443.785471][T21737] swapcached 0 [ 1443.789008][T21737] pgpgin 447244 [ 1443.792765][T21737] pgpgout 447244 [ 1443.796349][T21737] pgfault 445005 [ 1443.799906][T21737] pgmajfault 14458 [ 1443.803749][T21737] inactive_anon 0 [ 1443.807438][T21737] active_anon 0 [ 1443.807584][T21764] EXT4-fs (loop2): 1 orphan inode deleted [ 1443.810903][T21737] inactive_file 0 [ 1443.810912][T21737] active_file 0 [ 1443.810920][T21737] unevictable 0 [ 1443.810929][T21737] hierarchical_memory_limit 314572800 [ 1443.816670][T21764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.820331][T21737] hierarchical_memsw_limit 9223372036854771712 [ 1443.825275][T21764] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4092/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1443.827438][T21737] total_cache 0 [ 1443.869838][T21737] total_rss 0 [ 1443.873167][T21737] total_shmem 0 [ 1443.876712][T21737] total_mapped_file 0 [ 1443.880761][T21737] total_dirty 0 [ 1443.884254][T21737] total_writeback 0 [ 1443.888144][T21737] total_workingset_refault_anon 34270 [ 1443.893554][T21737] total_workingset_refault_file 2533 [ 1443.898923][T21737] total_swap 667648 [ 1443.902739][T21737] total_swapcached 0 [ 1443.906824][T21737] total_pgpgin 447244 [ 1443.910812][T21737] total_pgpgout 447244 [ 1443.914912][T21737] total_pgfault 445005 [ 1443.919051][T21737] total_pgmajfault 14458 [ 1443.923306][T21737] total_inactive_anon 0 [ 1443.927564][T21737] total_active_anon 0 [ 1443.931555][T21737] total_inactive_file 0 [ 1443.935781][T21737] total_active_file 0 [ 1443.939823][T21737] total_unevictable 0 [ 1443.943868][T21737] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21737,uid=0 [ 1443.959221][T21737] Memory cgroup out of memory: Killed process 21737 (syz-executor.1) total-vm:46296kB, anon-rss:300kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1443.976993][T21772] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents [ 1444.025056][T21772] EXT4-fs (loop2): Remounting filesystem read-only [ 1444.049919][T21772] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1444.091494][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x3, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:48 executing program 3: r0 = socket$inet(0xa, 0x3, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x5, 0x0, 0x0) 05:51:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyL5gfz5wfM+5V9L3e2x0dc+9x7oB7FunIuJqRAxExLmIGM7Wp1m51mxstB/36OHd6WZJotG48VkSSbau81pJtjzSfkocjIi/XYv4Z/LDuLW19YWpSqW8krVL9cXlUm1t/fz84tRcea68NDExfmny8uTFybG+9HMkIq786aP//+e1P19567e337/5ydl/NdMayrY/2Y9+ane90PpddAxGxMpOBMvBQLYs5JwHAADb0zzG/0lE/Kp1/D8cA62jUwAAAGAvafxhKL5OIhoAAADAnpW25sAmaTGbCzAUaVostufw/iwOp5Vqrf6b2erq0kx7ruxIFNLZ+Up5LJsrPBKFpNkez+bYdtoXNrUnIuJYRPxv+FCrXZyuVmbyPvkBAAAA+8SRTeP/L4fb438AAABgjxnJOwEAAABgxxn/AwAAwN5n/A8AAAB72l+uX2+WRuf+1zO31lYXqrfOz5RrC8XF1enidHVluThXrc61vrNvcavXq1Sry7+LpdU7pXq5Vi/V1tZvLlZXl+o355+6BTYAAACwi4798v57SURs/P5QqzQdyDspYFckz/PgD3cuD2D3DeSdAJCbwbwTAHJTyDsBIHdbnQfoOXnn7f7nAgAA7IzRn/e+/u/cAOxtad4JAAC7zvV/2L8KZgDCvvfjLba/+PX/RuO5EgIAAPpuqFWStJhdCxyKNC0WI462bgtQSGbnK+WxbHzw7nDhR832eOuZyfP97zAAAAAAAAAAAAAAAAAAAAAAAAAA7GONRhINAAAAYE+LSD9OWt/mHzE6fGZo8/mBA8lXw61lRNx+5cZLd6bq9ZXx5vrPH6+vv5ytv5DHGQwAAABgs844vTOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB+evTw7nSn7GbcT/8YESPd4g/GwdbyYBQi4vAXSQw+8bwkIgb6EH/jXkQc7xY/aaYVI1kW3eIfyjF+GhFH+hAf9rP7zf3P1W7vvzROtZbd33+DWXlRvfd/6eP930CP/c/RbcY48eCNUs/49yJODHbf/3TiJz3in95m/H/8fX2917bGqxGjXT9/kqdileqLy6Xa2vr5+cWpufJceWliYvzS5OXJi5Njpdn5Sjn72TXGf3/x5rfP6v/hHvFHtuj/mW32/5sHdx7+tF0tdIt/9nT3z9/jPeKn2Wffr7N6c/top77Rrj/p5OvvnHxW/2d69H+rv//Zbfb/3F///cE2HwoA7ILa2vrCVKVSXlFRUVF5XMl7zwQAAPTb9wf9eWcCAAAAAAAAAAAAAAAAAAAA+9dufJ3Y5pgb+XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZvgsAAP//96DU7Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:48 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 05:51:48 executing program 3: r0 = memfd_secret(0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 05:51:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x8}, 0x48) 05:51:49 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x4d, 0x0, 0x0) [ 1444.308416][T21780] loop2: detected capacity change from 0 to 512 [ 1444.353134][T21780] EXT4-fs (loop2): 1 orphan inode deleted [ 1444.359045][T21780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1444.373068][T21780] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4093/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.400198][T21780] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents [ 1444.454724][T21780] EXT4-fs (loop2): Remounting filesystem read-only [ 1444.461326][T21780] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1444.491911][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:49 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0) 05:51:49 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x11, 0x11, 0x20000000, 0x4) 05:51:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1444.624935][T21799] loop2: detected capacity change from 0 to 512 [ 1444.696880][T21799] EXT4-fs (loop2): 1 orphan inode deleted [ 1444.702653][T21799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1444.727274][T21799] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4094/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.764602][T21799] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents [ 1444.805454][T21799] EXT4-fs (loop2): Remounting filesystem read-only [ 1444.827252][T21799] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1444.860301][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x4, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:49 executing program 3: socket$inet(0xa, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x81d, 0x8000, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 05:51:49 executing program 4: setitimer(0x1, &(0x7f0000000000)={{}, {0x7}}, 0x0) 05:51:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:50 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x11, 0x0, 0x0) 05:51:50 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x3c, 0x0, 0x4) [ 1445.300714][T21813] loop2: detected capacity change from 0 to 512 [ 1445.338384][T21813] EXT4-fs (loop2): 1 orphan inode deleted 05:51:50 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x22, 0x0, 0x0) 05:51:50 executing program 4: socket(0x1e, 0x5, 0x0) 05:51:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}) [ 1445.344222][T21813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1445.377216][T21813] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4095/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:51:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891f, &(0x7f0000000080)={'tunl0\x00', 0x0}) [ 1445.472810][T21813] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #19: comm syz-executor.2: corrupted inode contents 05:51:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1445.539937][T21813] EXT4-fs (loop2): Remounting filesystem read-only [ 1445.550330][T21813] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1445.573205][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:50 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x2a, 0x0, 0x0) 05:51:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10) 05:51:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x7, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:51 executing program 3: syz_io_uring_setup(0x324e, &(0x7f0000000000)={0x0, 0x35c2, 0x8}, &(0x7f0000000080), &(0x7f00000000c0)) 05:51:51 executing program 4: mount$9p_xen(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 1446.309848][T21840] loop2: detected capacity change from 0 to 512 [ 1446.338063][T21840] EXT4-fs (loop2): 1 orphan inode deleted [ 1446.343929][T21840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:51:51 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x5, 0x0, 0x4) 05:51:51 executing program 4: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) [ 1446.419594][T21840] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4096/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:51:51 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x801c581f, 0x0) 05:51:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:51 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a2, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 05:51:51 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) mlock2(&(0x7f0000daa000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000dab000/0x1000)=nil, 0x1000) 05:51:51 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x22, 0x0, 0x4) 05:51:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) [ 1446.567287][T21840] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #18: comm syz-executor.2: corrupted inode contents [ 1446.585212][T21840] EXT4-fs (loop2): Remounting filesystem read-only [ 1446.601771][T21840] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1446.633948][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.682937][T21873] loop2: detected capacity change from 0 to 512 [ 1446.726698][T21873] EXT4-fs (loop2): 1 orphan inode deleted [ 1446.732562][T21873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.745307][T21873] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4097/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1446.827608][T21873] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #18: comm syz-executor.2: corrupted inode contents [ 1446.861323][T21873] EXT4-fs (loop2): Remounting filesystem read-only [ 1446.878998][T21873] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1446.920980][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.110404][T21845] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1447.121856][T21845] CPU: 1 PID: 21845 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1447.132370][T21845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1447.142525][T21845] Call Trace: [ 1447.145825][T21845] [ 1447.148770][T21845] dump_stack_lvl+0xda/0x130 [ 1447.153397][T21845] dump_stack+0x15/0x20 [ 1447.157582][T21845] dump_header+0x82/0x2d0 [ 1447.162015][T21845] oom_kill_process+0x33a/0x4c0 [ 1447.167040][T21845] out_of_memory+0x9ca/0xbf0 [ 1447.171746][T21845] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1447.177905][T21845] mem_cgroup_out_of_memory+0x139/0x190 [ 1447.183572][T21845] try_charge_memcg+0x75c/0xd30 [ 1447.188450][T21845] ? __swap_duplicate+0x29b/0x2b0 [ 1447.193512][T21845] ? radix_tree_lookup+0xf9/0x150 [ 1447.198635][T21845] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1447.204801][T21845] __read_swap_cache_async+0x2f6/0x550 [ 1447.210347][T21845] swap_cluster_readahead+0x27c/0x4c0 [ 1447.216002][T21845] swapin_readahead+0xe9/0x7f0 [ 1447.220842][T21845] ? __filemap_get_folio+0x41a/0x5a0 [ 1447.226157][T21845] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1447.231917][T21845] ? swap_cache_get_folio+0x6e/0x200 [ 1447.237224][T21845] do_swap_page+0x4a0/0x1670 [ 1447.241906][T21845] ? __rcu_read_lock+0x35/0x50 [ 1447.246694][T21845] ? pte_offset_map_nolock+0x124/0x1d0 [ 1447.252307][T21845] handle_mm_fault+0xa36/0x2dd0 [ 1447.257203][T21845] exc_page_fault+0x3ff/0x6c0 [ 1447.261928][T21845] asm_exc_page_fault+0x26/0x30 [ 1447.266855][T21845] RIP: 0033:0x7ff5cf2d6ae4 [ 1447.271298][T21845] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1447.291140][T21845] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1447.297307][T21845] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1447.305308][T21845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1447.313366][T21845] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1447.321398][T21845] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000001614ee [ 1447.329434][T21845] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 00000000001611ad [ 1447.337531][T21845] [ 1447.341873][T21845] memory: usage 307200kB, limit 307200kB, failcnt 118878 [ 1447.349452][T21845] memory+swap: usage 307856kB, limit 9007199254740988kB, failcnt 0 [ 1447.357455][T21845] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1447.364819][T21845] Memory cgroup stats for /syz1: [ 1447.369278][T21845] cache 0 [ 1447.377271][T21845] rss 8192 [ 1447.380297][T21845] shmem 0 [ 1447.383300][T21845] mapped_file 0 [ 1447.386819][T21845] dirty 0 [ 1447.389770][T21845] writeback 8192 [ 1447.393389][T21845] workingset_refault_anon 34453 [ 1447.398316][T21845] workingset_refault_file 2533 [ 1447.403169][T21845] swap 671744 [ 1447.406536][T21845] swapcached 16384 [ 1447.410333][T21845] pgpgin 447496 [ 1447.413828][T21845] pgpgout 447492 [ 1447.417436][T21845] pgfault 445427 [ 1447.420991][T21845] pgmajfault 14534 [ 1447.424778][T21845] inactive_anon 0 [ 1447.428468][T21845] active_anon 0 [ 1447.432095][T21845] inactive_file 0 [ 1447.435881][T21845] active_file 0 [ 1447.439346][T21845] unevictable 0 [ 1447.442813][T21845] hierarchical_memory_limit 314572800 [ 1447.448222][T21845] hierarchical_memsw_limit 9223372036854771712 [ 1447.454392][T21845] total_cache 0 [ 1447.457903][T21845] total_rss 8192 [ 1447.461482][T21845] total_shmem 0 [ 1447.464985][T21845] total_mapped_file 0 [ 1447.468985][T21845] total_dirty 0 [ 1447.472453][T21845] total_writeback 8192 [ 1447.476577][T21845] total_workingset_refault_anon 34453 [ 1447.481966][T21845] total_workingset_refault_file 2533 [ 1447.487328][T21845] total_swap 671744 [ 1447.491142][T21845] total_swapcached 16384 [ 1447.495410][T21845] total_pgpgin 447496 [ 1447.499410][T21845] total_pgpgout 447492 [ 1447.503487][T21845] total_pgfault 445427 [ 1447.507641][T21845] total_pgmajfault 14534 [ 1447.511958][T21845] total_inactive_anon 0 [ 1447.516207][T21845] total_active_anon 0 [ 1447.520196][T21845] total_inactive_file 0 [ 1447.524406][T21845] total_active_file 0 [ 1447.528545][T21845] total_unevictable 0 [ 1447.532548][T21845] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21845,uid=0 05:51:52 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x1000000000000076}, 0x58) [ 1447.547952][T21845] Memory cgroup out of memory: Killed process 21845 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:52 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0xb, 0x0, 0x2) 05:51:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:52 executing program 4: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 05:51:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x9, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:52 executing program 3: memfd_secret(0x221781fd0307adb0) 05:51:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) 05:51:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x4020940d, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:51:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:51:52 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8995, &(0x7f00000001c0)={'tunl0\x00', 0x0}) [ 1447.829013][T21888] loop2: detected capacity change from 0 to 512 05:51:52 executing program 4: r0 = memfd_secret(0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) [ 1447.892881][T21888] EXT4-fs (loop2): 1 orphan inode deleted [ 1447.898792][T21888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1447.925018][T21888] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4098/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1447.978926][T21888] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #18: comm syz-executor.2: corrupted inode contents 05:51:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:52 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001600)=ANY=[@ANYBLOB="019a2550180000006258"]) [ 1448.025638][T21888] EXT4-fs (loop2): Remounting filesystem read-only [ 1448.035044][T21888] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1448.053884][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.120885][T21912] loop2: detected capacity change from 0 to 512 [ 1448.151708][T21912] EXT4-fs (loop2): 1 orphan inode deleted [ 1448.157542][T21912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1448.170799][T21912] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4099/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1448.213409][T21912] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #18: comm syz-executor.2: corrupted inode contents [ 1448.246075][T21912] EXT4-fs (loop2): Remounting filesystem read-only [ 1448.252626][T21912] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1448.286356][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1448.646441][T21889] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1448.657820][T21889] CPU: 0 PID: 21889 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1448.668256][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1448.678468][T21889] Call Trace: [ 1448.681755][T21889] [ 1448.684696][T21889] dump_stack_lvl+0xda/0x130 [ 1448.689391][T21889] dump_stack+0x15/0x20 [ 1448.693573][T21889] dump_header+0x82/0x2d0 [ 1448.697965][T21889] oom_kill_process+0x33a/0x4c0 [ 1448.702912][T21889] out_of_memory+0x9ca/0xbf0 [ 1448.707561][T21889] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1448.713731][T21889] mem_cgroup_out_of_memory+0x139/0x190 [ 1448.719358][T21889] try_charge_memcg+0x75c/0xd30 [ 1448.724328][T21889] ? __swap_duplicate+0x29b/0x2b0 [ 1448.729446][T21889] ? radix_tree_lookup+0xf9/0x150 [ 1448.734531][T21889] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1448.740673][T21889] __read_swap_cache_async+0x2f6/0x550 [ 1448.746151][T21889] swap_cluster_readahead+0x27c/0x4c0 [ 1448.751623][T21889] swapin_readahead+0xe9/0x7f0 [ 1448.756490][T21889] ? __filemap_get_folio+0x41a/0x5a0 [ 1448.761822][T21889] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1448.767474][T21889] ? swap_cache_get_folio+0x6e/0x200 [ 1448.772783][T21889] do_swap_page+0x4a0/0x1670 [ 1448.777430][T21889] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1448.782786][T21889] ? __rcu_read_lock+0x35/0x50 [ 1448.787562][T21889] ? pte_offset_map_nolock+0x124/0x1d0 [ 1448.793032][T21889] handle_mm_fault+0xa36/0x2dd0 [ 1448.797979][T21889] exc_page_fault+0x3ff/0x6c0 [ 1448.802677][T21889] asm_exc_page_fault+0x26/0x30 [ 1448.807537][T21889] RIP: 0033:0x7ff5cf2d6ae4 [ 1448.811973][T21889] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1448.831684][T21889] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1448.837779][T21889] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1448.845759][T21889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1448.853737][T21889] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1448.861733][T21889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000161ad8 [ 1448.869765][T21889] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000161797 [ 1448.877747][T21889] [ 1448.880892][T21889] memory: usage 307200kB, limit 307200kB, failcnt 119176 [ 1448.888251][T21889] memory+swap: usage 307880kB, limit 9007199254740988kB, failcnt 0 05:51:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:53 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x35, 0x0, 0x0) [ 1448.896185][T21889] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1448.903632][T21889] Memory cgroup stats for /syz1: [ 1448.904185][T21889] cache 0 [ 1448.912236][T21889] rss 8192 [ 1448.915406][T21889] shmem 0 [ 1448.918899][T21889] mapped_file 0 [ 1448.922396][T21889] dirty 0 [ 1448.925420][T21889] writeback 8192 [ 1448.929048][T21889] workingset_refault_anon 34530 [ 1448.933986][T21889] workingset_refault_file 2533 [ 1448.938811][T21889] swap 696320 [ 1448.942103][T21889] swapcached 8192 [ 1448.945866][T21889] pgpgin 447596 [ 1448.949334][T21889] pgpgout 447594 [ 1448.952892][T21889] pgfault 445594 [ 1448.956695][T21889] pgmajfault 14560 [ 1448.960425][T21889] inactive_anon 0 [ 1448.964065][T21889] active_anon 0 [ 1448.967570][T21889] inactive_file 0 [ 1448.971213][T21889] active_file 0 [ 1448.974788][T21889] unevictable 0 [ 1448.978279][T21889] hierarchical_memory_limit 314572800 [ 1448.983723][T21889] hierarchical_memsw_limit 9223372036854771712 [ 1448.989993][T21889] total_cache 0 [ 1448.993482][T21889] total_rss 8192 [ 1448.997082][T21889] total_shmem 0 [ 1449.000554][T21889] total_mapped_file 0 [ 1449.004556][T21889] total_dirty 0 [ 1449.008088][T21889] total_writeback 8192 [ 1449.012179][T21889] total_workingset_refault_anon 34530 [ 1449.017601][T21889] total_workingset_refault_file 2533 [ 1449.022887][T21889] total_swap 696320 [ 1449.026744][T21889] total_swapcached 8192 [ 1449.030930][T21889] total_pgpgin 447596 [ 1449.034975][T21889] total_pgpgout 447594 [ 1449.039053][T21889] total_pgfault 445594 [ 1449.043145][T21889] total_pgmajfault 14560 [ 1449.047449][T21889] total_inactive_anon 0 [ 1449.051611][T21889] total_active_anon 0 [ 1449.055702][T21889] total_inactive_file 0 [ 1449.059885][T21889] total_active_file 0 [ 1449.063878][T21889] total_unevictable 0 [ 1449.067947][T21889] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21889,uid=0 [ 1449.083292][T21889] Memory cgroup out of memory: Killed process 21889 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0xb, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:54 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x6, 0x0, 0x0) 05:51:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x81d, 0x8000, 0x8}, 0x48) 05:51:54 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x1e, 0x0, 0x4) 05:51:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e22, @empty}, 0x10) 05:51:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:51:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1449.472004][T21931] loop2: detected capacity change from 0 to 512 05:51:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) 05:51:54 executing program 3: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) [ 1449.527865][T21931] EXT4-fs (loop2): 1 orphan inode deleted [ 1449.533634][T21931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.597180][T21931] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1449.645301][T21931] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #18: comm syz-executor.2: corrupted inode contents [ 1449.672255][T21931] EXT4-fs (loop2): Remounting filesystem read-only [ 1449.681182][T21931] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1449.698875][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:54 executing program 4: r0 = socket$inet(0xa, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 05:51:54 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x12, 0x0, 0x4) [ 1450.268600][T21932] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1450.279961][T21932] CPU: 0 PID: 21932 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1450.290482][T21932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1450.300549][T21932] Call Trace: [ 1450.303903][T21932] [ 1450.306832][T21932] dump_stack_lvl+0xda/0x130 [ 1450.311529][T21932] dump_stack+0x15/0x20 [ 1450.315785][T21932] dump_header+0x82/0x2d0 [ 1450.320134][T21932] oom_kill_process+0x33a/0x4c0 [ 1450.324991][T21932] out_of_memory+0x9ca/0xbf0 [ 1450.329683][T21932] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1450.335907][T21932] mem_cgroup_out_of_memory+0x139/0x190 [ 1450.341476][T21932] try_charge_memcg+0x75c/0xd30 [ 1450.346406][T21932] ? __swap_duplicate+0x29b/0x2b0 [ 1450.351465][T21932] ? radix_tree_lookup+0xf9/0x150 [ 1450.356586][T21932] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1450.362746][T21932] __read_swap_cache_async+0x2f6/0x550 [ 1450.368212][T21932] swap_cluster_readahead+0x27c/0x4c0 [ 1450.373596][T21932] swapin_readahead+0xe9/0x7f0 [ 1450.378365][T21932] ? __filemap_get_folio+0x41a/0x5a0 [ 1450.383706][T21932] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1450.389363][T21932] ? swap_cache_get_folio+0x6e/0x200 [ 1450.394755][T21932] do_swap_page+0x4a0/0x1670 [ 1450.399359][T21932] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1450.404656][T21932] ? __rcu_read_lock+0x35/0x50 [ 1450.409466][T21932] ? pte_offset_map_nolock+0x124/0x1d0 [ 1450.414954][T21932] handle_mm_fault+0xa36/0x2dd0 [ 1450.419897][T21932] exc_page_fault+0x3ff/0x6c0 [ 1450.424678][T21932] asm_exc_page_fault+0x26/0x30 [ 1450.429578][T21932] RIP: 0033:0x7ff5cf2d6ae4 [ 1450.433994][T21932] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1450.453674][T21932] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1450.459797][T21932] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1450.467766][T21932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1450.475802][T21932] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1450.483811][T21932] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000016214b [ 1450.491784][T21932] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000161e0a [ 1450.499760][T21932] [ 1450.503082][T21932] memory: usage 307200kB, limit 307200kB, failcnt 119610 [ 1450.510141][T21932] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 1450.518058][T21932] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1450.525376][T21932] Memory cgroup stats for /syz1: [ 1450.526028][T21932] cache 0 [ 1450.533880][T21932] rss 16384 [ 1450.537017][T21932] shmem 0 [ 1450.539957][T21932] mapped_file 0 [ 1450.543418][T21932] dirty 0 [ 1450.546420][T21932] writeback 0 [ 1450.549709][T21932] workingset_refault_anon 34551 [ 1450.554548][T21932] workingset_refault_file 2533 [ 1450.559346][T21932] swap 712704 [ 1450.563025][T21932] swapcached 16384 [ 1450.566817][T21932] pgpgin 447640 [ 1450.570295][T21932] pgpgout 447636 [ 1450.573848][T21932] pgfault 445762 [ 1450.577410][T21932] pgmajfault 14566 [ 1450.581187][T21932] inactive_anon 8192 [ 1450.585135][T21932] active_anon 8192 [ 1450.588858][T21932] inactive_file 0 [ 1450.592478][T21932] active_file 0 [ 1450.596046][T21932] unevictable 0 [ 1450.599503][T21932] hierarchical_memory_limit 314572800 [ 1450.604959][T21932] hierarchical_memsw_limit 9223372036854771712 [ 1450.611295][T21932] total_cache 0 [ 1450.614783][T21932] total_rss 16384 [ 1450.618505][T21932] total_shmem 0 [ 1450.621954][T21932] total_mapped_file 0 [ 1450.625958][T21932] total_dirty 0 [ 1450.629473][T21932] total_writeback 0 [ 1450.633288][T21932] total_workingset_refault_anon 34551 [ 1450.638754][T21932] total_workingset_refault_file 2533 [ 1450.644045][T21932] total_swap 712704 [ 1450.647969][T21932] total_swapcached 16384 [ 1450.652244][T21932] total_pgpgin 447640 [ 1450.656264][T21932] total_pgpgout 447636 [ 1450.660449][T21932] total_pgfault 445762 [ 1450.664553][T21932] total_pgmajfault 14566 [ 1450.668814][T21932] total_inactive_anon 8192 [ 1450.673227][T21932] total_active_anon 8192 [ 1450.677549][T21932] total_inactive_file 0 [ 1450.681708][T21932] total_active_file 0 [ 1450.685708][T21932] total_unevictable 0 [ 1450.689690][T21932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21932,uid=0 [ 1450.705021][T21932] Memory cgroup out of memory: Killed process 21932 (syz-executor.1) total-vm:46296kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:51:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0xe, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:55 executing program 4: r0 = socket$inet(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 05:51:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @local}, &(0x7f0000000140)=0x3) 05:51:55 executing program 3: remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 05:51:55 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) [ 1450.913696][T21957] loop2: detected capacity change from 0 to 512 [ 1450.943782][T21957] EXT4-fs (loop2): 1 orphan inode deleted [ 1450.949786][T21957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:51:55 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x140a, 0x1}, 0x10}}, 0x0) [ 1450.980144][T21957] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.995261][T21971] mmap: syz-executor.3 (21971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 05:51:55 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x4e, 0x0, 0x0) 05:51:55 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x1e, 0x0, 0x0) [ 1451.059298][T21957] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #18: comm syz-executor.2: corrupted inode contents 05:51:55 executing program 3: syz_open_dev$loop(&(0x7f0000000200), 0x10001, 0x0) [ 1451.123901][T21957] EXT4-fs (loop2): Remounting filesystem read-only [ 1451.146162][T21957] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1451.175413][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.707213][T21965] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1451.720825][T21965] CPU: 0 PID: 21965 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1451.731280][T21965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1451.741376][T21965] Call Trace: [ 1451.744671][T21965] [ 1451.747687][T21965] dump_stack_lvl+0xda/0x130 [ 1451.752325][T21965] dump_stack+0x15/0x20 [ 1451.756504][T21965] dump_header+0x82/0x2d0 [ 1451.760877][T21965] oom_kill_process+0x33a/0x4c0 [ 1451.765810][T21965] out_of_memory+0x9ca/0xbf0 [ 1451.770526][T21965] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1451.776700][T21965] mem_cgroup_out_of_memory+0x139/0x190 [ 1451.782288][T21965] try_charge_memcg+0x75c/0xd30 [ 1451.787262][T21965] obj_cgroup_charge_pages+0xab/0x130 [ 1451.792655][T21965] __memcg_kmem_charge_page+0x9c/0x170 [ 1451.798143][T21965] __alloc_pages+0x1bb/0x340 [ 1451.802841][T21965] alloc_pages_mpol+0xb1/0x1d0 [ 1451.807625][T21965] alloc_pages+0xe0/0x100 [ 1451.812031][T21965] __vmalloc_node_range+0x6d2/0xea0 [ 1451.817260][T21965] kvmalloc_node+0x121/0x160 [ 1451.821972][T21965] ? xt_alloc_table_info+0x3d/0x80 [ 1451.827100][T21965] xt_alloc_table_info+0x3d/0x80 [ 1451.832140][T21965] do_arpt_set_ctl+0x634/0x13b0 [ 1451.837021][T21965] ? __futex_wait+0x227/0x280 [ 1451.841718][T21965] ? __futex_wake_mark+0x70/0x70 [ 1451.846679][T21965] ? tcp_release_cb+0xfe/0x370 [ 1451.851550][T21965] ? _raw_spin_unlock_bh+0x36/0x40 [ 1451.856698][T21965] nf_setsockopt+0x18d/0x1b0 [ 1451.861380][T21965] ip_setsockopt+0xe6/0x100 [ 1451.865969][T21965] tcp_setsockopt+0x90/0xa0 [ 1451.870541][T21965] sock_common_setsockopt+0x61/0x70 [ 1451.875845][T21965] ? sock_common_recvmsg+0xe0/0xe0 [ 1451.881025][T21965] __sys_setsockopt+0x1d4/0x240 [ 1451.885939][T21965] __x64_sys_setsockopt+0x66/0x80 [ 1451.890981][T21965] do_syscall_64+0x44/0x110 [ 1451.895581][T21965] ? syscall_exit_to_user_mode+0x38/0x140 [ 1451.901346][T21965] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1451.907290][T21965] RIP: 0033:0x7ff5cf31cae9 [ 1451.911723][T21965] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1451.931386][T21965] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1451.939832][T21965] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1451.947826][T21965] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1451.955884][T21965] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1451.963904][T21965] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.971932][T21965] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1451.979924][T21965] [ 1451.983114][T21965] memory: usage 307200kB, limit 307200kB, failcnt 119725 [ 1451.990187][T21965] memory+swap: usage 307836kB, limit 9007199254740988kB, failcnt 0 [ 1451.998150][T21965] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1452.005479][T21965] Memory cgroup stats for /syz1: [ 1452.005694][T21965] cache 0 [ 1452.013620][T21965] rss 8192 [ 1452.016688][T21965] shmem 0 [ 1452.019715][T21965] mapped_file 0 [ 1452.023181][T21965] dirty 0 [ 1452.026135][T21965] writeback 8192 [ 1452.029752][T21965] workingset_refault_anon 34604 [ 1452.034611][T21965] workingset_refault_file 2533 [ 1452.039492][T21965] swap 651264 [ 1452.042788][T21965] swapcached 16384 [ 1452.046548][T21965] pgpgin 447716 [ 1452.050063][T21965] pgpgout 447712 [ 1452.053665][T21965] pgfault 445948 05:51:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1452.057260][T21965] pgmajfault 14575 [ 1452.060995][T21965] inactive_anon 8192 [ 1452.064992][T21965] active_anon 8192 [ 1452.068763][T21965] inactive_file 0 [ 1452.072446][T21965] active_file 0 [ 1452.076005][T21965] unevictable 0 [ 1452.079476][T21965] hierarchical_memory_limit 314572800 [ 1452.085005][T21965] hierarchical_memsw_limit 9223372036854771712 [ 1452.091217][T21965] total_cache 0 [ 1452.094774][T21965] total_rss 8192 [ 1452.098402][T21965] total_shmem 0 [ 1452.101958][T21965] total_mapped_file 0 [ 1452.106165][T21965] total_dirty 0 [ 1452.109680][T21965] total_writeback 8192 [ 1452.113760][T21965] total_workingset_refault_anon 34604 [ 1452.119197][T21965] total_workingset_refault_file 2533 [ 1452.124574][T21965] total_swap 651264 [ 1452.128540][T21965] total_swapcached 16384 [ 1452.132796][T21965] total_pgpgin 447716 [ 1452.136819][T21965] total_pgpgout 447712 [ 1452.140898][T21965] total_pgfault 445948 [ 1452.145039][T21965] total_pgmajfault 14575 [ 1452.149378][T21965] total_inactive_anon 8192 [ 1452.153802][T21965] total_active_anon 8192 [ 1452.158086][T21965] total_inactive_file 0 [ 1452.162258][T21965] total_active_file 0 [ 1452.166302][T21965] total_unevictable 0 [ 1452.170311][T21965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21963,uid=0 [ 1452.185774][T21965] Memory cgroup out of memory: Killed process 21963 (syz-executor.1) total-vm:46296kB, anon-rss:300kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1452.203327][T21970] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1452.217020][T21970] CPU: 1 PID: 21970 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1452.227457][T21970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1452.237669][T21970] Call Trace: [ 1452.240961][T21970] [ 1452.244162][T21970] dump_stack_lvl+0xda/0x130 [ 1452.248838][T21970] dump_stack+0x15/0x20 [ 1452.253026][T21970] dump_header+0x82/0x2d0 [ 1452.257386][T21970] oom_kill_process+0x33a/0x4c0 [ 1452.262277][T21970] out_of_memory+0x9ca/0xbf0 [ 1452.266954][T21970] mem_cgroup_out_of_memory+0x139/0x190 [ 1452.272528][T21970] try_charge_memcg+0x75c/0xd30 [ 1452.277398][T21970] obj_cgroup_charge_pages+0xab/0x130 [ 1452.282845][T21970] __memcg_kmem_charge_page+0x9c/0x170 [ 1452.288318][T21970] __alloc_pages+0x1bb/0x340 [ 1452.292980][T21970] alloc_pages_mpol+0xb1/0x1d0 [ 1452.297757][T21970] alloc_pages+0xe0/0x100 [ 1452.302171][T21970] __vmalloc_node_range+0x6d2/0xea0 [ 1452.307398][T21970] kvmalloc_node+0x121/0x160 [ 1452.311999][T21970] ? xt_alloc_table_info+0x3d/0x80 [ 1452.317141][T21970] xt_alloc_table_info+0x3d/0x80 [ 1452.322109][T21970] do_arpt_set_ctl+0x634/0x13b0 [ 1452.326978][T21970] ? __futex_wait+0x227/0x280 [ 1452.331678][T21970] ? __futex_wake_mark+0x70/0x70 [ 1452.336696][T21970] ? tcp_release_cb+0xfe/0x370 [ 1452.341479][T21970] ? _raw_spin_unlock_bh+0x36/0x40 [ 1452.346712][T21970] nf_setsockopt+0x18d/0x1b0 [ 1452.351344][T21970] ip_setsockopt+0xe6/0x100 [ 1452.355928][T21970] tcp_setsockopt+0x90/0xa0 [ 1452.360454][T21970] sock_common_setsockopt+0x61/0x70 [ 1452.365928][T21970] ? sock_common_recvmsg+0xe0/0xe0 [ 1452.371060][T21970] __sys_setsockopt+0x1d4/0x240 [ 1452.375975][T21970] __x64_sys_setsockopt+0x66/0x80 [ 1452.381061][T21970] do_syscall_64+0x44/0x110 [ 1452.385579][T21970] ? syscall_exit_to_user_mode+0x38/0x140 [ 1452.391428][T21970] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1452.397426][T21970] RIP: 0033:0x7fa159e9bae9 [ 1452.401848][T21970] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1452.421465][T21970] RSP: 002b:00007fa1591fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1452.430025][T21970] RAX: ffffffffffffffda RBX: 00007fa159fbb050 RCX: 00007fa159e9bae9 [ 1452.438113][T21970] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1452.446091][T21970] RBP: 00007fa159ee747a R08: 0000000000000438 R09: 0000000000000000 [ 1452.454068][T21970] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.462045][T21970] R13: 000000000000006e R14: 00007fa159fbb050 R15: 00007ffea5cad6d8 [ 1452.470153][T21970] [ 1452.473495][T21970] memory: usage 307144kB, limit 307200kB, failcnt 197218 [ 1452.480792][T21970] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 1452.488823][T21970] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 1452.496647][T21970] Memory cgroup stats for /syz0: [ 1452.503357][T21970] cache 4096 [ 1452.511629][T21970] rss 0 [ 1452.514465][T21970] shmem 0 [ 1452.517471][T21970] mapped_file 0 [ 1452.520925][T21970] dirty 0 [ 1452.523934][T21970] writeback 0 [ 1452.527370][T21970] workingset_refault_anon 39112 [ 1452.532280][T21970] workingset_refault_file 10296 [ 1452.537153][T21970] swap 417792 [ 1452.540472][T21970] swapcached 0 [ 1452.543930][T21970] pgpgin 3699003 [ 1452.547499][T21970] pgpgout 3699002 [ 1452.551143][T21970] pgfault 3632734 [ 1452.554919][T21970] pgmajfault 18675 [ 1452.558644][T21970] inactive_anon 0 [ 1452.562305][T21970] active_anon 0 [ 1452.565812][T21970] inactive_file 0 [ 1452.569458][T21970] active_file 4096 [ 1452.573218][T21970] unevictable 0 [ 1452.576742][T21970] hierarchical_memory_limit 314572800 [ 1452.582190][T21970] hierarchical_memsw_limit 9223372036854771712 [ 1452.588389][T21970] total_cache 4096 [ 1452.592204][T21970] total_rss 0 [ 1452.595534][T21970] total_shmem 0 [ 1452.599042][T21970] total_mapped_file 0 [ 1452.603131][T21970] total_dirty 0 [ 1452.606638][T21970] total_writeback 0 05:51:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0xf, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 1452.610459][T21970] total_workingset_refault_anon 39112 [ 1452.615864][T21970] total_workingset_refault_file 10296 [ 1452.621253][T21970] total_swap 417792 [ 1452.625176][T21970] total_swapcached 0 [ 1452.629081][T21970] total_pgpgin 3699003 [ 1452.633155][T21970] total_pgpgout 3699002 [ 1452.637394][T21970] total_pgfault 3632734 [ 1452.641643][T21970] total_pgmajfault 18675 [ 1452.645945][T21970] total_inactive_anon 0 [ 1452.650116][T21970] total_active_anon 0 [ 1452.654237][T21970] total_inactive_file 0 [ 1452.658557][T21970] total_active_file 4096 [ 1452.662811][T21970] total_unevictable 0 [ 1452.666823][T21970] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21959,uid=0 [ 1452.682229][T21970] Memory cgroup out of memory: Killed process 21959 (syz-executor.0) total-vm:46560kB, anon-rss:376kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 1452.703139][T21988] loop2: detected capacity change from 0 to 512 [ 1452.772047][T21988] EXT4-fs (loop2): 1 orphan inode deleted [ 1452.777881][T21988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1452.792351][T21988] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1452.817423][T21988] EXT4-fs error (device loop2): ext4_do_update_inode:5105: inode #18: comm syz-executor.2: corrupted inode contents [ 1452.833130][T21988] EXT4-fs (loop2): Remounting filesystem read-only [ 1452.840101][T21988] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 1452.859484][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010100}, {0x0, @dev}, 0x0, {0x2, 0x0, @empty}}) 05:51:57 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f00000006c0), 0xc, &(0x7f0000000080)={0x0, 0x18}}, 0x0) 05:51:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:51:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:57 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2, 0x0, 0x2) 05:51:57 executing program 3: r0 = memfd_secret(0x0) bind$vsock_stream(r0, 0x0, 0x0) [ 1453.046418][T21995] loop2: detected capacity change from 0 to 512 [ 1453.078960][T21995] EXT4-fs (loop2): 1 orphan inode deleted 05:51:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) [ 1453.084772][T21995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:51:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a2, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:51:57 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @multicast1, 0x0, 0x0, 'ovf\x00', 0xe, 0x1, 0x6b}, 0x2c) [ 1453.147658][T21995] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1453.240877][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x10, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:51:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x0, 0x0, 0xd3e}, 0x48) 05:51:58 executing program 4: msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) 05:51:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:58 executing program 4: r0 = socket$inet(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) [ 1453.762845][T22023] loop2: detected capacity change from 0 to 512 [ 1453.799981][T22023] EXT4-fs (loop2): 1 orphan inode deleted [ 1453.805803][T22023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.841310][T22023] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4104/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:51:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1453.918382][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:51:58 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x10, 0x0, 0x0) 05:51:58 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) 05:51:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:51:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:51:58 executing program 4: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) 05:51:58 executing program 3: mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 1454.005715][T22039] loop2: detected capacity change from 0 to 512 [ 1454.029678][T22039] EXT4-fs (loop2): 1 orphan inode deleted [ 1454.035500][T22039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.070636][T22039] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.103402][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.646417][T22027] ================================================================== [ 1454.654549][T22027] BUG: KCSAN: data-race in __refill_stock / drain_all_stock [ 1454.661872][T22027] [ 1454.664208][T22027] read-write to 0xffff888237c2a3c0 of 4 bytes by task 22048 on cpu 0: [ 1454.672374][T22027] __refill_stock+0x7f/0xb0 [ 1454.676912][T22027] obj_cgroup_uncharge_pages+0xfb/0x1a0 [ 1454.682496][T22027] __memcg_kmem_uncharge_page+0x53/0x100 [ 1454.688157][T22027] free_unref_page_prepare+0x7c/0x2a0 [ 1454.693539][T22027] free_unref_page+0x34/0x170 [ 1454.698249][T22027] vfree+0x27c/0x410 [ 1454.702166][T22027] __vmalloc_node_range+0xddb/0xea0 [ 1454.707392][T22027] kvmalloc_node+0x121/0x160 [ 1454.712009][T22027] xt_alloc_table_info+0x3d/0x80 [ 1454.716967][T22027] do_arpt_set_ctl+0x634/0x13b0 [ 1454.721847][T22027] nf_setsockopt+0x18d/0x1b0 [ 1454.726460][T22027] ip_setsockopt+0xe6/0x100 [ 1454.730993][T22027] tcp_setsockopt+0x90/0xa0 [ 1454.735522][T22027] sock_common_setsockopt+0x61/0x70 [ 1454.740743][T22027] __sys_setsockopt+0x1d4/0x240 [ 1454.745619][T22027] __x64_sys_setsockopt+0x66/0x80 [ 1454.750666][T22027] do_syscall_64+0x44/0x110 [ 1454.755191][T22027] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1454.761124][T22027] [ 1454.763468][T22027] read to 0xffff888237c2a3c0 of 4 bytes by task 22027 on cpu 1: [ 1454.771116][T22027] drain_all_stock+0xd3/0x2d0 [ 1454.775827][T22027] try_charge_memcg+0x6c5/0xd30 [ 1454.780709][T22027] obj_cgroup_charge_pages+0xab/0x130 [ 1454.786112][T22027] __memcg_kmem_charge_page+0x9c/0x170 [ 1454.791617][T22027] __alloc_pages+0x1bb/0x340 [ 1454.796228][T22027] alloc_pages_mpol+0xb1/0x1d0 [ 1454.801014][T22027] alloc_pages+0xe0/0x100 [ 1454.805367][T22027] __vmalloc_node_range+0x6d2/0xea0 [ 1454.810596][T22027] kvmalloc_node+0x121/0x160 [ 1454.815228][T22027] xt_alloc_table_info+0x3d/0x80 [ 1454.820196][T22027] do_arpt_set_ctl+0x634/0x13b0 [ 1454.825063][T22027] nf_setsockopt+0x18d/0x1b0 [ 1454.829676][T22027] ip_setsockopt+0xe6/0x100 [ 1454.834213][T22027] tcp_setsockopt+0x90/0xa0 [ 1454.838740][T22027] sock_common_setsockopt+0x61/0x70 [ 1454.844071][T22027] __sys_setsockopt+0x1d4/0x240 [ 1454.848960][T22027] __x64_sys_setsockopt+0x66/0x80 [ 1454.854096][T22027] do_syscall_64+0x44/0x110 [ 1454.858630][T22027] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1454.864568][T22027] [ 1454.866937][T22027] value changed: 0x0000003b -> 0x00000005 [ 1454.872689][T22027] [ 1454.875026][T22027] Reported by Kernel Concurrency Sanitizer on: [ 1454.881203][T22027] CPU: 1 PID: 22027 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1454.891640][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1454.901715][T22027] ================================================================== [ 1454.924748][T22025] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1454.936128][T22025] CPU: 1 PID: 22025 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1454.946634][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1454.956746][T22025] Call Trace: [ 1454.960046][T22025] [ 1454.962984][T22025] dump_stack_lvl+0xda/0x130 [ 1454.967606][T22025] dump_stack+0x15/0x20 [ 1454.971822][T22025] dump_header+0x82/0x2d0 [ 1454.976243][T22025] oom_kill_process+0x33a/0x4c0 [ 1454.981153][T22025] out_of_memory+0x9ca/0xbf0 [ 1454.985783][T22025] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1454.991974][T22025] mem_cgroup_out_of_memory+0x139/0x190 [ 1454.997614][T22025] try_charge_memcg+0x75c/0xd30 [ 1455.002496][T22025] ? __swap_duplicate+0x29b/0x2b0 [ 1455.009480][T22025] ? radix_tree_lookup+0xf9/0x150 [ 1455.014694][T22025] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1455.020802][T22025] __read_swap_cache_async+0x2f6/0x550 [ 1455.026348][T22025] swap_cluster_readahead+0x27c/0x4c0 [ 1455.031728][T22025] swapin_readahead+0xe9/0x7f0 [ 1455.036501][T22025] ? __filemap_get_folio+0x41a/0x5a0 [ 1455.041854][T22025] ? swap_cache_get_folio+0x6e/0x200 [ 1455.047148][T22025] do_swap_page+0x4a0/0x1670 [ 1455.051782][T22025] ? asm_exc_page_fault+0x26/0x30 [ 1455.056808][T22025] ? __rcu_read_lock+0x35/0x50 [ 1455.061625][T22025] ? pte_offset_map_nolock+0x124/0x1d0 [ 1455.067124][T22025] handle_mm_fault+0xa36/0x2dd0 [ 1455.072050][T22025] exc_page_fault+0x3ff/0x6c0 [ 1455.076760][T22025] asm_exc_page_fault+0x26/0x30 [ 1455.081610][T22025] RIP: 0033:0x7ff5cf2c7200 [ 1455.086045][T22025] Code: 48 89 2d f3 e4 c9 00 eb 86 48 89 c1 48 89 ea 48 8d 35 24 ff 09 00 31 c0 48 8d 3d 2b ff 09 00 e8 b6 fd ff ff 66 0f 1f 44 00 00 <48> 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 [ 1455.105806][T22025] RSP: 002b:00007ffe2f846218 EFLAGS: 00010202 [ 1455.111943][T22025] RAX: 0000000081956059 RBX: 00007ff5cf43c018 RCX: 0000000000000007 [ 1455.119924][T22025] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000081956058 [ 1455.127901][T22025] RBP: 0000000081956058 R08: 0000001b2d520000 R09: 0000000000000059 [ 1455.135890][T22025] R10: 000000008195605c R11: 0000000000042d12 R12: 0000000000000008 [ 1455.143912][T22025] R13: 0000000000000001 R14: 00007ff5cf430000 R15: ffffffff8195676f [ 1455.151987][T22025] ? selinux_socket_setsockopt+0x2f/0x180 [ 1455.157734][T22025] [ 1455.160893][T22025] memory: usage 307200kB, limit 307200kB, failcnt 120218 [ 1455.168137][T22025] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 1455.176199][T22025] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1455.183492][T22025] Memory cgroup stats for /syz1: [ 1455.184893][T22025] cache 0 [ 1455.193043][T22025] rss 0 [ 1455.195938][T22025] shmem 0 [ 1455.198892][T22025] mapped_file 0 [ 1455.202345][T22025] dirty 0 [ 1455.205299][T22025] writeback 0 [ 1455.208642][T22025] workingset_refault_anon 34767 [ 1455.213497][T22025] workingset_refault_file 2533 [ 1455.218336][T22025] swap 667648 [ 1455.221734][T22025] swapcached 8192 [ 1455.225383][T22025] pgpgin 447925 [ 1455.228841][T22025] pgpgout 447923 [ 1455.232442][T22025] pgfault 446333 [ 1455.236004][T22025] pgmajfault 14641 [ 1455.239729][T22025] inactive_anon 8192 [ 1455.243610][T22025] active_anon 0 [ 1455.247175][T22025] inactive_file 0 [ 1455.250810][T22025] active_file 0 [ 1455.254349][T22025] unevictable 0 [ 1455.257856][T22025] hierarchical_memory_limit 314572800 [ 1455.263232][T22025] hierarchical_memsw_limit 9223372036854771712 [ 1455.269407][T22025] total_cache 0 [ 1455.272868][T22025] total_rss 0 [ 1455.276179][T22025] total_shmem 0 [ 1455.279642][T22025] total_mapped_file 0 [ 1455.283636][T22025] total_dirty 0 [ 1455.287180][T22025] total_writeback 0 [ 1455.291046][T22025] total_workingset_refault_anon 34767 [ 1455.296437][T22025] total_workingset_refault_file 2533 [ 1455.301726][T22025] total_swap 667648 [ 1455.305632][T22025] total_swapcached 8192 [ 1455.309865][T22025] total_pgpgin 447925 [ 1455.313846][T22025] total_pgpgout 447923 [ 1455.317965][T22025] total_pgfault 446333 [ 1455.322050][T22025] total_pgmajfault 14641 [ 1455.326377][T22025] total_inactive_anon 8192 [ 1455.330792][T22025] total_active_anon 0 [ 1455.334847][T22025] total_inactive_file 0 [ 1455.339092][T22025] total_active_file 0 [ 1455.343096][T22025] total_unevictable 0 [ 1455.347111][T22025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22025,uid=0 [ 1455.362499][T22025] Memory cgroup out of memory: Killed process 22025 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1455.419029][T22040] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1455.430382][T22040] CPU: 0 PID: 22040 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1455.440900][T22040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1455.451052][T22040] Call Trace: [ 1455.454346][T22040] [ 1455.457287][T22040] dump_stack_lvl+0xda/0x130 [ 1455.461898][T22040] dump_stack+0x15/0x20 [ 1455.466149][T22040] dump_header+0x82/0x2d0 [ 1455.470540][T22040] oom_kill_process+0x33a/0x4c0 [ 1455.475418][T22040] out_of_memory+0x9ca/0xbf0 [ 1455.480153][T22040] mem_cgroup_out_of_memory+0x139/0x190 [ 1455.485724][T22040] try_charge_memcg+0x75c/0xd30 [ 1455.490604][T22040] ? __swap_duplicate+0x29b/0x2b0 [ 1455.495657][T22040] ? radix_tree_lookup+0xf9/0x150 [ 1455.500786][T22040] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1455.506955][T22040] __read_swap_cache_async+0x2f6/0x550 [ 1455.512469][T22040] swap_cluster_readahead+0x27c/0x4c0 [ 1455.517892][T22040] shmem_swapin_folio+0x343/0x830 [ 1455.523033][T22040] shmem_get_folio_gfp+0x242/0xb40 [ 1455.528214][T22040] ? ptep_set_access_flags+0x3e/0x70 [ 1455.533535][T22040] ? __rcu_read_unlock+0x4d/0x70 [ 1455.538489][T22040] shmem_fault+0x100/0x250 [ 1455.542924][T22040] ? put_swap_device+0xb0/0xb0 [ 1455.547729][T22040] handle_mm_fault+0x17db/0x2dd0 [ 1455.552717][T22040] exc_page_fault+0x3ff/0x6c0 [ 1455.557476][T22040] asm_exc_page_fault+0x26/0x30 [ 1455.562334][T22040] RIP: 0033:0x7fa159e46226 [ 1455.566757][T22040] Code: 1f 44 00 00 48 8b 0d c9 e4 c9 00 4c 63 05 b2 e4 c9 00 48 8b 05 b3 e4 c9 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 99 e4 c9 00 c3 52 48 8d 35 03 ff 09 00 48 89 c2 48 [ 1455.586396][T22040] RSP: 002b:00007ffea5cad718 EFLAGS: 00010287 [ 1455.592474][T22040] RAX: 0000001b2e924000 RBX: 00007fa159fbb0e8 RCX: 0000001b2e920000 [ 1455.600461][T22040] RDX: 0000001b2e924004 RSI: 0000000080000000 RDI: 000000008146a2d4 [ 1455.608442][T22040] RBP: 000000008146a2d4 R08: 0000001b2ed20000 R09: 00000000000002d4 [ 1455.616411][T22040] R10: 000000008146a2d8 R11: 0000000000042d22 R12: 0000000000006a6c [ 1455.624464][T22040] R13: 0000000000000001 R14: 00007fa159faf000 R15: ffffffff8146a1e5 [ 1455.632433][T22040] ? lru_note_cost+0xd5/0x350 [ 1455.637129][T22040] [ 1455.640229][T22040] memory: usage 307200kB, limit 307200kB, failcnt 197862 [ 1455.647280][T22040] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 1455.655192][T22040] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1455.662530][T22040] Memory cgroup stats for /syz0: [ 1455.663009][T22040] cache 4096 [ 1455.671191][T22040] rss 0 [ 1455.674018][T22040] shmem 0 [ 1455.677113][T22040] mapped_file 0 [ 1455.680656][T22040] dirty 0 [ 1455.683579][T22040] writeback 0 [ 1455.686985][T22040] workingset_refault_anon 39229 [ 1455.691875][T22040] workingset_refault_file 10296 [ 1455.696755][T22040] swap 454656 [ 1455.700042][T22040] swapcached 0 [ 1455.703399][T22040] pgpgin 3707364 [ 1455.707022][T22040] pgpgout 3707363 [ 1455.710663][T22040] pgfault 3641225 [ 1455.714286][T22040] pgmajfault 18722 [ 1455.718050][T22040] inactive_anon 0 [ 1455.721741][T22040] active_anon 0 [ 1455.725279][T22040] inactive_file 4096 [ 1455.729256][T22040] active_file 0 [ 1455.732740][T22040] unevictable 0 [ 1455.736257][T22040] hierarchical_memory_limit 314572800 [ 1455.741635][T22040] hierarchical_memsw_limit 9223372036854771712 [ 1455.747902][T22040] total_cache 4096 [ 1455.751693][T22040] total_rss 0 [ 1455.755016][T22040] total_shmem 0 [ 1455.758555][T22040] total_mapped_file 0 [ 1455.762536][T22040] total_dirty 0 [ 1455.766041][T22040] total_writeback 0 [ 1455.769867][T22040] total_workingset_refault_anon 39229 [ 1455.775317][T22040] total_workingset_refault_file 10296 [ 1455.780696][T22040] total_swap 454656 [ 1455.784503][T22040] total_swapcached 0 [ 1455.788422][T22040] total_pgpgin 3707364 [ 1455.792557][T22040] total_pgpgout 3707363 [ 1455.796744][T22040] total_pgfault 3641225 [ 1455.800963][T22040] total_pgmajfault 18722 [ 1455.805314][T22040] total_inactive_anon 0 [ 1455.809465][T22040] total_active_anon 0 [ 1455.813487][T22040] total_inactive_file 4096 05:52:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x13, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:52:00 executing program 3: r0 = socket(0x28, 0x5, 0x0) connect$unix(r0, 0x0, 0x0) 05:52:00 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x38, 0x0, 0x0) 05:52:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) [ 1455.817925][T22040] total_active_file 0 [ 1455.821904][T22040] total_unevictable 0 [ 1455.825910][T22040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22040,uid=0 [ 1455.841277][T22040] Memory cgroup out of memory: Killed process 22040 (syz-executor.0) total-vm:46560kB, anon-rss:428kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 05:52:00 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8949, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 05:52:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8990, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:52:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) [ 1455.943999][T22061] loop2: detected capacity change from 0 to 512 05:52:00 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', 0x0}) [ 1455.988109][T22061] EXT4-fs (loop2): 1 orphan inode deleted [ 1455.993976][T22061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.055678][T22061] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.092191][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:52:00 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000200)=ANY=[]}) 05:52:00 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x8, 0x0, 0x0) 05:52:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80000) [ 1456.296407][T22079] loop2: detected capacity change from 0 to 512 [ 1456.326841][T22079] EXT4-fs (loop2): 1 orphan inode deleted [ 1456.332689][T22079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.347142][T22079] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.376881][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.604852][T22057] syz-executor.1 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1456.618396][T22057] CPU: 0 PID: 22057 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1456.628842][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1456.638900][T22057] Call Trace: [ 1456.642177][T22057] [ 1456.645108][T22057] dump_stack_lvl+0xda/0x130 [ 1456.649792][T22057] dump_stack+0x15/0x20 [ 1456.653957][T22057] dump_header+0x82/0x2d0 [ 1456.658371][T22057] oom_kill_process+0x33a/0x4c0 [ 1456.663351][T22057] out_of_memory+0x9ca/0xbf0 [ 1456.668000][T22057] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1456.674088][T22057] mem_cgroup_out_of_memory+0x139/0x190 [ 1456.679675][T22057] try_charge_memcg+0x75c/0xd30 [ 1456.685334][T22057] obj_cgroup_charge_pages+0xab/0x130 [ 1456.690812][T22057] __memcg_kmem_charge_page+0x9c/0x170 [ 1456.696292][T22057] __alloc_pages+0x1bb/0x340 [ 1456.700952][T22057] alloc_pages_mpol+0xb1/0x1d0 [ 1456.705733][T22057] alloc_pages+0xe0/0x100 [ 1456.710137][T22057] __vmalloc_node_range+0x6d2/0xea0 [ 1456.715424][T22057] kvmalloc_node+0x121/0x160 [ 1456.720041][T22057] ? xt_alloc_table_info+0x3d/0x80 [ 1456.725284][T22057] xt_alloc_table_info+0x3d/0x80 [ 1456.730307][T22057] do_arpt_set_ctl+0x634/0x13b0 [ 1456.735244][T22057] ? __futex_wait+0x227/0x280 [ 1456.739949][T22057] ? __futex_wake_mark+0x70/0x70 [ 1456.744914][T22057] ? tcp_release_cb+0xfe/0x370 [ 1456.749712][T22057] ? _raw_spin_unlock_bh+0x36/0x40 [ 1456.754898][T22057] nf_setsockopt+0x18d/0x1b0 [ 1456.759537][T22057] ip_setsockopt+0xe6/0x100 [ 1456.764064][T22057] tcp_setsockopt+0x90/0xa0 [ 1456.768693][T22057] sock_common_setsockopt+0x61/0x70 [ 1456.774052][T22057] ? sock_common_recvmsg+0xe0/0xe0 [ 1456.779255][T22057] __sys_setsockopt+0x1d4/0x240 [ 1456.784113][T22057] __x64_sys_setsockopt+0x66/0x80 [ 1456.789144][T22057] do_syscall_64+0x44/0x110 [ 1456.793665][T22057] ? syscall_exit_to_user_mode+0x38/0x140 [ 1456.799488][T22057] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1456.805422][T22057] RIP: 0033:0x7ff5cf31cae9 [ 1456.809904][T22057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1456.829702][T22057] RSP: 002b:00007ff5ce69f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1456.838238][T22057] RAX: ffffffffffffffda RBX: 00007ff5cf43bf80 RCX: 00007ff5cf31cae9 [ 1456.846218][T22057] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1456.854220][T22057] RBP: 00007ff5cf36847a R08: 0000000000000438 R09: 0000000000000000 [ 1456.862278][T22057] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.870313][T22057] R13: 000000000000000b R14: 00007ff5cf43bf80 R15: 00007ffe2f8461d8 [ 1456.878293][T22057] [ 1456.881488][T22057] memory: usage 307200kB, limit 307200kB, failcnt 120458 [ 1456.888543][T22057] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0 [ 1456.896454][T22057] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 1456.903760][T22057] Memory cgroup stats for /syz1: [ 1456.904398][T22057] cache 0 [ 1456.912428][T22057] rss 36864 [ 1456.915565][T22057] shmem 0 [ 1456.918505][T22057] mapped_file 0 [ 1456.922011][T22057] dirty 0 [ 1456.924983][T22057] writeback 0 [ 1456.928312][T22057] workingset_refault_anon 34821 [ 1456.933156][T22057] workingset_refault_file 2533 [ 1456.938068][T22057] swap 659456 [ 1456.941361][T22057] swapcached 36864 [ 1456.945177][T22057] pgpgin 448002 [ 1456.948665][T22057] pgpgout 447993 [ 1456.952200][T22057] pgfault 446452 [ 1456.955786][T22057] pgmajfault 14658 [ 1456.959505][T22057] inactive_anon 0 [ 1456.963128][T22057] active_anon 36864 [ 1456.966961][T22057] inactive_file 0 [ 1456.970663][T22057] active_file 0 [ 1456.974188][T22057] unevictable 0 [ 1456.977677][T22057] hierarchical_memory_limit 314572800 [ 1456.983080][T22057] hierarchical_memsw_limit 9223372036854771712 [ 1456.989540][T22057] total_cache 0 [ 1456.993004][T22057] total_rss 36864 [ 1456.996726][T22057] total_shmem 0 [ 1457.000231][T22057] total_mapped_file 0 [ 1457.004226][T22057] total_dirty 0 [ 1457.007749][T22057] total_writeback 0 [ 1457.011629][T22057] total_workingset_refault_anon 34821 [ 1457.017067][T22057] total_workingset_refault_file 2533 [ 1457.022356][T22057] total_swap 659456 [ 1457.026188][T22057] total_swapcached 36864 [ 1457.030429][T22057] total_pgpgin 448002 [ 1457.034400][T22057] total_pgpgout 447993 [ 1457.038531][T22057] total_pgfault 446452 [ 1457.042604][T22057] total_pgmajfault 14658 [ 1457.046873][T22057] total_inactive_anon 0 [ 1457.051135][T22057] total_active_anon 36864 [ 1457.055649][T22057] total_inactive_file 0 [ 1457.059911][T22057] total_active_file 0 [ 1457.063949][T22057] total_unevictable 0 [ 1457.067987][T22057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22053,uid=0 [ 1457.083330][T22057] Memory cgroup out of memory: Killed process 22053 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:52:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x18, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:52:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:52:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x401c5820, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:52:01 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 05:52:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:52:02 executing program 3: shmget$private(0x0, 0x1000, 0xd2e4bfc7d048d2bf, &(0x7f0000ffc000/0x1000)=nil) 05:52:02 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x3, 0x0, 0x0) [ 1457.283152][T22087] loop2: detected capacity change from 0 to 512 [ 1457.321794][T22087] EXT4-fs (loop2): 1 orphan inode deleted 05:52:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 05:52:02 executing program 4: socket(0x3, 0x0, 0x465) 05:52:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001600)=ANY=[@ANYBLOB="019a25501800000062"]) [ 1457.327639][T22087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.358353][T22087] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4108/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:52:02 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8932, &(0x7f00000001c0)={'tunl0\x00', 0x0}) [ 1457.446665][T22109] autofs4:pid:22109:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1344641537.24), cmd(0xc018937d) [ 1457.460921][T22109] autofs4:pid:22109:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937d) [ 1457.488844][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.061679][T22092] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1458.073190][T22092] CPU: 1 PID: 22092 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1458.083683][T22092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1458.093775][T22092] Call Trace: [ 1458.097123][T22092] [ 1458.100071][T22092] dump_stack_lvl+0xda/0x130 [ 1458.104713][T22092] dump_stack+0x15/0x20 [ 1458.108952][T22092] dump_header+0x82/0x2d0 [ 1458.113386][T22092] oom_kill_process+0x33a/0x4c0 [ 1458.118434][T22092] out_of_memory+0x9ca/0xbf0 [ 1458.123052][T22092] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1458.129231][T22092] mem_cgroup_out_of_memory+0x139/0x190 [ 1458.134837][T22092] try_charge_memcg+0x75c/0xd30 [ 1458.139892][T22092] ? __swap_duplicate+0x29b/0x2b0 [ 1458.144944][T22092] ? radix_tree_lookup+0xf9/0x150 [ 1458.150024][T22092] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1458.156232][T22092] __read_swap_cache_async+0x2f6/0x550 [ 1458.161755][T22092] swap_cluster_readahead+0x27c/0x4c0 [ 1458.167240][T22092] swapin_readahead+0xe9/0x7f0 [ 1458.172041][T22092] ? __filemap_get_folio+0x41a/0x5a0 [ 1458.177360][T22092] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1458.183019][T22092] ? swap_cache_get_folio+0x6e/0x200 [ 1458.188342][T22092] do_swap_page+0x4a0/0x1670 [ 1458.193057][T22092] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1458.198430][T22092] ? __rcu_read_lock+0x35/0x50 [ 1458.203292][T22092] ? pte_offset_map_nolock+0x124/0x1d0 [ 1458.208816][T22092] handle_mm_fault+0xa36/0x2dd0 [ 1458.213772][T22092] exc_page_fault+0x3ff/0x6c0 [ 1458.218528][T22092] asm_exc_page_fault+0x26/0x30 [ 1458.223512][T22092] RIP: 0033:0x7ff5cf2d6ae4 [ 1458.227941][T22092] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1458.247695][T22092] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1458.253777][T22092] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1458.261769][T22092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1458.269835][T22092] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1458.277829][T22092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000163fdc [ 1458.285994][T22092] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 0000000000163c9b [ 1458.294054][T22092] [ 1458.297214][T22092] memory: usage 307200kB, limit 307200kB, failcnt 120583 [ 1458.304327][T22092] memory+swap: usage 307944kB, limit 9007199254740988kB, failcnt 0 [ 1458.312505][T22092] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1458.319903][T22092] Memory cgroup stats for /syz1: [ 1458.323333][T22092] cache 0 [ 1458.331384][T22092] rss 8192 [ 1458.334498][T22092] shmem 0 [ 1458.337569][T22092] mapped_file 0 [ 1458.341031][T22092] dirty 0 [ 1458.343969][T22092] writeback 8192 [ 1458.347634][T22092] workingset_refault_anon 34862 [ 1458.352566][T22092] workingset_refault_file 2533 [ 1458.357445][T22092] swap 761856 [ 1458.360738][T22092] swapcached 8192 [ 1458.364439][T22092] pgpgin 448066 [ 1458.367933][T22092] pgpgout 448064 [ 1458.371554][T22092] pgfault 446578 [ 1458.375144][T22092] pgmajfault 14681 [ 1458.378964][T22092] inactive_anon 0 [ 1458.382629][T22092] active_anon 0 [ 1458.386199][T22092] inactive_file 0 [ 1458.390011][T22092] active_file 0 [ 1458.393510][T22092] unevictable 0 [ 1458.397024][T22092] hierarchical_memory_limit 314572800 [ 1458.402484][T22092] hierarchical_memsw_limit 9223372036854771712 [ 1458.408727][T22092] total_cache 0 [ 1458.412198][T22092] total_rss 8192 [ 1458.415918][T22092] total_shmem 0 [ 1458.419419][T22092] total_mapped_file 0 [ 1458.423411][T22092] total_dirty 0 [ 1458.426960][T22092] total_writeback 8192 [ 1458.431073][T22092] total_workingset_refault_anon 34862 [ 1458.436527][T22092] total_workingset_refault_file 2533 [ 1458.441839][T22092] total_swap 761856 [ 1458.445725][T22092] total_swapcached 8192 [ 1458.449935][T22092] total_pgpgin 448066 [ 1458.453932][T22092] total_pgpgout 448064 [ 1458.458105][T22092] total_pgfault 446578 [ 1458.462182][T22092] total_pgmajfault 14681 [ 1458.466525][T22092] total_inactive_anon 0 [ 1458.470691][T22092] total_active_anon 0 [ 1458.474784][T22092] total_inactive_file 0 [ 1458.479008][T22092] total_active_file 0 [ 1458.483088][T22092] total_unevictable 0 [ 1458.487102][T22092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22092,uid=0 [ 1458.502496][T22092] Memory cgroup out of memory: Killed process 22092 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1458.522743][T22082] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1458.534144][T22082] CPU: 0 PID: 22082 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1458.544588][T22082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1458.554850][T22082] Call Trace: [ 1458.558141][T22082] [ 1458.561081][T22082] dump_stack_lvl+0xda/0x130 [ 1458.565711][T22082] dump_stack+0x15/0x20 [ 1458.569915][T22082] dump_header+0x82/0x2d0 [ 1458.574321][T22082] oom_kill_process+0x33a/0x4c0 [ 1458.579207][T22082] out_of_memory+0x9ca/0xbf0 [ 1458.583853][T22082] mem_cgroup_out_of_memory+0x139/0x190 [ 1458.589527][T22082] try_charge_memcg+0x75c/0xd30 [ 1458.594450][T22082] ? __swap_duplicate+0x29b/0x2b0 [ 1458.599512][T22082] ? radix_tree_lookup+0xf9/0x150 [ 1458.604604][T22082] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1458.610759][T22082] __read_swap_cache_async+0x2f6/0x550 [ 1458.616245][T22082] swap_cluster_readahead+0x27c/0x4c0 [ 1458.621642][T22082] swapin_readahead+0xe9/0x7f0 [ 1458.626482][T22082] ? __filemap_get_folio+0x41a/0x5a0 [ 1458.631789][T22082] ? __rcu_read_unlock+0x4d/0x70 [ 1458.636738][T22082] ? swap_cache_get_folio+0x6e/0x200 [ 1458.642114][T22082] do_swap_page+0x4a0/0x1670 [ 1458.648711][T22082] ? __rcu_read_lock+0x35/0x50 [ 1458.653493][T22082] ? pte_offset_map_nolock+0x124/0x1d0 [ 1458.658965][T22082] handle_mm_fault+0xa36/0x2dd0 [ 1458.663906][T22082] ? mt_find+0x1d9/0x310 [ 1458.668235][T22082] exc_page_fault+0x2f7/0x6c0 [ 1458.672935][T22082] asm_exc_page_fault+0x26/0x30 [ 1458.677850][T22082] RIP: 0010:__get_user_8+0x11/0x20 [ 1458.683080][T22082] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 1458.702707][T22082] RSP: 0018:ffffc90000ae7e38 EFLAGS: 00050202 [ 1458.708780][T22082] RAX: 0000555556440da8 RBX: ffffc90000ae7e40 RCX: ffffffff814442c3 [ 1458.716756][T22082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881003c9a10 [ 1458.724745][T22082] RBP: ffffc90000ae7ef8 R08: 00018881003c9a17 R09: 0000000000000000 [ 1458.732730][T22082] R10: 0001ffffffffffff R11: 00018881003c96d8 R12: ffff8881003c9040 [ 1458.740705][T22082] R13: ffff8881003c9a10 R14: ffffc90000ae7f58 R15: ffffc90000ae7fd8 [ 1458.748687][T22082] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 1458.754683][T22082] __rseq_handle_notify_resume+0xc7/0xbf0 [ 1458.760443][T22082] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 1458.766428][T22082] exit_to_user_mode_loop+0xcc/0xe0 [ 1458.771685][T22082] exit_to_user_mode_prepare+0x6c/0xb0 [ 1458.777205][T22082] irqentry_exit_to_user_mode+0x9/0x20 [ 1458.782749][T22082] irqentry_exit+0x12/0x40 [ 1458.787232][T22082] asm_exc_page_fault+0x26/0x30 [ 1458.792090][T22082] RIP: 0033:0x7fa159e5783e [ 1458.796528][T22082] Code: d2 0f 84 65 01 00 00 83 c0 01 41 39 c2 75 da 89 e8 25 ff 1f 00 00 41 89 2c 86 89 ef 41 83 c4 01 e8 c7 e9 fe ff 83 44 24 08 01 <44> 3b 63 04 0f 82 37 ff ff ff 44 8b 4c 24 08 48 8b 2c 24 49 89 df [ 1458.816241][T22082] RSP: 002b:00007ffea5cad720 EFLAGS: 00010206 [ 1458.822310][T22082] RAX: 0000001b2e9239e8 RBX: 00007fa159fbb0e8 RCX: 0000001b2e920000 [ 1458.830324][T22082] RDX: 0000001b2e9239ec RSI: 0000000080000000 RDI: 00000000815e0991 [ 1458.838364][T22082] RBP: 00000000815e0991 R08: 0000001b2ed20000 R09: 0000000000000992 [ 1458.846412][T22082] R10: 00000000815e0995 R11: 0000000000042f6e R12: 0000000000000003 [ 1458.854391][T22082] R13: 0000000000000001 R14: 00007fa159faf000 R15: ffffffff815e04d3 [ 1458.862368][T22082] ? __fdget+0x13/0x130 [ 1458.866576][T22082] [ 1458.869777][T22082] memory: usage 307200kB, limit 307200kB, failcnt 198420 [ 1458.876826][T22082] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 1458.884743][T22082] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1458.892093][T22082] Memory cgroup stats for /syz0: [ 1458.892806][T22082] cache 4096 [ 1458.901056][T22082] rss 0 [ 1458.903914][T22082] shmem 0 [ 1458.906870][T22082] mapped_file 0 [ 1458.910329][T22082] dirty 0 [ 1458.913271][T22082] writeback 0 [ 1458.916580][T22082] workingset_refault_anon 39298 [ 1458.921451][T22082] workingset_refault_file 10296 [ 1458.926344][T22082] swap 483328 [ 1458.929632][T22082] swapcached 0 [ 1458.933006][T22082] pgpgin 3711555 [ 1458.936572][T22082] pgpgout 3711554 [ 1458.940206][T22082] pgfault 3645498 [ 1458.943975][T22082] pgmajfault 18746 [ 1458.947738][T22082] inactive_anon 0 [ 1458.951447][T22082] active_anon 0 [ 1458.955040][T22082] inactive_file 4096 [ 1458.958947][T22082] active_file 0 [ 1458.962407][T22082] unevictable 0 [ 1458.966027][T22082] hierarchical_memory_limit 314572800 [ 1458.971413][T22082] hierarchical_memsw_limit 9223372036854771712 [ 1458.977663][T22082] total_cache 4096 [ 1458.981391][T22082] total_rss 0 [ 1458.984737][T22082] total_shmem 0 [ 1458.988234][T22082] total_mapped_file 0 [ 1458.992272][T22082] total_dirty 0 [ 1458.995904][T22082] total_writeback 0 [ 1458.999795][T22082] total_workingset_refault_anon 39298 [ 1459.005289][T22082] total_workingset_refault_file 10296 [ 1459.010826][T22082] total_swap 483328 [ 1459.014645][T22082] total_swapcached 0 [ 1459.018571][T22082] total_pgpgin 3711555 [ 1459.022665][T22082] total_pgpgout 3711554 [ 1459.026880][T22082] total_pgfault 3645498 [ 1459.031091][T22082] total_pgmajfault 18746 [ 1459.035370][T22082] total_inactive_anon 0 [ 1459.039523][T22082] total_active_anon 0 [ 1459.043497][T22082] total_inactive_file 4096 [ 1459.047929][T22082] total_active_file 0 [ 1459.051935][T22082] total_unevictable 0 [ 1459.056038][T22082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22082,uid=0 [ 1459.071393][T22082] Memory cgroup out of memory: Killed process 22082 (syz-executor.0) total-vm:48740kB, anon-rss:376kB, file-rss:10884kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 05:52:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:03 executing program 3: move_pages(0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0, 0x0) 05:52:03 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x11, 0x11, 0x0, 0x4) 05:52:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x1a, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:52:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:52:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:52:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:04 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x4a, 0x0, 0x4) 05:52:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8947, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:52:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:04 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x2e, 0x0, 0x0) 05:52:04 executing program 4: r0 = socket(0x28, 0x5, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) 05:52:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @local}, {0x0, @random="7283948cffa2"}, 0x48, {0x2, 0x0, @private}, 'ipvlan0\x00'}) 05:52:04 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0045878, 0x0) [ 1459.460788][T22143] loop2: detected capacity change from 0 to 512 [ 1459.509215][T22143] EXT4-fs (loop2): 1 orphan inode deleted [ 1459.515201][T22143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.533050][T22143] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.625868][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.026468][T22117] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1460.037933][T22117] CPU: 0 PID: 22117 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00048-ge8f60209d6cf #0 [ 1460.048366][T22117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1460.058465][T22117] Call Trace: [ 1460.061765][T22117] [ 1460.064703][T22117] dump_stack_lvl+0xda/0x130 [ 1460.069315][T22117] dump_stack+0x15/0x20 [ 1460.073610][T22117] dump_header+0x82/0x2d0 [ 1460.077963][T22117] oom_kill_process+0x33a/0x4c0 [ 1460.082829][T22117] out_of_memory+0x9ca/0xbf0 [ 1460.087438][T22117] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 1460.093612][T22117] mem_cgroup_out_of_memory+0x139/0x190 [ 1460.099229][T22117] try_charge_memcg+0x75c/0xd30 [ 1460.104313][T22117] ? __swap_duplicate+0x29b/0x2b0 [ 1460.109361][T22117] ? radix_tree_lookup+0xf9/0x150 [ 1460.114452][T22117] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 1460.120547][T22117] __read_swap_cache_async+0x2f6/0x550 [ 1460.126123][T22117] swap_cluster_readahead+0x27c/0x4c0 [ 1460.131521][T22117] swapin_readahead+0xe9/0x7f0 [ 1460.136352][T22117] ? __filemap_get_folio+0x41a/0x5a0 [ 1460.141727][T22117] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 1460.147458][T22117] ? swap_cache_get_folio+0x6e/0x200 [ 1460.152762][T22117] do_swap_page+0x4a0/0x1670 [ 1460.157428][T22117] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1460.163152][T22117] ? __rcu_read_lock+0x35/0x50 [ 1460.167981][T22117] ? pte_offset_map_nolock+0x124/0x1d0 [ 1460.173460][T22117] handle_mm_fault+0xa36/0x2dd0 [ 1460.178346][T22117] exc_page_fault+0x3ff/0x6c0 [ 1460.183138][T22117] asm_exc_page_fault+0x26/0x30 [ 1460.188062][T22117] RIP: 0033:0x7ff5cf2d6ae4 [ 1460.192495][T22117] Code: 01 00 00 69 3d c9 eb c8 00 e8 03 00 00 48 8d 1d b2 54 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 1460.212232][T22117] RSP: 002b:00007ffe2f8462c0 EFLAGS: 00010206 [ 1460.218326][T22117] RAX: 0000000000000000 RBX: 00007ff5cf43bf80 RCX: 0000000000000000 [ 1460.226306][T22117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556bc2788 [ 1460.234285][T22117] RBP: 00007ff5cf43d980 R08: 0000000000000000 R09: 00007ffe2f8f80b0 [ 1460.242333][T22117] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000016479b [ 1460.250316][T22117] R13: ffffffffffffffff R14: 00007ff5ceea0000 R15: 000000000016445a [ 1460.258377][T22117] [ 1460.261662][T22117] memory: usage 307200kB, limit 307200kB, failcnt 120929 [ 1460.268791][T22117] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 1460.276716][T22117] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1460.284007][T22117] Memory cgroup stats for /syz1: [ 1460.286585][T22117] cache 0 [ 1460.294522][T22117] rss 8192 [ 1460.297618][T22117] shmem 0 [ 1460.300562][T22117] mapped_file 0 [ 1460.304081][T22117] dirty 0 [ 1460.307083][T22117] writeback 8192 [ 1460.310630][T22117] workingset_refault_anon 34881 [ 1460.315622][T22117] workingset_refault_file 2533 [ 1460.320432][T22117] swap 716800 [ 1460.323727][T22117] swapcached 16384 [ 1460.327559][T22117] pgpgin 448108 [ 1460.331021][T22117] pgpgout 448104 [ 1460.334622][T22117] pgfault 446677 [ 1460.338226][T22117] pgmajfault 14691 [ 1460.342016][T22117] inactive_anon 0 [ 1460.345692][T22117] active_anon 0 [ 1460.349161][T22117] inactive_file 0 [ 1460.352803][T22117] active_file 0 [ 1460.356419][T22117] unevictable 0 [ 1460.359948][T22117] hierarchical_memory_limit 314572800 [ 1460.365377][T22117] hierarchical_memsw_limit 9223372036854771712 [ 1460.371537][T22117] total_cache 0 [ 1460.375061][T22117] total_rss 8192 [ 1460.378612][T22117] total_shmem 0 [ 1460.382164][T22117] total_mapped_file 0 [ 1460.386164][T22117] total_dirty 0 [ 1460.389626][T22117] total_writeback 8192 [ 1460.393696][T22117] total_workingset_refault_anon 34881 [ 1460.399104][T22117] total_workingset_refault_file 2533 [ 1460.404391][T22117] total_swap 716800 [ 1460.408224][T22117] total_swapcached 16384 [ 1460.412466][T22117] total_pgpgin 448108 [ 1460.416491][T22117] total_pgpgout 448104 [ 1460.420563][T22117] total_pgfault 446677 [ 1460.424629][T22117] total_pgmajfault 14691 [ 1460.428912][T22117] total_inactive_anon 0 [ 1460.433071][T22117] total_active_anon 0 [ 1460.437107][T22117] total_inactive_file 0 [ 1460.441263][T22117] total_active_file 0 [ 1460.445271][T22117] total_unevictable 0 [ 1460.449253][T22117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22117,uid=0 [ 1460.464711][T22117] Memory cgroup out of memory: Killed process 22117 (syz-executor.1) total-vm:46296kB, anon-rss:428kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:52:05 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x5, 0x0, 0x0) 05:52:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) 05:52:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyL5gfz5wfM+5V9L3e2x0dc+9x7oB7FunIuJqRAxExLmIGM7Wp1m51mxstB/36OHd6WZJotG48VkSSbau81pJtjzSfkocjIi/XYv4Z/LDuLW19YWpSqW8krVL9cXlUm1t/fz84tRcea68NDExfmny8uTFybG+9HMkIq786aP//+e1P19567e337/5ydl/NdMayrY/2Y9+ane90PpddAxGxMpOBMvBQLYs5JwHAADb0zzG/0lE/Kp1/D8cA62jUwAAAGAvafxhKL5OIhoAAADAnpW25sAmaTGbCzAUaVostufw/iwOp5Vqrf6b2erq0kx7ruxIFNLZ+Up5LJsrPBKFpNkez+bYdtoXNrUnIuJYRPxv+FCrXZyuVmbyPvkBAAAA+8SRTeP/L4fb438AAABgjxnJOwEAAABgxxn/AwAAwN5n/A8AAAB72l+uX2+WRuf+1zO31lYXqrfOz5RrC8XF1enidHVluThXrc61vrNvcavXq1Sry7+LpdU7pXq5Vi/V1tZvLlZXl+o355+6BTYAAACwi4798v57SURs/P5QqzQdyDspYFckz/PgD3cuD2D3DeSdAJCbwbwTAHJTyDsBIHdbnQfoOXnn7f7nAgAA7IzRn/e+/u/cAOxtad4JAAC7zvV/2L8KZgDCvvfjLba/+PX/RuO5EgIAAPpuqFWStJhdCxyKNC0WI462bgtQSGbnK+WxbHzw7nDhR832eOuZyfP97zAAAAAAAAAAAAAAAAAAAAAAAAAA7GONRhINAAAAYE+LSD9OWt/mHzE6fGZo8/mBA8lXw61lRNx+5cZLd6bq9ZXx5vrPH6+vv5ytv5DHGQwAAABgs844vTOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB+evTw7nSn7GbcT/8YESPd4g/GwdbyYBQi4vAXSQw+8bwkIgb6EH/jXkQc7xY/aaYVI1kW3eIfyjF+GhFH+hAf9rP7zf3P1W7vvzROtZbd33+DWXlRvfd/6eP930CP/c/RbcY48eCNUs/49yJODHbf/3TiJz3in95m/H/8fX2917bGqxGjXT9/kqdileqLy6Xa2vr5+cWpufJceWliYvzS5OXJi5Njpdn5Sjn72TXGf3/x5rfP6v/hHvFHtuj/mW32/5sHdx7+tF0tdIt/9nT3z9/jPeKn2Wffr7N6c/top77Rrj/p5OvvnHxW/2d69H+rv//Zbfb/3F///cE2HwoA7ILa2vrCVKVSXlFRUVF5XMl7zwQAAPTb9wf9eWcCAAAAAAAAAAAAAAAAAAAA+9dufJ3Y5pgb+XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZvgsAAP//96DU7Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:52:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x28, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:52:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:52:05 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8971, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 05:52:05 executing program 3: shmget(0x3, 0xd000, 0x0, &(0x7f0000ff3000/0xd000)=nil) 05:52:05 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x4b, 0x0, 0x4) [ 1460.728344][T22157] loop2: detected capacity change from 0 to 512 [ 1460.747791][T22157] EXT4-fs (loop2): 1 orphan inode deleted [ 1460.753734][T22157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:52:05 executing program 3: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 1460.804918][T22157] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4113/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:52:05 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x36, 0x0, 0x0) 05:52:05 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40086602, 0x0) 05:52:05 executing program 4: r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x10}, 0x0) 05:52:05 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x4020940d, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 05:52:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) [ 1460.967130][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1461.015250][T22187] loop2: detected capacity change from 0 to 512 [ 1461.029781][T22187] EXT4-fs (loop2): 1 orphan inode deleted [ 1461.035723][T22187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1461.049894][T22187] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1461.171345][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:52:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:52:06 executing program 4: r0 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="736962bb282511ec81a4810000000000f030a55e2dd1a67de59e83a6a8b78672fdea10a902869cd7e7d1ea685e"]}) 05:52:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8991, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:52:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x30, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:52:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:52:06 executing program 3: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100)) 05:52:06 executing program 4: socket(0x22, 0x0, 0x7) [ 1461.790850][T22197] loop2: detected capacity change from 0 to 512 [ 1461.828369][T22197] EXT4-fs (loop2): 1 orphan inode deleted 05:52:06 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 05:52:06 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x84, @private, 0x0, 0x4, 'sed\x00'}, 0x2c) 05:52:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 05:52:06 executing program 4: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180000000) [ 1461.834207][T22197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1461.863459][T22197] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1461.926531][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:52:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyL5gfz5wfM+5V9L3e2x0dc+9x7oB7FunIuJqRAxExLmIGM7Wp1m51mxstB/36OHd6WZJotG48VkSSbau81pJtjzSfkocjIi/XYv4Z/LDuLW19YWpSqW8krVL9cXlUm1t/fz84tRcea68NDExfmny8uTFybG+9HMkIq786aP//+e1P19567e337/5ydl/NdMayrY/2Y9+ane90PpddAxGxMpOBMvBQLYs5JwHAADb0zzG/0lE/Kp1/D8cA62jUwAAAGAvafxhKL5OIhoAAADAnpW25sAmaTGbCzAUaVostufw/iwOp5Vqrf6b2erq0kx7ruxIFNLZ+Up5LJsrPBKFpNkez+bYdtoXNrUnIuJYRPxv+FCrXZyuVmbyPvkBAAAA+8SRTeP/L4fb438AAABgjxnJOwEAAABgxxn/AwAAwN5n/A8AAAB72l+uX2+WRuf+1zO31lYXqrfOz5RrC8XF1enidHVluThXrc61vrNvcavXq1Sry7+LpdU7pXq5Vi/V1tZvLlZXl+o355+6BTYAAACwi4798v57SURs/P5QqzQdyDspYFckz/PgD3cuD2D3DeSdAJCbwbwTAHJTyDsBIHdbnQfoOXnn7f7nAgAA7IzRn/e+/u/cAOxtad4JAAC7zvV/2L8KZgDCvvfjLba/+PX/RuO5EgIAAPpuqFWStJhdCxyKNC0WI462bgtQSGbnK+WxbHzw7nDhR832eOuZyfP97zAAAAAAAAAAAAAAAAAAAAAAAAAA7GONRhINAAAAYE+LSD9OWt/mHzE6fGZo8/mBA8lXw61lRNx+5cZLd6bq9ZXx5vrPH6+vv5ytv5DHGQwAAABgs844vTOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB+evTw7nSn7GbcT/8YESPd4g/GwdbyYBQi4vAXSQw+8bwkIgb6EH/jXkQc7xY/aaYVI1kW3eIfyjF+GhFH+hAf9rP7zf3P1W7vvzROtZbd33+DWXlRvfd/6eP930CP/c/RbcY48eCNUs/49yJODHbf/3TiJz3in95m/H/8fX2917bGqxGjXT9/kqdileqLy6Xa2vr5+cWpufJceWliYvzS5OXJi5Njpdn5Sjn72TXGf3/x5rfP6v/hHvFHtuj/mW32/5sHdx7+tF0tdIt/9nT3z9/jPeKn2Wffr7N6c/top77Rrj/p5OvvnHxW/2d69H+rv//Zbfb/3F///cE2HwoA7ILa2vrCVKVSXlFRUVF5XMl7zwQAAPTb9wf9eWcCAAAAAAAAAAAAAAAAAAAA+9dufJ3Y5pgb+XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZvgsAAP//96DU7Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:07 executing program 3: r0 = socket$inet(0xa, 0x80003, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x2, 0x0, 0x0) 05:52:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:52:07 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8937, &(0x7f00000001c0)={'tunl0\x00', 0x0}) [ 1462.513697][T22227] loop2: detected capacity change from 0 to 512 [ 1462.538554][T22227] EXT4-fs (loop2): 1 orphan inode deleted [ 1462.544435][T22227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1462.579190][T22227] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.638198][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:52:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) 05:52:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 05:52:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x38, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:52:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:52:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'gre0\x00', 0x0}) 05:52:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x823, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) [ 1462.856028][T22233] loop2: detected capacity change from 0 to 512 [ 1462.887322][T22233] EXT4-fs (loop2): 1 orphan inode deleted [ 1462.893169][T22233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:52:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x823, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 05:52:07 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1462.921534][T22233] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4117/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:52:07 executing program 4: r0 = memfd_secret(0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) [ 1463.036449][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:52:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:52:08 executing program 3: socket(0x38, 0x0, 0x0) 05:52:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:08 executing program 4: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 05:52:08 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'syz_tun\x00'}}, 0x1e) [ 1463.389824][T22260] loop2: detected capacity change from 0 to 512 [ 1463.448118][T22260] EXT4-fs (loop2): 1 orphan inode deleted [ 1463.453911][T22260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.480280][T22260] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1463.536835][ T3117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 05:52:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x48, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 05:52:08 executing program 4: move_pages(0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x7) 05:52:08 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 05:52:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x1fffffbf, 0x0, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 'bridge0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 05:52:08 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x49, 0x0, 0x0) 05:52:08 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x29, 0x3a, 0x0, 0x4) [ 1463.871270][T22274] loop2: detected capacity change from 0 to 512 [ 1463.911400][T22274] EXT4-fs (loop2): 1 orphan inode deleted [ 1463.928794][T22274] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4119/file1 supports timestamps until 2038-01-19 (0x7fffffff) 05:52:08 executing program 3: syz_io_uring_setup(0x38d8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 05:52:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f0000000080)={'tunl0\x00', 0x0}) 05:52:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xb644) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 05:52:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 05:52:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) [ 1464.311129][T22296] loop2: detected capacity change from 0 to 512 [ 1464.347329][T22296] EXT4-fs (loop2): 1 orphan inode deleted [ 1464.353498][T22296] ext4 filesystem being mounted at /root/syzkaller-testdir165072189/syzkaller.SVerck/4120/file1 supports timestamps until 2038-01-19 (0x7fffffff)